Full Job Description
The primary purpose of this position is to exercise second level supervisory and managerial authorities over the Directorate of Operations.
**Salary ranges include local market supplements.**
Duties
Help
• Plans, organizes, and directs the activities of 33 CYOS Operations.
• Exercises supervisory personnel management responsibilities.
• Directs the execution of mission operations including the Detection, Prevention, and Response to malicious or suspicious events across over one-million computer workstations within the AFIN and at various networks with multiple classification levels.
• Exercises broad responsibility and authority for planning and managing the overall efficiency and effectiveness of assigned operations and communicating the cyber strategic plan, mission, vision, and values to employees within DO.
• Assists in planning, administering, and monitoring manpower resource requirements.
Requirements
Help
Conditions of employment
• U.S. Citizenship Required
• All new DCIPS employees are required to complete a two-year DCIPS trial period.
• If authorized, PCS will be paid IAW JTR and AF Regulations. If receiving an authorized PCS, you may be subject to completing/signing a CONUS agreement. More information on PCS requirements, may be found at: https://afciviliancareers.com/regulatory/
• This posn is subject to provisions of the DoD Priority Placement Program
• Must be registered for Selective Service, see Legal and Regulatory Guide
• The employee may be required to work other than normal duty hours, which may include evenings, weekends, and/or holidays.
• Employee must maintain current certifications
• Disclosure of Political Appointments
• Direct Deposit: All federal employees are required to have direct deposit
• Depending on the type of position (competitive/excepted) you are selected for, you will be required to serve a 1-year probationary period OR 2-year trial period.
• Upon completion of your probationary/trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.
• This is a Mission-Essential position performing a Mission-Critical-Function which must continue uninterrupted after the occurrence of an emergency and continued through full resumption of all functions (Reference AFI 36-129, dated 17 May 2019.)
• The employee may be required to travel to CONUS and OCONUS locations, to include austere locations. Notice of the need to travel may be received in less than three days. Employee may be required to travel on military and commercial aircraft.
• A bachelor's degree in computer systems/science, Cyber Operations, Cybersecurity, or other IT related field is desired. A master's degree is preferred.
Qualifications
This is a GG-14 position in the Defense Civilian Intelligence Personnel System (DCIPS). The GG-14 duties for the "Supervision/Management" work category are at the "Senior" work level and are equivalent to those at the GS-14 level. The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job.
In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions for the GS-2210, Information Technology (IT) Management Series (Alternative A).
BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT:
Experience: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate.
For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.
1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below:
EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include advanced knowledge and skill in application of concepts, and practices in two or more areas: cyberspace security, computer programming, computer operating systems (Windows, UNIX), malware forensics; threat analysis, artificial intelligence/machine learning; cyber incident handling/response, penetration testing, and software/malware reverse engineering. Advanced knowledge of the application of Information Assurance (IA), Mission Assurance (MA) and threat hunting technologies and techniques, analysis of computer systems, operating systems, network communication protocols, computer and network architectures and virtual machine (VM) technology; ability to analyze and correlate data in order to distinguish evidence of attacks or intrusions from normal activity. Extensive knowledge and skill in one or more of computer operating systems (Unix, Windows, etc.) enterprise services, file systems, security, configuration and analysis; network operations and security including net flows, protocols, PCAP, etc.; computer programming and scripting; and malware identification and analysis; and system forensics.
KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:
1. Advanced knowledge and skill in application of concepts, and practices in two or more areas: cyberspace security, computer programming, computer operating systems (Windows, UNIX), malware forensics; threat analysis, artificial intelligence/machine learning; cyber incident handling/response, penetration testing, and software/malware reverse engineering.
2. Advanced knowledge of the application of Information Assurance (IA), Mission Assurance (MA) and threat hunting technologies and techniques, analysis of computer systems, operating systems, network communication protocols, computer and network architectures and virtual machine (VM) technology; ability to analyze and correlate data in order to distinguish evidence of attacks or intrusions from normal activity.
3. Advanced knowledge of IA and MA technologies such as COMSEC, COMPUSEC, EMSEC, and OPSEC, computer systems, digital communications systems, network protocols, and computer architectures; and computer security penetration tools and techniques. Extensive knowledge and skill in one or more of computer operating systems (Unix, Windows, etc.) enterprise services, file systems, security, configuration and analysis; network operations and security including netflows, protocols, PCAP, etc.; computer programming and scripting; and malware identification and analysis; and system forensics.
4. Advanced knowledge and skill in identifying, analyzing, articulating and executing program goals and objectives, work processes, and administrative operations of the organization in support of major issues and operational challenges. Skill in developing new or modified work methods, processes, or information protection procedures; and ability to develop and articulate technical direction and approaches to formulating interoperability plans, implementation plans, and contingency plans involving communications and connectivity between major command and control systems; and proficiency in applying analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of program operations.
5. Ability to clearly and effectively discuss and present program objectives, managerial tasks, and technical information verbally and in writing to management and professional personnel at all levels within DoD and other government agencies; and ability to effectively perform in both leadership and fellowship roles as part of teams comprised of military, federal civilian, and contract employees from within and outside of the employee's work
center and unit, to include effective interpersonal skills; the ability to plan, organize work, and consult effectively with co-workers, as well as the ability to recognize and assume informal leadership roles as appropriate to the team tasking and dynamics.
6. Ability to plan, organize, and direct the functions and mentor, motivate, and appraise the staff of an organization through subordinate supervisors; and ability to analyze, plan, and adjust work operations of one or more organizational segments to meet program requirements and objectives within available resources.
PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.
VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Education
CONDITIONS OF EMPLOYMENT CONT'D
POSITION DESIGNATION: Position is designated special-sensitive and requires eligibility for access to Sensitive Compartmented Information (SCI), other intelligence-related Special Sensitive information, or involvement in Top Secret Special Access Programs (SAP) to fully perform the duties and responsibilities of the position. A non-disclosure agreement must be signed.
DRUG TESTING: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Drug Demand Reduction Program. Employee must pass initial and periodic short notice drug testing. Illegal drug use by employees in sensitive positions presents a clear threat to the mission of the Air Force, national security, and public safety.
IA CERTIFICATION: Information Assurance Certification is a condition of employment. This position includes information assurance (IA) work as a paramount duty requirement. Per DoD 8570.01-M, the incumbent of this position must achieve the appropriate IA certification within six months of assignment of these duties. A waiver of this six-month requirement may be granted per DoD 8570.01-M, C3.2.4.2 or C3.2.4.3. Failure to receive the proper IA certification may result in removal from this position.
TRAINING COMPLIANCE: Compliance with Air Force training specified in the Training and Readiness Manual; and applicable higher headquarters guidance memoranda for Cyber-Crew Training, Standardization and Evaluation, and Cyberspace Operations, is a condition of employment. The incumbent must achieve and maintain appropriate qualification requirements as specified and attain Mission Ready (MR) certification within 10 duty days after MQT. The Deputy Director may extend this period only in cases where the member is unable to achieve full Mission Readiness (MR)
by the designated time through no fault of his/her own. Delays due to an individual's course/certification failures and an individual's failure to plan adequate time to meet all requirements cannot be waivered. Failure to achieve and maintain MR requirements may result in removal from this position. If an employee obtains MR but later loses his/her certification and is unable to regain certification, or the employee repeatedly regains and subsequently loses MR in less than three-years' time, the employee will be considered in violation of the MR condition of employment and will be removed from this position and/or processed for termination of employment.
KEY DESIGNATION: The duty of this position meets all requirements as a category 4 designation and shall not be vacated during a national emergency or mobilization without seriously impairing the capability of the parent Federal Agency or office to function effectively. This position must be removed from the Ready Reserve and CAN NOT become a member of the Ready Reserve. (IAW: DoDD 1200.7, "Screening the Ready Reserve,")
TRAINING DURATION: Training required/provided for this position may be 80 hours or longer in duration and may require that the employee sign Continuing Service Agreement to attend the course. For all IQT, MQT or training required for position-related certification/readiness or continuing education, the employee must accept the CSA as a condition of employment.
CYBER SPECIFICATIONS: The incumbent requires strategic, operational and tactical expertise in cyberspace operation
