IT CYBERSECURITY SPECIALIST (INFOSEC)

Summary

THIS IS A NATIONAL GUARD TITLE 5 EXCEPTED SERVICE POSITION. This National Guard position is for an IT Cybersecurity Specialist, Position Description Number T57102P1 and is part of the Information Management /J6 of the Vermont Army National Guard. *This position is also advertised as a Title 32 vacancy under VT-12998251-AR-26-41 https://www.usajobs.gov/GetJob/ViewDetails/876588600

Duties

• The primary purpose of this position is to provide expertise in cybersecurity policy and process development; conducting audits to validate compliance; responsible for the risk management framework and ensures systems are operated and maintained IAW AR 25-2 and all applicable command, DA, JS and DOD security directives and procedures. MAJOR DUTIES: 1. Serves as an Information Technology Specialist providing Cybersecurity for a state National Guard headquarters. Operates within the DoD, Army and JS security procedures, operations, and practices. Ensures systems are operated and maintained IAW AR 25-2 and all applicable command, DA,JS and DOD security directives and procedures. Monitors Microsoft and DoD information security bulletins and notifications as they relate to Information Security Vulnerability Alerts (ISVAs). Coordination is required with peer state contacts, FORSCOM and MACOM elements and commercial vendors. Incumbent is required to ensure compliance with Federal, DoD, JS and DA Information Assurance/Cyber Security policies. Utilizes extensive knowledge of all areas of automation security to establish operating standards and procedures for the installation Information Security Program. Coordinates requirements with the responsible personnel and tracks suspense for completing required actions and reports virus problems in accordance with established procedures. Ensures the confidentiality, integrity and availability of systems and networks by planning, analyzing, developing, and implementing information systems security programs, policies, procedures, and tools. The incumbent serves as a subject matter expert (SME) in advising, posturing, preparing and auditing the organization for No Notice Army Cyber Readiness Assessments (NACRA), Organizational Inspection Program (OIP), and accreditations. May serve in a team lead role for auditing/assessment teams, such as a Site Assistance Visit (SAV). 2. Coordinates with Program Information System Security Managers and Organizational Information System Security Officer at other locations to verify or clarify information pertinent to cybersecurity/ Information Assurance procedures. Ensures all IS and COTS/GOTS within the DODIN­A (NG) Enclave are properly certified and accredited in accordance with, Risk Management Framework (RMF), and configuration management policies and practices prior to installing devices/systems on the production ICAN. The incumbent has program oversight responsibility for the Installation Campus Area Network (ICAN)/Local Area Network (LAN) Certification and Accreditation (C&A), documentation and meets AR 25-1, AR 25-2, DoDI 8500.01 (Cybersecurity) and DoDI 8510.01 (Risk Management Framework (RMF) for DoD Information Technology) and DoDI 8500.2 Information Security (IS) Implementation. Ensures all aspects of the RMF are implemented for all assets connected, or to be added, to the ICAN are accepted and approved by the appropriate Designated Approving Authorities (DAAs) for RMF Assess Only process and Configuration Management Board. 3. Maintains an operational knowledge base of past, current and possible future threats to the security posture by attending courses, conferences, seminars, online research, and information sharing between other Cyber Security/Information Security professionals. Using this knowledge base, the incumbent will be able to devise and implement new policies and procedures to prevent or react to security concerns. **Performs other duties as assigned.**

Qualifications

OPEN AREAS OF CONSIDERATION: AREA 1, 2, 3, 4 Area I: Current On-board Title 5 or Title 32 Dual Status Technicians (Tenure: 1-Career, 2-Conditional, 3-Indefinite or 4-Term ) - Only those current Vermont National Guard employees who are in permanent, indefinite, or term technician status as result of being competitively hired by the Vermont National Guard. Area II: All current Federal Employees from any agency. Area III: All current and former members of the VTNG. Area IV: United States citizens. * Veterans' Preference Rules are mandated by law and some applicants may receive priority consideration before other applicants without veterans' preference. MINIMUM REQUIREMENTS :Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. SPECIALIZED EXPERIENCE: 36 months experience, with 1-year specialized experience equivalent to at least the next lower grade. Specialized experience includes experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion. Experience in managing the function of the work to be performed. Experience which includes leading, directing and assigning work of personnel. Experience in managing the function of the work to be performed. Experience which includes leading, directing and assigning work of personnel. Length of time is not of itself qualifying. Candidates' experience should be evaluated based on the duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience, training, and education must show possession of the knowledge, skills, and abilities needed to fully perform the duties of the position. NOTE: This information must be supported in your resume to be considered for the position OR Education: A Ph.D or equivalent doctoral degree OR 3 full years of progressively higher level graduate education leading to such Ph.D. or equivalent doctoral degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or a degree that provided a minimum of 24 semester hours in one of more of the identified above fields identified above and required the development or adaptation of applications, systems or networks. Note: You must submit copies of your official transcripts. PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. CONTINUATION OF CONDITIONS EMPLOYMENT & NOTES: 1.Must be able to obtain and maintain at least a SECRET clearance. However, TOP SECRET (TS) security clearance with eligibility for access to Sensitive Compartmented Information (SCI) may be required based on the highest classification level utilized in the state. 2. This is an Information Security Workforce position. Selectee must meet position requirements for certification at Level II in Information Assurance Management (IAM-11). Incumbent must complete appropriate training and obtain required certifications IAW DoDI 8140 or DOD 8570.01 Mor applicable governing document(s) for Cyber workforce as an IA Technician Level within 9 months of employment pending training seat availability. 3. Position is designated as OM-ADM-001 within the Defense Cybersecurity Workforce as guided by NIST SP 800-181; National Initiative for Cybersecurity Education, Cybersecurity Workforce Framework. Which establishes the Tasks, Skills, Knowledge and Abilities expected of this position. (https ://www.nist.gov/itl/applied-cybersecurity/n ice/nice-framework-resource-center) 4.This position is designated as Essential Personnel and may be subject to duty in preparation for, or in response to, a state emergency or disaster declaration. Head of Agency requests to exceed 14 days in a calendar year must be approved in advance by the National Guard, Director of Manpower and Personnel (NGB-J1 ). Please be advised: 1. Specialized experience will be used to determine qualifications for the announced position. 2. An applicant's RESUME must provide, in detail, how they meet the specialized experience listed. 3. It must be documented with "from (mm/yy)" and "to (mm/yy)" dates and description of the specialized experience. 4. If education or a degree is required as part of the "Specialized Experience", you must include transcripts. Do not copy the specialized experience qualifications word for word and place into your resume; you must describe your personal experience as it pertains to each statement.

Education

Substitution of Education for Specialized Experience is allowed. 1) Qualifying based on education alone: Education may be substituted for specialized experience with a Ph.D or equivalent doctoral degree OR 3 full years of progressively higher level graduate education leading to such Ph.D. or equivalent doctoral degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or a degree that provided a minimum of 24 semester hours in one of more of the identified above fields identified above and required the development or adaptation of applications, systems or networks. NOTE: In order to qualify for this position using education, you must submit a copy of your transcripts. FOREIGN EDUCATION: If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in an accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. For further information, visit: http://www.ed.gov/about/offices/list/ous/international/usnei/us/edlite-visitus-forrecog.html.

Evaluations

Once the announcement has closed, your resume and supporting documentation will be used to determine if you meet the qualifications listed on this announcement. If you are minimally qualified, your resume and supporting documentation will be compared to your responses on the assessment questionnaire to determine your level of experience. If you rate yourself higher than is supported by your application package, your responses may be adjusted and/or you may be excluded from consideration for this position. If you are found to be among the top qualified candidates, you will be referred to the selecting official for employment consideration. Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities and other characteristics): -Knowledge of and skill in applying IT security principles, methods, and tools; and the IT security environment sufficient to participate in defining IT security requirements. -Knowledge of and skill in applying methods for evaluating, implementing, and disseminating IT security tool and procedures; IT security certification and accreditation requirements; network operations and protocols; and computer forensics principles. -Ability to implement and support IT security applications. -Ability to develop, implement, and coordinating activities designed to ensure, protect, and restore IT systems, services, and capabilities. -Ability to monitor and evaluate systems: compliance with IT security requirements. -Skill in providing advice and guidance in implementing IT security policies and procedures in the development and operation of network systems. -Skill in ensuring proper protection of evidence used in investigating computer crimes. Please be advised that the applicant rating will be evaluated on the following occupational competencies: Computer Forensics Computer Network Defense Data Management Oral Communication Written Communication Self-Management

How to apply

To apply for this position, you must complete the online application/Occupational Questionnaire and submit the documentation specified in the Required Documents section below. A complete application package must be submitted by 11:59 PM (EST) on the closing date of the announcement to receive consideration. To begin, click Apply to access the online application. You will need to be logged into your USAJOBS account to apply. If you do not have a USAJOBS account, you will need to create one before beginning the application. Follow the prompts to select your resume and/or other supporting documents to be included with your application package. You will have the opportunity to upload additional documents to include in your application before it is submitted. Your uploaded documents may take several hours to clear the virus scan process. After acknowledging you have reviewed your application package, complete the Include Personal Information section as you deem appropriate and click to continue with the application process. You will be taken to the online application which you must complete in order to apply for the position. Complete the online application, verify the required documentation is included with your application package, and submit the application. To verify the status of your application, log into your USAJOBS account (https://my.usajobs.gov/Account/Login), all of your applications will appear on the Welcome screen. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: https://www.usajobs.gov/Help/how-to/application/status/. Once your online application is submitted you will receive a confirmation notification by email. Your application will be evaluated by the Human Resources Office to determine your eligibility for the position. After the evaluation is complete, you will receive another notification regarding the status of your application.

What to expect next

Once your online application is submitted you will receive a confirmation notification by email. Your application will be evaluated by the Human Resources Office to determine your eligibility for the position. After the evaluation is complete, you will receive another notification regarding the status of your application.

Required documents

To apply for this position, you must submit a complete Application Package which includes: 1. Resume: resume must show relevant experience, where you worked, job title, detailed duties and accomplishments written in your own words (Do not plagiarize), employer's name and address, supervisor's name and phone number, starting and ending dates (including Month and Year, e.g., 02/2017, Feb 2017, etc.), hours per week and salary. If you are a current Federal employee or previous Federal employee, provide your position title, pay plan, series and grade. Your detailed experience should be listed under each job title with starting and ending dates. Resume must show applicants name and contact information. Other supporting documents (as applicable): DD-214 Official Transcripts Veterans Preference Certifications For current Federal employees: Latest SF 50, Personnel Action NGB 22 (if you are a former member of the VTNG) Helpful Hints for Applying: - Ensure that your resume contains your full name, address and phone. - Include details about the experience that relates to the position you are applying for. - Be specific and always include Month and Year for the dates of your experience. - Be sure to include your applicable military experience and explain the duties of the MOS/AFSC held. In describing your experience, please be clear and specific. Please note that if, after reviewing your resume and or supporting documentation, a determination is made that you have inflated your qualifications and or experience, your rating can and will be adjusted to more accurately reflect your abilities, or you may lose consideration for this position. If you are using education to qualify for this position or education is a mandatory requirement to meet qualifications, You must submit copies of college transcripts that identify each course, the college or university, semester or quarter hours earned, grade and grade-point received. Submitting a certificate or a degree will not suffice. You must submit transcripts when required. Photocopies are acceptable.

Other information

Veterans Preference Veterans Preference: If you are claiming veteran's preference, you MUST submit the appropriate documentation. Failure to do so WILL result in the loss of veteran's preference, and will possibly impact your placement on the certificate. For more veterans' information please click https://www.fedshirevets.gov/job/vetpref/index.aspx. - 10-Point Veterans' Preference: You must submit all supporting documentation as specified on the SF-15, "Application for 10-Point Veterans' Preference". You can locate the SF 15 at https://www.opm.gov/forms/pdf_fill/SF15.pdf - 5-Point Veterans' Preference: You MUST submit a copy of your DD-214 which includes Character of Service (usually Member-4 copy). If you are currently active duty, you may submit written documentation (certification) from your branch of service certifying that you are expected to be discharged or released from active duty under honorable conditions no later than 120 days after the date the certification is signed. The certification should also include when your terminal leave will begin, your rank and dates of active duty service. If you are currently serving on active duty and expect to be released or discharged within 120 days you must submit documentation related to your active duty service which reflects the dates of service, character of service (honorable, general, etc.), and dates of impending separation. If you are a male applicant who was born after 12/31/1959 and are required to register under the Military Selective Service Act, the Defense Authorization Act of 1986 requires that you be registered or you are not eligible for appointment in this agency (https://www.sss.gov/RegVer/wfRegistration.aspx). If you are currently serving on active duty and expect to be released or discharged within 120 days you must submit documentation related to your active duty service which reflects the dates of service, character of service (honorable, general, etc.), and dates of impending separation.