Summary

This position is located in the Department of Health and Human Services, Health Resources and Services Administration, headquartered in Rockville, Maryland.

This announcement will close at 11:59 PM, on the day that 50 applications have been received or the closing date of the announcement, whichever comes first.

Duties

Help

WHAT YOU'LL BE DOING DAY TO DAY

As an IT Specialist (InfoSec), you will use your knowledge and experience to optimize business results and customer experience by:

• Engineer, design and implement information security threat response tools to prevent, detect, analyze and respond to malicious activity and/or anomalies across on-premises, hybrid, and cloud environments, including infrastructureas-a-service (IaaS), platform-as-a-service (PaaS), and software-as-a-service (Saas).
• Develop and track security operations performance metrics (e.g., detection coverage, mean time to detect, mean time to respond, alert fidelity) to evaluate tool effectiveness, process maturity, and overall security operations performance, and provide data-driven recommendations for continuous improvement.
• Maintain security operations tools at optimal operating performance and provide senior-level engineering support including assessing tool effectiveness, detection quality, and operational impact using defined security operations metrics to inform optimization and modernization efforts.
• Perform threat detection engineering, analysis, and forensics. Develop, tune and implement threat detection analytics and CND content for on-premises and cloud environments, including identity-centric, API, and control-plane telemetry aligned with Zero Trust
• Receive and analyze network alerts from various sources within the enterprise and determine possible
  causes of such alerts.

Requirements

Help

Conditions of employment

• U.S. Citizenship required
• Males born after December 31, 1959 must be registered or exempt from Selective Service - http://www.sss.gov
• Suitable for federal employment
• Appointment will be subject to the applicant's successful completion of a background security investigation and favorable adjudication. All information concerning qualifications is subject to investigation.
• All Federal employees are required to have Federal salary payments made by direct deposit to a financial institution of their choice.
• All qualification requirements must be met by the closing date of the announcement.
• Probationary (or trial) period may be required.

Qualifications

WHAT WE ARE LOOKING FOR

Basic Qualifications: The 2210 series has an Individual Occupational Requirement that must be met and can be viewed here. There is no Group Coverage Qualification Standard for this series.

BASIC REQUIREMENT: Individuals must have IT-related experience demonstrating each of the nine competencies listed below:

Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.

Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.

Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals.

Technical Competence - Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.

NOTE: Your resume must support your response to this question. Failure to provide sufficient evidence of the required competencies in your resume may result in an ineligible rating.

Minimum Qualifications: You must have one year specialized experience to perform successfully the duties of the position. To be creditable, specialized experience must have been equivalent to at least the GS-13 grade level in the Federal service performing ALL of the following:

• Engineering, designing, integrating, and implementing enterprise security operations tools across on-premises, hybrid, and cloud environments, including SIEM, SOAR, EDR, IDS/IPS, and digital forensics platforms, ensuring alignment with defense-in-depth and Zero Trust principles.
• Evaluating, testing, and validating security technologies; translating functional requirements into technical solutions; developing use cases and test plans; overseeing installation, configuration, troubleshooting, and optimization of security tools; and ensuring interoperability across enterprise infrastructure, identity systems, and cloud environments.
• Developing, tracking, and analyzing security operations performance metrics to assess detection quality, operational effectiveness, and process maturity, and making data-driven recommendations to improve SOC capabilities.
• Developing, tuning, and implementing threat detection analytics and cyber defense content; conducting event correlation, adversary technique analysis, network traffic and packet analysis; identifying anomalous activity; and performing trend analysis to identify detection gaps and improve enterprise monitoring coverage.
• Conducting advanced incident response and digital forensics activities including evidence collection and imaging, malware analysis, validation of IDS alerts, identification of exploited vulnerabilities, and analysis of network, cloud, and identity telemetry to determine scope, impact, and remediation strategies.

Documenting experience: IN DESCRIBING YOUR EXPERIENCE, PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. Qualifications are based on breadth/level of experience. In addition to describing duties performed, applicants must provide the exact dates of each period of employment (from MM/YY to MM/YY) and the number of hours worked per week if part time. As qualification determinations cannot be made when resumes do not include the required information, failure to provide this information may result in disqualification. Applicants are encouraged to use the USAJOBS Resume Builder to develop their federal resume.

Do not copy and paste the duties, specialized experience, or occupational application questionnaire from this announcement into your resume as that will not be considered a demonstration of your qualifications for this position.

In accordance with Office of Personnel Management policy, federal employees are assumed to have gained experience by performing duties and responsibilities appropriate for their official series and grade level as described in their position description. Experience that would not normally be part of the employee's position is creditable, however, when documented by satisfactory evidence, such as a signed memorandum from the employee's supervisor or an SF-50 or SF-52 documenting an official detail or other official assignment. The documentation must indicate whether the duties were performed full time or, if part time, the "percentage of times" the other duties were performed. It is expected that this documentation is included in the employee's official personnel record. In order to receive credit for experience in your resume that is not within the official series and grade level of your official position, you must provide a copy of the appropriate documentation of such experience as indicated above.

Experience refers to paid and unpaid experience, including volunteer work done through national Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to gain employment. You will receive credit for all qualifying experience, including volunteer experience. If such experience is on a part-time basis, you must provide the average number of hours worked per week as well as the beginning and ending dates of the experience so it can be fully credited.

OPM Qualification General Policies Website

This announcement will close at 11:59 PM, on the day that 50 applications have been received or the closing date of the announcement, whichever comes first.

Education

This job does not have an education qualification requirement.

Additional information

THINGS YOU NEED TO KNOW

Incentives may be authorized; however, this is contingent upon multiple factors, including funds availability. If authorized, certain incentives may require you to sign a service agreement to remain in the Federal government for a period of up to 3 years. Note: This statement does not imply nor guarantee an incentive will be offered and paid. Incentives may include the following: moving expenses, recruitment or relocation incentive; student loan repayment, superior qualifications appointment, creditable service for annual leave for prior non-federal work experience or prior uniformed military service, etc.

Bargaining Unit Position: No

Research position: No

Drug Screening Required: No

Applicants selected for this position will be subject to reasonable suspicion and post-accident drug testing upon hiring.

Career Transition Assistance Program/Interagency Career Transition Assistance Program (CTAP/ICTAP): For information on how to apply as an CTAP/ICTAP eligible see http://opm.gov/rif/employee_guides/career_transition.asp#ictap. To be considered well-qualified under I/CTAP, you must be rated eligible based on minimum qualifications for this position and submit the supporting documents listed under the required documents section of this job announcement.

Beginning January 1, 2010, agencies must seek prior approval from OPM before they can appoint a current or recent political appointee to a competitive or non-political excepted service position at any level under the provisions of title 5, United States Code. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, or Non-career SES employee in the executive branch, you MUST disclose that to the Human Resources Office.

USA Hire Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments here: https://help.usastaffing.gov/Apply/index.php?title=Reasonable_Accommodations_for_USA_Hire

Expand Hide additional information

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

Benefits

Help

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.