Supervisory IT Specialist (Security)

Clarification from the agency

This vacancy announcement is open to current employees of the Administrative Office of the U.S. Courts.

The Supervisory Information Technology Specialist (Security) serves as the Security Automation Branch Chief within the Information Technology Security Office (ITSO), Security Mission Integration (SMI) Division. The incumbent leads ITSO solution engineering across the system development life cycle and oversees the development and sustainment of ITSO systems and applications, while driving new capability development in response to enterprise requirements.

The position reports to the SMI Division Chief and plays a critical role in protecting the confidentiality, integrity, and availability of Judiciary information systems.

Duties include, but are not limited to:

• Leading the branch by overseeing federal and contractor staff in accomplishing branch mission objectives and responsibilities.
• Planning and developing the branch budget for personnel, training, and systems, including supporting Judiciary Information Technology Fund (JITF) submissions.
• Ensuring the operational readiness, maintenance, and effectiveness of ITSO security systems.
• Integrating cybersecurity systems to maximize automation of security mitigations within cyber-relevant timeframes.
• Developing key performance metrics to measure the effectiveness and efficiency of cybersecurity systems.
• Providing cybersecurity architecture leadership, including developing threat models, assessing operational risk, and identifying required security controls.
• Developing and refining branch procedures to ensure compliance with Judiciary policies, standards, and security requirements.
• Providing security engineering and operational support for enterprise operations, cloud hosting, network services, and data center environments.
• Overseeing the management and security of ITSO systems in accordance with applicable policies, procedures, and security frameworks.
• Overseeing vulnerability management activities and ensuring timely mitigation of cybersecurity risks in accordance with the Judiciary Information Security Framework (JISF).
• Leading the development of cybersecurity capability roadmaps, detection engineering programs, and advanced alerting methodologies to address emerging threats and security gaps.
• Overseeing the development and implementation of cybersecurity tools and capabilities to enhance threat detection, response, and validation of security controls.
• Developing methodologies for continuously monitoring and assessing the Judiciary's cybersecurity posture and operational effectiveness.
• Serving as a subject matter expert on cybersecurity, networking, operating systems, and information security technologies and methodologies.

Conditions of employment

CONDITIONS OF EMPLOYMENT

1. All information is subject to verification. Applicants are advised that false answers or omissions of information on application materials or inability to meet the following conditions may be grounds for non-selection, withdrawal of an offer of employment, or dismissal after being employed.
2. Selection for this position is contingent upon completion of OF-306, Declaration of Federal Employment during the pre-employment process and proof of U.S. citizenship for competitive status positions or conversion to a competitive status position with the AO. If non-citizens are considered for hire into a temporary or any other position with non-competitive status or when it is confirmed by the AO Human Resources Office there are no qualified U.S. citizens for a competitive status position (unless prohibited by a law or statue), non-citizens must provide proof of authorization to work in the U.S. and proof of entitlement to receive compensation. Additional information on the employment of non-citizens can be found at USAJOBS Help Center | Employment of non-citizens/. For a list of documents that may be used to provide proof of citizenship or authorization to work in the United States, please refer to Form I-9, Employment Eligibility Verification.
3. All new AO employees will be required to complete an FBI fingerprint-based national criminal database and records check and pass a public trust suitability check.
4. New employees to the AO will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights/responsibilities, visit https://www.e-verify.gov/.
5. All new AO employees are required to identify a financial institution for direct deposit of pay before appointment.
6. You will be required to serve a trial period if selected for a first-time appointment to the Federal government, transferring from another Federal agency, or serving as a first-time supervisor. Failure to successfully complete the trial period may result in termination of employment.
7. If appointed to a temporary position, management may have the discretion of converting the position to permanent depending upon funding and staffing allocation.

Qualifications

Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions.

Specialized Experience: Applicants must have at least one full year (52 weeks) of specialized experience which is in or directly related to the line of work of this position. Specialized experience is demonstrated experience must demonstrate ALL areas defined below:

• Leading systems engineering efforts to deliver high-quality cybersecurity solutions that mitigate advanced persistent threats
• Managing Windows and Linux environments, including operating system architecture and associated security controls and configurations
• Leveraging application programming interfaces (APIs) to automate and orchestrate security devices
• Conducting system evaluations, including development of technical and operational requirements

• ISC2 certifications (CISSP preferred)
• ISACA certifications (e.g., CISM, CISA)
• SANS/GIAC security certifications
• Cisco certifications (CCNP Security or CCIE Security preferred)
• Splunk Architect-level certification (e.g., Splunk Core Certified Architect or equivalent advanced Splunk credentials)

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

We will review your resume and supporting documentation and compare this information to your responses on the occupational questionnaire to determine if you meet the minimum qualifications for this job. If you meet the minimum qualifications for this job, we will evaluate your application package, to assess the quality, depth, and complexity of your accomplishments, experience, and education as they relate to the requirements listed in this vacancy announcement.

You should be aware that your ratings are subject to evaluation and verification. If a determination is made that you have rated yourself higher than is supported by your resume and/or narrative responses, you will be assigned a rating commensurate to your described experience. Failure to submit the mandatory narrative responses will result in not receiving full consideration and/or rating credit. Deliberate attempts to falsify information may be grounds for not selecting you, withdrawing an offer of employment, or dismissal after being employed.

For this job announcement the following documents and/or information are required:

• Resume - Any written format you choose to describe your job-related qualifications.
• Citizenship - Include country of citizenship on resume.
• Notification of Personnel Action (SF-50) - All applicants outside of the AO must submit a copy of your latest SF-50 to verify current or former Federal employment status.
• Veterans Preference documentation - Certificate of Release or Discharge from Active Duty (DD Form 214), if applicable Application for 10-Point Veteran Preference (SF-15) and an official statement, dated 1991 or later, from the Department of Veterans Affairs or from a branch of the Armed Forces, certifying to the veteran's present receipt of compensation.

Next steps