Summary You will serve as an IT Specialist (Insider Threat/Cybersecurity Analyst) in the Insider Threat Directorate of NAVAL INTELLIGENCE ACTIVITY. Responsibilities You will perform UAM systems demonstrations, analyzes audit data, and monitors alerts to identify anomalous/suspicious behavior and activities that present security violations and potential threats to Navy networks and personnel. You will conduct analysis and provide feedback of audit data collected to monitor, detect, and mitigate cyber and insider threats. You will execute multi-disciplined activities designed to counter threats posed by Navy personnel with authorized access to information systems. You will represent the Navy Insider Threat Program on working groups and committees, and at inter-agency forums, conferences and technical exchanges. Requirements Conditions of Employment Qualifications I have one year of experience in the federal service or private or public sector demonstrating the following four competencies, as defined: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to my experience demonstrating the four competencies above, I have one year of specialized experience equivalent to the next lower grade level (GG/GS-12) or pay band in the federal service or equivalent experience in the private or public sector such as: 1. Analyzing audit data, system alerts, and user activity to identify anomalous behaviors and potential security threats to network systems. 2. Utilizing User Activity Monitoring (UAM) tools, including performing system demonstrations and refining audit policies and triggers. 3. Developing and implementing policies, procedures, and standards for identifying, preventing, and protecting sensitive information and systems. 4. Executing multi-disciplined activities to counter insider threats in accordance with National, DoD, and Department of the Navy policies. 5. Applying a wide range of IT concepts and principles to complex and difficult assignments to develop new methods and approaches for insider threat detection. 6. Collaborating with diverse stakeholders (e.g., Personnel Security, Counterintelligence, Legal, HR) to resolve security alerts and facilitate mission accomplishment. 7. Developing and presenting technical information, briefings, and recommendations to supervisors and senior leaders. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=List-by-Occupational-Series Additional qualification information can be found from the following DON DCIPS policy website: https://www.secnav.navy.mil/doni/Naval%20Intelligence%20Activity/Chapter%205%20-%20Employment%20and%20Placement.pdf Education N/A Additional Information This position is covered by the Department of Defense Priority Placement Program. Additional vacancies may be filled by this announcement. A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments. Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf During the application process you will have the ability to opt-in to make your resume available to hiring managers in the agency who have similar positions in the local commuting area. Depending on the hiring organization and the position being filled, job requirements (e.g., security clearance, travel, drug testing, financial disclosure filing, bargaining unit status, etc.) may vary. Other hiring managers filling similar positions may offer relocation expense reimbursement and/or may offer recruitment incentives for new employees, depending on funding availability and in accordance with policy. If you opt-in and are referred on a certificate, your resume will be available to other hiring managers for 180-days from the date the job announcement closes. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions. ICTAP does not apply to Excepted Service positions. Recruitment incentives may be authorized to eligible new hires. PPP applicants will be placed at the FPL, if determined Well Qualified (WQ). To receive priority consideration, the FPL must be the same grade level or equivalent of the retained grade or the grade held immediately prior to separation. All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statue, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status. For more information on the DCIPS occupational structure click here. For more information about career advancement in DCIPS click here.
