Information Technology Specialist (Security)

About the role

This position is located in the Monitoring and Incident Response Division (MIRD), Office of Cybersecurity, Testing, Monitoring and Response (CTMR), Cyber Operations Directorate (CO), Bureau of Diplomatic Technology (DT).

The division safeguards State Department IT systems by detecting cyber threats, responding to incidents, and monitoring network activity to protect the confidentiality, integrity, and availability of critical data. The duty station is Beltsville, MD.

What you will do

• Utilizes cyber defense tools to continuously monitor and analyze enterprise systems to detect malicious activity.
• Lead analyst teams, as an Incident Commander, in handling novel and sophisticated cyber-attacks and serve as a subject matter expert.
• Analyze malicious activity to determine attack path, exploitation, and effects on systems and information.
• Document and escalate incidents that can potentially cause ongoing and immediate impact to the environment.
• Adhere to incident response processes and recommend process and or policy improvements.
• Provide cybersecurity recommendations to Senior Leadership and advise on deficiencies and corrective actions.

Education

Education requirements do not apply to this vacancy announcement.

How you will be evaluated

The evaluation process consists of the ApplyGov Competency Based Assessments and a crediting plan for which applicants will be assigned a score between 70 and 100. A resume review by subject matter experts will be conducted for the top qualified candidates based on the combined total score.

Resumes longer than two pages will be deemed ineligible and will not be considered further. Responses to questions that are not fully supported by your resume may result in a rating adjustment. All applications that meet the required qualifications and the cutoff score will be referred to the selecting official in the order in which the applications were received.

You will be assessed on the following job-related competencies (knowledge, skills, abilities, and other characteristics): Non-Supervisory: Oral Communication, Writing, Interpersonal Skills, Problem Solving, Teamwork, Technology Orientation, Customer Service, Attention to Detail and Self-Management.

Set aside at least 2 hours to take the external assessments; however, most applicants complete the assessments in less time. There are timed sections that must be completed within the allotted timeframe.

Your score from the external assessment Non-supervisory will remain on file for 180 days, allowing you to apply for multiple DOS-announced positions without the need to retake the assessments. Top applicants may be referred to the hiring manager for further consideration.

The assessment is a measure of the degree in which your background matches the competencies and KSAs required for this position. Your qualifications will be evaluated on the following competencies: Ability to analyze technology hardware & software for solutions. Skill in managing government-wide recommendations for remediating cybersecurity.

Knowledge of computer-based information storage & computer systems. Ability to lead multiple, concurrent projects. Ability to clearly and accurately communicate technical information to all audiences.

Resume review: Subject matter experts (SMEs) will review your resume to determine your qualifications for this position based on the required specialized experience. Your resume should demonstrate how you meet all aspects of the specialized experience statement.

SMEs will not review additional information beyond your resume (e.g., links embedded in your resume will not be opened.). If meeting basic qualifications through education only or a combination of education and experience, applicants will not be referred to the SME panel but will be reviewed by the HR Specialist for referral.

In describing your experience, please be clear and specific. We do not make assumptions regarding your experience. Overstating your qualifications and/or experience in your application may result in your removal from consideration.

You may preview questions for this vacancy.

Documents you must provide

• All required documents listed below, that are applicable to you, must be submitted to our automated system by 11:59 p.m. Eastern Time (ET) on the closing date of this announcement.
• Resume limited to two pages showing relevant work/volunteer experience, education and training.
• Include the start and end dates (from month/year to month/year) and the number of hours per week worked/volunteered.
• Your resume serves as the basis for qualification determinations and must support your answers to the completed online assessment questions.
• Resumes longer than two pages will be deemed ineligible and will not be considered further.
• Veterans' Preference Documentation, if applicable.
• Veterans' preference does not apply to this vacancy.
• Any supporting documentation received from veterans will be retained to document veteran's status for appointment purposes, if selected.
• To claim 5-point preference, submit a copy of your DD-214 Certificate of Release or Discharge from Active Duty.
• To claim 10-point preference, submit all required documentation outlined on the SF-15 (Application for 10-Point Veteran Preference) to support your claim (e.g., DD-214, official statement from the Department of Veterans Affairs, etc.).
• If we cannot verify your 10-point preference claim, your application will be reviewed for 5-point preference.
• To claim 10-point derived preference (i.e., spouses, widows, widowers or mothers of veterans), submit a completed SF-15 and all required documentation listed on the SF-15 to support your claim.
• To claim 0-point Sole Survivorship preference, submit a copy of your DD-214 or another form of official documentation showing that your discharge or release from active duty occurred on or after August 29, 2008 and was based on a sole survivorship discharge.
• For all preference claims: DD-214 Member 4 copies are preferred and must show the dates of service, type of discharge, and any qualifying service campaign medals.
• For more veterans' preference information, visit the USAJOBS Help Center.
• ICTAP/CTAP documentation, if applicable (e.g., reduction-in-force (RIF) notice, RIF separation SF-50 personnel action, certification of expected separation, etc.).
• In addition, submit a copy of your current (or last) performance rating of record which must be at least fully successful or equivalent and submit all required documents listed above that apply to you (e.g., resume, transcripts, etc.).

What to expect next

Once the online application package is received, you will be notified through USAJOBS of your qualification status and referral or non-referral to the hiring official for further consideration. If further evaluation or interviews are required, you will be contacted.

If a tentative job offer is made, the Department of State will conduct a suitability and/or security background investigation. You will be notified up to four times during the hiring process: 1. Upon receipt of your application.

2. Upon minimum qualification determinations. 3.

After the list of eligibles is issued. 4. After final selection is made.

Additional information

To request a reasonable accommodation for additional time on the timed sections of the assessment, please submit your request using the “Request a Reasonable Accommodation” button within the Assessment Application. For all other reasonable accommodations at the U.S. Department of State, please contact the Office of Accessibility and Accommodations (OAA) at ***.

OAA is responsible for reviewing and adjudicating reasonable accommodation (RA) requests for the Assessment Battery being used for this announcement. The following applies to all RA requests: RA requests cover additional time on timed sections only. Applicants submitting a RA request MUST attach supporting medical documentation signed by a licensed, treating medical provider.

The documentation should describe the nature, severity, and expected duration of the condition, identify the relevant medical condition or diagnosis, and explain the basis for the requested extension. RA requests that do not contain supporting medical documentation attachments at the time of initial request may be subject to further review.

Note: the following documents do not, on their own, qualify for automatic approval of the RA request: Schedule A letters, VA benefits letters, or SSA letters.

Applicants MUST submit their application before the vacancy closes, even if pending an accommodation decision.

Applicants are encouraged to carefully follow instructions related to medical documentation provided in the vacancy announcement prior to beginning the RA process. Applicants will have 48 hours after their RA request is adjudicated to complete the assessment battery.

Scores generated after the allotted timeframe will not be admissible and the applicant will not be considered further for the vacancy. If a different type of RA is needed, please contact OAA directly at ***. If eligible, situational telework agreements may be permitted with supervisory approval.

Multiple positions may be filled from this announcement. If eligible, applicants to this announcement may be referred to other similar positions in other Bureaus/Offices in the Department for up to 240 days. Telework eligibility and security clearance requirements may vary for such similar positions.

Under the provisions of the Direct-Hire Authority, veterans' preference and traditional rating and ranking of applications does not apply. Agency & Interagency Career Transition Assistance Program (CTAP & ICTAP): View OPM's CTAP & ICTAP eligibility website for more information.

You must be rated in the Well-Qualified category and submit supporting documents under the required documents section of this announcement to receive selection priority consideration.

To be considered Well-Qualified applicants must: score an 85 or above, meet Minimum Qualifications, and demonstrate proficiency in some, but not all major aspects of the position.