Description

Full job description Duties Subject Matter Expert to establish and maintain a threat management capability to conduct and integrate the monitoring, analysis, reporting, and response to insider threats. Responsible for day-to-day collection, review, interpretation, correlation, and analysis of complex and technical data to identify actions, behaviors, or incidents that may be indicative of insider threat activity. Develops and improves the insider threat modeling that leverages Security Information and Event Management (SIEM). Responsible for developing objectives, technical requirements, and strategies for insider threats. Identifies and assess potential risks associated with User Behavior Analytics (UBA). Advises management on new developments and advances in insider threat detection related techniques; planning, organizing, and directing studies to develop forecasts and analysis. Evaluating and making recommendations concerning overall plans and proposals for insider threat assessments. Requirements Conditions of Employment Must be a U.S. Citizen. This national security position, which may require access to classified information, requires a favorable suitability review and security clearance as a condition of employment. Failure to maintain security eligibility may result in termination. This is a drug testing position. This position is covered under DoD Manual 8140 which will be subject to future Cyber Workforce requirements as defined by the Manual. Qualifications Basic Requirements: Applicants must demonstrate on their resume that they have IT-related experience demonstrating each of the four competencies listed below. Attention to Detail Customer Service Oral Communication Problem Solving OR Qualifying Experience: To qualify at the GG-13, your resume must describe at least one year of experience that demonstrates the competencies necessary for immediate success in the position. Experience refers to any paid or unpaid experience, including volunteer work and Military service, that would be considered equivalent to work normally performed at the next lower grade level in the federal service. For this position, qualifying experience is defined as: developing cybersecurity policies and procedures to prevent and defend against insider threats; operate and maintain systems which monitor user activity; identify anomalous behaviors and patterns that may indicate an insider activity. Candidates must describe how they meet the qualifying experience and/or selective placement factor(s) within the body of their resume. All qualifications must be met within 30 days after the closing date of this announcement. Education THERE IS NO SUBSTITUTION OF EDUCATION AT THE GG-13 GRADE LEVEL If you are using education to qualify for this position you will need to submit your unofficial/official transcripts with your application. Failure to provide transcripts, or a determination that you do not possess the education requirement, will result in objection to your qualifications, and removal from consideration in accordance with competitive examining procedures. To be creditable, education must have been obtained in an accredited college or university. You must report only attendance and/or degrees from schools accredited by accrediting institutions that are recognized by the U.S. Department of Education Foreign Education: If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show that the education credentials have been evaluated by the National Association of Credential Evaluation Services at the time of application. National Association of Credential Evaluation Services . Additional information This position is in the Excepted Service and does NOT convey eligibility to be converted to the Competitive Service. It is being recruited under 10 U.S.C. 1599f into the Cyber Excepted Service (CES) personnel system. If you are a current Federal Career/Career-Conditional employee, you will be placed on an Excepted appointment. This appointment does not confer eligibility to be non-competitively converted to an appointment in the competitive service. Salary range includes a Targeted Local Market Supplement (TLMS) in accordance with Section 1599f of Title 10 U.S.C. and Department of Defense Instruction (DoDI) 1400.25, Volume 3006. A three year trial period may be required if you have not previously completed a trial or probationary period in the excepted or competitive service. Telework availability will be based upon the mission requirements and supervisory determination Individuals tentatively selected for drug testing designated positions at the Defense Information Systems Agency will be required to submit to urinalysis for illegal drugs prior to appointment or placement. his position is covered under DoD Manual 8140 which will be subject to future Cyber Workforce requirements as defined by the Manual. We may use this announcement to fill additional vacancies within 90 days of the closing date. Moving costs MAY be paid. The Tax Cuts and Jobs Act of 2017 makes certain reimbursements/payments taxable. For information on these changes and the Relocation Income Tax Allowance (RITA), for which some appointees are eligible, click here. Recruitment, relocation, or retention incentives MAY be authorized. Because this position is in the Cyber Excepted Service, Veterans' Preference will be applied to preference eligible candidates, as defined by Section 2108 of the Title 5 U.S.C. in accordance with the procedures provided in DoD Instruction 1400.25, Volume 3005, "CES Employment and Placement." If you are a veteran claiming veteran's preference, as defined by Section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For more information on the Cyber Excepted Service Personnel System, click here. For more information on veterans' preference, click here. For more information regarding qualifications requirements, click here. All applicants are encouraged to apply electronically. If you are unable to apply on-line, you may contact 317-212-0454 for assistance. Benefits A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits. Review our benefits Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

Role and Responsibilities

• Duties Subject Matter Expert to establish and maintain a threat management capability to conduct and integrate the monitoring, analysis, reporting, and response to insider threats. Responsible for day-to-day collection, review, interpretation, correlation, and analysis of complex and technical data to identify actions, behaviors, or incidents that may be indicative of insider threat activity. Develops and improves the insider threat modeling that leverages Security Information and Event Management (SIEM). Responsible for developing objectives, technical requirements, and strategies for insider threats. Identifies and assess potential risks associated with User Behavior Analytics (UBA). Advises management on new developments and advances in insider threat detection related techniques; planning, organizing, and directing studies to develop forecasts and analysis. Evaluating and making recommendations concerning overall plans and proposals for insider threat assessments