These positions are to be filled under the OPM Government-Wide Direct Hire Authority for Information Security (INFOSEC) Positions for grades GS 9-15. This serves as a public notice for the use of the Direct Hire Authority in accordance with 5 U.S.C. 3327 and 3330 and 5 CFR 330. Under this recruitment procedure, applications will be accepted for each location/installation identified in this Public Notice. There may or may not be actual vacancies at the time you submit your application.

Requirements

• You must be a U.S. Citizen or National.
• This employer participates in the e-Verify program.
• If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System or are exempt from having to do so under the Selective Service Law. See www.sss.gov.
• If selected, your appointment may be subject to a suitability or fitness determination, as determined by a completed background investigation.
• If selected, you may be required to complete a one year probationary period.
• Positions are located agency-wide and may be filled as permanent, term, or temporary with a full-time or part-time work schedule. Pay will vary by geographic location.
• Appointments made with this authority may be processed as a new appointment into the Civil Service.
• The vacancies filled through these appointments have varying levels of background investigative requirements, up to a Top Secret - DOE "Q" clearance.
• Positions may be covered by a bargaining unit. Bargaining unit will vary by departmental element, grade, and/or location.
• Positions may require submittal of a Financial Disclosure Statement, OGE-450, Executive Branch Personnel Confidential Financial Disclosure Report within 30 days of entering the position and annually.
• Positions may be a Testing Designated Position (TDP) subject to applicant testing and random drug testing thereafter. Failure to test or a positive result on random drug tests conducted after appointment may result in removal from Federal employment.
• This position does not support 100% remote work. You will be required to report physically to the official reporting worksite as specified by the supervisor, but no less than 2 days per pay period.

Qualifications

You must meet both the Basic Requirement and the Specialized Experience to qualify for this series as described below. BASIC REQUIREMENT Applicants must have IT-related education or experience demonstrating each of the four competencies listed below at a proficiency equivalent to the next lower grade level in federal service. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. SPECIALIZED EXPERIENCE REQUIREMENTS In addition to the basic requirement, a qualified candidate's online application and resume must also demonstrate at least one year of specialized experience equivalent to the next lower grade level in the Federal service. Specialized experience for these positions are defined as: GS-09: You must have one year of specialized experience equivalent to the next lower grade (GS-07). Specialized experience for this position is defined as meeting at least 2 of 3 of the following: Identifying basic anomalies or errors in network or system services; Assisting in taking actions to mitigate security risks, such as installing security patches, running anti-virus or other utilities; Assisting in documenting security problems. OR Master's degree or equivalent graduate degree or 2 full years of progressively higher level graduate education leading to a master's degree or equivalent graduate degree; your education must demonstrate the knowledge, skills, and abilities necessary to do the work. For this position, this is defined as a degree in computer science, information technology management, computer programming, database management, computer hardware engineering, network administration, cloud computeing, information security & assurance, or a similarly related major. OR Combination of education and experience as described above. Less than one year of specialized experience may be combined with graduate education in excess of the amount required for the next lower grade level (i.e., credit hours beyond the first two years of full-time study may be credited). GS-11: You must have one year of specialized experience equivalent to the next lower grade (GS-09). Specialized experience for this position is defined as meeting at least 2 of 3 of the following: Assisting in implementing corrective or preventive actions network or system services; Taking actions to mitigate security risks, such as installing security patches, running anti-virus or other utilities; Documenting and initiating response to security problems. OR Ph.D. or equivalent doctoral degree or 3 full years of progressively higher level graduate education leading to a Ph.D. or equivalent doctoral degree; your education must demonstrate the knowledge, skills, and abilities necessary to do the work. For this position, this is defined as a degree in computer science, information technology management, computer programming, database management, computer hardware engineering, network administration, cloud computeing, information security & assurance, or a similarly related major. OR Combination of education and experience as described above. Less than one year of specialized experience may be combined with graduate education in excess of the amount required for the next lower grade level (i.e., credit hours beyond the first two years of full-time study may be credited). GS-12: You must have one year of specialized experience equivalent to the next lower grade (GS-11). Specialized experience for this position is defined as meeting at least 2 of 4 of the following: Carrying out activities leading to security certification or accreditation; Conducting integrated analysis of multiple audit logs (e.g., firewall, Web server); Participating in identifying and writing specifications to meet IT security requirements at the applications or network server level; Providing input in drafting information systems security documentation (e.g. systems security plans, risk assessments, disaster recovery plans, business continuity plans, user security guides). GS-13: You must have one year of specialized experience equivalent to the next lower grade (GS-12). Specialized experience for this position is defined as meeting at least 2 of 4 of the following: Evaluating, recommending, implementing, and disseminating IT security tools, procedures, and practices to protect information assets; Planning and coordinating the delivery of an IT security awareness training program for end users at all levels in the organization; Updating an organization's contingency or disaster recovery plans to respond to new security requirements or changes in the IT architecture; Coordinating development and implementation of policies and standards for classified or confidential network systems regarding sharing and safeguarding classified or confidential information. GS-14: You must have one year of specialized experience equivalent to the next lower grade (GS-13). Specialized experience for this position is defined as meeting at least 2 of 4 of the following: Recommending new or revised security measures and countermeasures based on the results of accreditation reviews; Evaluate new security authentication technologies such as public key infrastructure certificates, secure cards, and biometrics; Identifying and specifying information systems security requirements associated with migrations to new environments; Developing specifications to ensure compliance with security requirements at the systems or LAN level. GS-15: You must have one year of specialized experience equivalent to the next lower grade (GS-14). Specialized experience for this position is defined as meeting at least 2 of 4 of the following: Leading the development of long-range plans for IT security systems that anticipate, identify, evaluate, mitigate, and minimize risks associated with IT systems vulnerabilities; Identifying the need for changes based on new security technologies or threats, testing and implementing new policies, and instituting measures to ensure awareness and compliance; Planning and coordinating the development of specifications to meet security requirements at the company/agency or wide area network (WAN) level; Integrating security programs across disciplines including defining the scope and detail for security plans and policies applicable to the security program. NOTE: There is no substitution of education for specialized experience at the GS-12 through GS-15 levels.

Education

Contacts

• Address Office of the Chief Human Capital Officer 1000 Independence Avenue, SW Washington, DC 20585 US
• Name: DHA Questions Government-Wide Direct Hire
• Phone: 000-000-0000
• Email: [email protected]