Summary This position is being recruited under 10 USC 1599f into the Cyber Excepted Service and does NOT convey eligibility to be converted to the Competitive Service. It has been identified as a position necessary to carry out and support the mission of the US Cyber Command. It is in the Professional Work Category at the Full Performance Work Level within the CES Occupational Structure. It is located in the DISA Pacific Field Command, Operations Division. Responsibilities Participates as a team member of the Defensive Cyber Operations Branch’s Countermeasures effort in the assessment of security events to determine impact and implementation of corrective actions for DoD automated information systems and networks. Creates, reviews, and deploys signatures based on the SNORT, Suricata, Zeek, and YARA rule detection sets. Configures and applies sensor policies and updates as needed. Furnishes technical advice, guidance, and assistance to the Defensive Cyber Operations Branch Chief, other staff officers, Divisions and other agencies on matters pertaining to computer and network security. Facilitates the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes. Analyzes system operations and responses, limitations, ranges of variables and reliability. Prepares relevant documentation, portions of technical reports, memoranda, or descriptive materials summarizing the accomplishments and results of the tasks. Requirements Conditions of Employment Qualifications In order to qualify for this position, you must meet the requirements described below. Qualifying Experience: To qualify at the GG-12, your resume must describe at least one year of experience that demonstrates the competencies necessary for immediate success in the position. Experience refers to any paid or unpaid experience, including volunteer work and Military service, that would be considered equivalent to work normally performed at the next lower grade level in the federal service. For this position, qualifying experience is defined as: Experience implementing countermeasure efforts in the assessment of security events using sources such as Suricata, Snort, Zeek and Yara platforms to determine the impact and effectiveness of detection tools for the protection of automated information systems and networks. Candidates must describe how they meet the qualifying experience and/or selective placement factor(s) within the body of their resume. All qualifications must be met within 30 days after the closing date of this announcement. For more information regarding qualifications requirements, click here. Education There is no substitution of education for the qualifying experience at the GG-12 grade level. Additional Information This position is in the Excepted Service and does NOT convey eligibility to be converted to the Competitive Service. It is being recruited under 10 U.S.C. 1599f into the Cyber Excepted Service (CES) personnel system. If you are a current Federal Career/Career-Conditional employee, you will be placed on an Excepted appointment. This appointment does not confer eligibility to be non-competitively converted to an appointment in the competitive service. Salary range includes a Targeted Local Market Supplement (TLMS) in accordance with Section 1599f of Title 10 U.S.C. and Department of Defense Instruction (DoDI) 1400.25, Volume 3006. A three year trial period may be required if you have not previously completed a trial or probationary period in the excepted or competitive service. Telework availability will be based upon the mission requirements and supervisory determination This is a drug test designated position requiring preemployment and random testing. We may use this announcement to fill additional vacancies within 90 days of the closing date. The Tax Cuts and Jobs Act of 2017 makes certain reimbursements/payments taxable. For information on these changes and the Relocation Income Tax Allowance (RITA), for which some appointees are eligible, click here. Salary plus Cost of Living Allowance (COLA) is authorized. This rate is subject to change without notice. Recruitment, relocation, or retention incentives MAY be authorized. This position is covered under DoD Manual 8140 which will be subject to future Cyber Workforce requirements as defined by the Manual. This is a Mission Essential position. The nature of the position's duties and the organization's operational mission requires the incumbent to physically report to their duty station in certain situations where non-essential employees are excused, such as during national emergencies, extreme weather situations, mission critical systems outages, and/or other scenarios as deemed appropriate at the highest levels of the organization's chain of command. The Department of Defense (DoD) policy on employment of annuitants issued March 18, 2004 will be used in determining eligibility of annuitants. It applies to former Federal civilian employees receiving a retirement annuity from the Civil Service Retirement and Disability Fund that are hired within the DoD on or after November 24, 2003. The policy also applies to annuitants (appointed in DoD on/or after November 24, 2003) who move from one position to another within DoD through voluntary reassignment, promotion, change to lower grade or transfer between military departments. Please see this policy here. Because this position is in the Cyber Excepted Service, Veterans' Preference will be applied to preference eligible candidates, as defined by Section 2108 of the Title 5 U.S.C. in accordance with the procedures provided in DoD Instruction 1400.25, Volume 3005, "CES Employment and Placement." If you are a veteran claiming veteran's preference, as defined by Section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package. For more information on the Cyber Excepted Service Personnel System, click here. All applicants are encouraged to apply electronically. If you are unable to apply on-line, you may contact 317-212-0454 for assistance. If selected, the authorized rate of pay may exceed the stated maximum salary rate range under certain circumstances.