RISK MANAGEMENT & CYBERSECURITY SPECIALIST- ALTERNATE HIRING AUTHORITY

Clarification from the agency

This job announcement will be used to gather applications that may or may not result in a referral or selection under the Alternate Hiring Authority (AHA)

• Performs cybersecurity analysis for the administration of the Air Force Materiel Command's (AFMC) ISR Cybersecurity Program.
• Performs detailed security control reviews and authorization activities for foundational security protections on CDSs, TS/SCI weapon systems, ISR airframes, and base infrastructure.
• Guides the development and remediation of Plans of Action and Milestones to address identified security architecture vulnerabilities and areas of non-compliance with AF IC, ODNI, NSM8, and other directives.
• Provides authoritative technical expertise and recommendations on cybersecurity risk management and security system authorization decisions, analyzing and recommending risk acceptance for systems requiring exceptions by evaluating mission impact versus architectural cybersecurity risk.

Conditions of employment

• U.S. Citizenship Required
• All new DCIPS employees are required to complete a two-year DCIPS trial period.
• Position is designated special-sensitive and incumbent must be able to obtain and retain a TOP SECRET (TS) security clearance with access to Sensitive Compartmented Information (SCI). A non-disclosure agreement must be signed.
• If authorized, PCS will be paid IAW JTR and AF Regulations. If receiving an authorized PCS, you may be subject to completing/signing a CONUS agreement. More information on PCS requirements, may be found at: https://afciviliancareers.com/regulatory/
• This position is subject to provisions of the DoD Priority Placement Program
• Must be registered for Selective Service, see Legal and Regulatory Guide
• Drug Testing: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Testing Program. Employee must pass initial and periodic short notice drug testing.
• Employee may be required to work other than normal duty hours, to include evenings, weekends and/or holidays
• Employee must maintain current certifications
• Disclosure of Political Appointments
• Direct Deposit: All federal employees are required to have direct deposit
• Recruitment Incentive and/or Relocation Incentive may be authorized for this position
• This position is a Defense Civilian Intelligence Personnel Systems (DCIPS) position implemented under Section 504, Title V of Public Law 99-569, Intelligence Authorization Act for Fiscal Year 1987, as codified in Sec 1601, Chap 83 of Title 10 United
• DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005
• If you are a veteran claiming veterans' preference, as defined by section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For additional information on DCIPS, http://dcips.defense.gov/
• Upon completion of your probationary/trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.
• POLYGRAPH: Incumbent may be subject to psychological screening/ polygraph testing as an inherent primary requirement of their position.

Qualifications

In order to qualify, you must meet the General experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions, Competency-Based Qualification Standard for the Information Technology Management Series

BASIC REQUIREMENT OR INDIVIDUAL OCCUPATIONAL REQUIREMENT:
For positions at the GG-12, GG-13, GG-14, or GG-15 grade levels, applicants may qualify by meeting or exceeding the minimum proficiency level established for each of the required competencies, in addition to meeting the specialized experience requirement as demonstrated through the assessment of skills identified through the agency job analysis. There may be instances where applicants do not fully meet the competency requirements outlined in this standard but are nonetheless demonstrably well qualified to perform the work. Agencies should exercise judgment in applying these standards, as they have flexibility to qualify an applicant with a deficit in one area if that deficit is offset by strengths in other areas identified through the job analysis. Any rationale for such deviations must be thoroughly documented.

In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below:


EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position. Examples of creditable experience include: Attention to Detail , Customer Service, Oral Communication, and Problem Solving skills with the quality level experience which demonstrates the possession of the knowledge, skills, abilities and competencies necessary for successful job performance required for this position. Quality experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Examples of creditable experience include: knowledge of a wide range of cybersecurity concepts, principles, and practices; knowledge of risk management framework, and network security architecture design concepts such as defense-in-depth, zero trust, and multi-level security; and the ability to apply information security program management principles to the system architecture.

Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas:

1. Extensive and demonstrative knowledge of risk management processes and requirements in alignment with Risk Management Framework (RMF), and organizational risk management directly related to the display, discussion, processing, storage, and connectivity of classified data.
2. Expert knowledge of network security architecture design concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust, cross domain solutions/multi-level security, data-centric security) relative to the enterprise information technology (IT) goals and objectives.
3. Demonstrated ability to apply information security program management principles to the system architecture lifecycle principles, policies, and guidelines.
4. Expert knowledge of incident response and handling methodologies.
5. Deep understanding of, and ability to communicate, system and software life cycle management security principles, including secure design and development.
6. Ability to communicate effectively, both orally and in writing, to produce Senior-level technical reports and/or briefings for multiple forums and audiences and ability to make decisions independently in a self-directed manner in support of a team and/or organizational goals.
7. Ability to work independently to plan, organize, and carry out complex assignments, manage competing priorities, and meet deadlines within a dynamic environment.

Ideal Candidate: The ideal candidate for this role is a self-directed and highly motivated professional with a deep understanding of security architecture, design, and system authorization processes mandated by the DoD and Intelligence Community. This individual will possess the ability to work independently to plan, organize, and carry out complex assignments in a dynamic environment with competing priorities. The ideal candidate will have expert-level knowledge to analyze and resolve complex cybersecurity issues for National Security Systems and will be resourceful in interpreting and applying broad and often vague guidelines to unique and technologically advanced architectures. Exceptional oral and written communication skills are crucial, as is the ability to produce senior-level technical reports and brief multiple audiences. An advanced cybersecurityrelated or professional degree is highly desirable.


PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated for this job based on how well you meet the qualifications above.

Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

BASIS OF RATING: Your application will be rated under the Cut Point procedures based on the extent to which the quality, depth, and complexity of your experience and education relate to the qualification requirements. Additional points are not added for Veteran's Preference; however, Veteran's Preference is considered where applicable.

Best Qualified Group: Candidates in this category possess exceptional skills and experience to exceed well above the minimum requirements.
Fully Qualified Group: Candidates in this category possess good skills and experience above the minimum requirements.
Basically Qualified Group: Candidates in this category meet the minimum education and/or experience requirements.

Your responses to the questionnaire may be compared to the documents you submit. The documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job.

Applicants who disqualify themselves will not be evaluated further.

The following documents are required and must be provided with your application. Applicants who do not submit required documentation to determine eligibility and qualifications will be eliminated from consideration. Other documents may be required based on the eligibility/eligibilities you are claiming. Click here to view the AF Civilian Employment Eligibility Guide and the required documents you must submit to substantiate the eligibilities you are claiming.

1. Online Application: Questionnaire
2. Resume: Your resume may NOT exceed two pages, and the font size should not be smaller than 10 pts. You will not be considered for this vacancy if your resume is illegible/unreadable. Additional information on resume requirements can be located under "How To Apply".
3. Transcripts/Registration/License: If qualifying on education/position requires education, you must submit copies of your transcripts and if required for the position, submit an active, current registration/license.

OPTIONAL DOCUMENTS:
Performance Appraisals for Current Federal Civilian Employees - Most recent performance appraisals (dated within last 3 years) showing the official rating of record, signed by a supervisor, or statement why the performance appraisal is unavailable.
Awards for Current Federal Civilian employees - List any awards received within the last 3 years on the resume.
Note: Applicant must not submit award Notification of Personnel Actions (SF50s).

Next steps