Summary This announcement is issued under the Direct Hire Authority (DHA) to recruit for positions for which there is a critical hiring need. Selectee(s) will receive a career or career-conditional appointment in the competitive service and may be required to serve a one-year probationary period. Who May Be Considered: U.S. Citizens View common definitions of terms found in this announcement. Responsibilities Providing direction and guidance for a multi-functional, cyber operations team responsible for defending critical, U.S. information systems and technical assets. Serving as an expert on a team comprised of threat analysts, technical analysts, computer network defense analysts, incident response analysts, and incident managers. Managing cybersecurity defense activities, including the maintenance of indicators in intrusion detection and prevention systems. Manage cybersecurity defense activities including the evaluation of anomalous activity in network traffic, and the reporting of detected incidents and suspicious activity to relevant stakeholders. Leading incident response activities, including forensic collection of images and artifacts, analysis of resulting data, and development of remediation and mitigation recommendations. Providing senior leadership with situational awareness on priority cyber defense actions, and ensure that leaders are able to make informed decisions during critical events. Coordinating efforts with internal and external working-level partners, including internal peers with responsibilities inside their AOR, interagency partners, international partners, and partners in private industry. Providing briefings and serve as a SME both internal to the agency and to external stakeholders, as needed. Requirements Conditions of Employment You must be a U.S. citizen. Selective Service - Males born after 12/31/59 must be registered or exempt from Selective Service, see http://www.sss.gov/ All Federal employees are required to participate in Direct Deposit/Electronic Funds Transfer for salary payments. DHS uses E-Verify, an Internet-based system, to confirm the eligibility of all newly hired employees to work in the United States. Learn more about E-Verify, including your rights and responsibilities. This position has been identified as a drug testing designated position (TDP) for purposes of the CISA's Drug-Free Workplace Program. All applicants tentatively selected for this position will be required to submit to a drug test to screen for illicit/illegal drug use prior to receiving a final offer of employment. A final offer of employment is contingent upon a negative drug test result. After appointment, you may be subject to periodic random drug testing. You must be able to obtain and maintain a security clearance suitable for Federal employment as determined by a background investigation. This may include a credit check, a review of financial issues, as well as certain criminal offenses and illegal use or possession of drugs. One-year probationary period may be required. This position may be designated as essential personnel. Essential personnel must be able to serve during continuity of operation events without regard to declarations of liberal leave or government closures due to weather, protests, and acts of terrorism or lack of funding. Failure to report for or remain in this position may result in disciplinary or adverse action in accordance with applicable laws, rules, and regulations (5 U.S.C. 7501-7533 and 5 CFR Part 752, as applicable). Qualifications You qualify for the GS-13 and GS-14 grade levels if you possess information technology related experience demonstrating each of the four required competencies: Attention to Detail: Is through when performing work and conscientious about attending to detail. Customer Service: Works with clients and customers to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication: Expresses information to individuals or groups effectively, taking into account the audience and nature of the information; makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving: identifies problems; determines accuracy and relevance of information; uses sound judgement to generate and evaluate alternatives, and to make recommendations. GS-13: In addition to the above requirement you must have at least one year of specialized experience at the GS-12 grade level performing the following duties: 1) planning and implementing cyber operations related to areas that may need support; 2) managing cyber incidents and cyber incident responses of organization significance; and 3) utilizing cyber intrusion detection technologies (i.e. intrusion detection systems (IDS)/ Intrusion Prevention Systems (IPS) tools and applications to identify intrusions. GS-14: In addition to the above requirement you must have at least one year of specialized experience at the GS-13 grade level performing the following duties: 1) evaluating cyber operations to determine areas that need support; 2) developing crisis action plans for cybersecurity operations; 3) analyzing cyber threats and vulnerabilities; and 4) managing Network security applications, devices and software such as, encryption, firewalls, demilitarized zones, etc. National Service Experience (i.e., volunteer experience): Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement. Education Some federal jobs allow you to substitute your education for the required experience in order to qualify. For this job, you must meet the qualification requirement using experience alone--no substitution of education for experience is permitted. Additional Information Permanent Change of Duty Station (PCS) Expenses will not be paid. Other incentives may be authorized. If you receive a conditional offer of employment for this position, you will be required to complete an Optional Form 306, Declaration for Federal Employment, and to sign and certify the accuracy of all information in your application, prior to entry on duty. False statements on any part of the application may result in withdrawal of offer of employment, dismissal after beginning work, fine, or imprisonment. This position has been designated excluded from bargaining unit representation under the national security provision of 5 USC Section 7112(B)(6). When entering a federal job at a grade level lower than the highest promotion potential level, you may be promoted to more complex duties and work more independently, as your career progresses. NOTE: Career ladder promotions are not automatic, and all eligibility and qualifications requirements must be met in order to progress to the next grade level. Reasonable Accommodation Requests: This agency provides reasonable accommodation to applicants with a disability covered under the Americans with Disabilities Act (ADA). If you need a reasonable accommodation for any part of the application or hiring process, contact the CISA Office of Equity, Diversity, Inclusion and Accessibility (OEDIA) by sending an email to [email protected] and [email protected] with the subject line, "Reasonable Accommodation Request @CISA." In the email itself, you must include your name, vacancy announcement number(s), and state your intent to seek a reasonable accommodation. Decisions on requests for Reasonable Accommodations are made on a case-by-case basis. For more information, please go to the Reasonable Accommodations at DHS website. Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office. Shared Certificate: When CISA completes their selections, the remaining list of qualified candidates may be shared with other DHS Component agencies who are hiring for similar positions. You will have an opportunity to opt-in if you would like your name, application materials, and assessment results shared to be considered for employment with other DHS Component agencies. There is no guarantee of further consideration, and you can continue to explore other job opportunity announcements.