Who May Apply: US Citizens
In order to qualify, you must meet the education and/or experience requirements described below. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). You will receive credit for all qualifying experience, including volunteer experience. Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application. Additional information about transcripts is
in this document.
Specialized Experience: One year of specialized experience which includes 1. Implement security controls utilizing framework such as NIST 800-53 Rev4/5 on Industrial Control Systems, Facility Related Control Systems, and Supervisory Control and Data Acquisition Systems; 2. Provide technical support to Information System Security Officers and Information System Owners throughout the Risk Management Framework process; 3. Utilize Enterprise Mission Assurance Support Service (eMASS) to manage and track cybersecurity controls, including control implementation, testing, and remediation; 4. Collaborate with Information Technology teams to identify and document cybersecurity vulnerabilities and develop remediation plans; 5. Develop System Security Plans (SSPs) and other RMF-related documentation, including Security Assessment Reports (SARs) and Plan of Action and Milestones (POA&Ms).
This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service (GS-09).
(1)
Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Examples of IT-related experience demonstrating this competency include: leading others by setting the standards for the quality of work, even in the most difficult and/or high pressure circumstances; reviewing and editing work completed by others to ensure that the quality of work meets acceptable work standards.
(2)
Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Examples of IT-related experience demonstrating this competency include: using expertise and experience to address complex problems, questions, or complaints; anticipating customer needs and modify the team's work activities, processes, and practices to meet these needs; collaborating across team and outside of own team to organize planning sessions that elicit ideas for improving customer service and support.
(3)
Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Examples of IT-related experience demonstrating this competency include: clearly explaining and defending complex ideas, appropriately adapting to each audience's level of knowledge; actively listening and clarifying points when presenting highly complex and controversial findings; using well-constructed, fact-based arguments to persuade stakeholders/officials to take action on suggestions for improvement.
(4)
Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Examples of IT-related experience demonstrating this competency include: identifying and solving problems by gathering and applying information from a variety of materials or sources that provide several alternatives; recognizing and taking action to address non-routine problems; soliciting feedback from multiple stakeholders to understand an issue or problem and accurately assess its root causes and potential solutions; seeking supervisory review where appropriate.
OR
Education: Ph.D. or equivalent doctoral degree or 3 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, three full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.