You will serve as a Cybersecurity Watch Officer assigned to the NASA Security Operations Center (SOC) responsible for overseeing the day-to-day shift work of the Cyber Security Operations Center to include Triage, Monitoring & Detection, Event Management, and Cyber Threat Analysis. The SOC operates 24 hours a day, 365 days a year.

Duties

Conduct Security Operations for the Agency; identify anomalous activities; ensure incidents are correctly analyzed, defended, investigated, and reported. Create and implement end-to-end cyber security operations playbooks based on technical cybersecurity expertise, applicable policies, and rules of engagement. Lead a shift of workers performing cybersecurity triage, monitoring and detection, event management, watch office, and cyber threat analysis; monitor, detect, prevent security incidents, and respond to, mitigate, and remediate security incidents. Analyze, interpret, evaluate, integrate, produce, and disseminate cybersecurity products such as briefings, white papers, and reports in support of the needs of enterprise. Analyze and provide guidance on in-depth, raw, and finished security operations center reports; distribute consistent information using established guidelines for review and approval. Track ongoing cyber threats against the NASA enterprise and respond to network/system breaches (actual or attempted intrusion, computer viruses, worms, Trojan horses, etc.) using in-depth knowledge of Defensive Cyber Operations principles. Leverage a robust network of cyber defenders as well as other intelligence components to better understand identified intrusion sets and deviations and to build better defensive cybersecurity operations strategies. Work with stakeholders to resolve cyber security incidents and ensure compliance through tools and processes that enable proactive activities to prevent or respond to cyber incidents. Foster a culture of engagement, diversity, inclusiveness, excellence and innovation. Champion NASA's commitment to Diversity, Equity, Inclusion and Accessibility to create an environment that promotes a commitment to safety, integrity, and teamwork.

Requirements

• This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S.
• Position subject to pre-employment background security investigation.
• You must meet qualifications requirements by the closing date of this announcement.
• If selected, you will be required to complete a financial disclosure statement.
• Selectee(s) will be required to work onsite at the duty location.
• This position may require a one-year probationary period.
• This is a full-time position which requires shift work in support of a 24/7 operations and may include work in the evening, weekend, and/or holiday.
• This position has been designated "Mission Essential." In the event of severe weather conditions, furlough, or other emergency type situations, the specialist is required to report to work or remain at work as scheduled to support mission operations.

Qualifications

Specialized experience is experience that has equipped you with the particular ability, skill, and knowledge to successfully perform the duties of this position and is typically in or related to this line of work. To qualify for GS-13, you must have one year of directly related specialized experience equivalent to the GS-12 level: Working within a cyber security operations center to monitor, detect, and prevent security incidents; Using cyber tactics, techniques and procedures (TTPs) to respond to information system security incidents such as malware, ransom ware, phishing, etc.; Detecting and analyzing cyber threats using computer forensics techniques such as root cause analysis, system image analysis, log analysis, etc.; Developing standard operating procedures (SOPs)/playbooks to remediate and restore information system and network services. AND If you are qualifying based on experience, you MUST also have IT-related experience demonstrating each of the four competencies listed below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Your resume must include a clear and detailed narrative description, in your own words, of how you meet the required specialized experience. Experience statements copied from a position description, vacancy announcement or other reference material constitutes plagiarism and may result in disqualification and losing consideration for the job.

Education

This job does not have an education qualification requirement.

Contacts

• Address Marshall Space Flight Center Marshall Space Flight Ctr Huntsville, AL 35811 US
• Name: NASA Shared Services Contact Center
• Phone: 1-877-677-2123
• Email: [email protected]