Summary This is a public notice flyer to notify interested applicants of anticipated vacancies. Applications will not be accepted through this flyer. Interested applicants must follow the directions in the "How to Apply" section of this flyer to be considered. There may or may not be actual vacancies filled from this flyer. Notice of Result letters will not be sent to applicants who respond to this flyer. Responsibilities You will perform cyber threat hunting, incident response, and other blue team activities to detect, deter, disrupt, and deny adversary activities. You will analyze security related events to provide a threat-based security assessment and initiate a cyber-incident response as necessary. You will provide research, data analysis, sensor optimization, and custom signature development to maximize effectiveness and achieve mission success. You will oversee the performance of contract support staff as a quality evaluator. Requirements Conditions of Employment Qualifications You must have one year of information technology related experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to the four competencies above your resume must demonstrate at least one year of specialized experience at or equivalent to the GS-12 grade level or pay band in the Federal service or equivalent experience in the private or public sector. Specialized experience must demonstrate the following: 1) Performing network security monitoring, threat hunting, Security Operations Center (SOC) activities, Security Information and Event Management (SIEM) solutions, forensics, or detecting threats within Information Technology (IT) or Operational Technology (OT) environments; 2) Applying advanced analytical techniques and methodologies and the ability to implement them by collecting and analyzing the data flow from sensors to determine potential and actual intrusions; 3) Evaluating the need for threat and vulnerability assessments, systems change proposals, etc.; 4) Applying advanced knowledge in the design of AIS security policies and specific systems security programs using a comprehensive, integrated, and systematic application of multiple automation security disciplines to develop an optimum automation security posture including hardware/firmware/software/facility security, and information security; and 5) Analyzing computer utilization and system performance by identifying intrusions, misuse, malfunctions, misconfigurations, and inefficiencies, in order to recommend changes to system design, software, operating procedures, and other protection mechanisms to ensure system integrity. NOTE: This information must be supported in your resume. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. Education Additional Information This position is covered by the Department of Defense Priority Placement Program. This announcement uses the Certain Personnel of the DoD direct hire authority to recruit and appoint qualified candidates to positions in the competitive service. This position has been designated as a Cyberspace Workforce position in the DoD Cyber Workforce Framework (DCWF) work role of Cyber Defense Analyst (code 511) and Cyber Defense Incident Responder (code 531) proficiency level Intermediate and, as a condition of employment, the incumbent of the position is required to obtain and maintain qualification in accordance with DoD M8140.03 Cyber Workforce Qualification and Management Program dated February 15, 2023 and supporting Department of Navy policies. 1. Obtain the foundational qualification within nine months and the residential qualification within 12 months of appointment and maintain those credentials as described in DoD M8140.03 for DCWF role of Cyber Defense Analyst (code 511) and Cyber Defense Incident Responder (code 531) proficiency level Intermediate. For more information, please review DoD M8140.03 and supporting DON policies. 2. Participate in continuous professional development program as described in DoD M8140.03. An annual 20 hour minimum of Cyber Workforce related continuous professional development must be documented and completed in a current individual development plan signed by both the employee and supervisor. Continuous professional development begins in the fiscal year after the employee has obtained both foundational and residential qualification requirements. The work is primarily sedentary. Some work may require walking and standing in conjunction with travelto and attendance at meetings and conferences away from the work site. Some employees maycarry light items, such as papers, books, or small parts, or drive a motor vehicle. The work doesnot require any special physical effort. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities. Several vacancies may be filled. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf. Veteran's preference does not apply when selecting individuals under this specific hiring authority. However, if you claim veteran's preference, you will be required to submit supporting documentation with your application as described in the Required Documents section below.