IT CYBERSECURITY SPECIALIST (PLCYPLN/ENTARCH)
About This Position
Click on "Learn more about this agency" button below for IMPORTANT additional information. The primary purpose of this position is to serve as the 867 COG Senior Defensive Cyber Operations (DCO) Technical Advisor providing guidance to the 867COG Commander, Joint Force Cyber National Mission Force Joint Directors and other senior managers on support to defensive cyberspace operations for Air Force-Cyber National Mission Force (AF-CNMF). Salary ranges include local market supplements.
Qualifications
This is a GG-14 position in the Defense Civilian Intelligence Personnel System (DCIPS). The GG-14 duties for the "Professional" work category are at the "Senior" work level and are equivalent to those at the GS-14 level. The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job.
In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions for the GS-2210, Information Technology (IT) Management Series (Alternative A). Experience: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below.
The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.
- Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
- Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
- Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
- Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
In addition to meeting the basic requirement above, to qualify for this position you must also meet the qualification requirements listed below. EXPERIENCE REQUIRED: Your resume must reflect quality level experience which demonstrates the possession of the knowledge, skills, abilities and competencies necessary for successful job performance required for this position. Quality experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled.
Examples of creditable experience include mastery of and skill in applying a comprehensive range of knowledge in one or more professional or administrative fields; applying experimental theories and new developments to problems not susceptible to treatment by accepted methods or making decisions or recommendations significantly changing, interpreting, or developing important policies and programs; demonstrated program management skills; knowledge of program management, technical operational background, contract management, and financial management procedures; and working knowledge of project management principles.
Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency. To view specialized experience click on the following link: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/2200/information-technology-it-management-series-2210-alternative-a/ KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: Knowledge of architectural theories, concepts, principles, practices, standards, methods, techniques, and materials of professional Information Technology, computer science, and knowledge of other engineering disciplines to effectively apply advanced information technology principles and concepts to new applications, experimental theories, and other areas of responsibility as applied in both the Federal Government and private industry. Knowledge and experience with the national Cyberspace community, Joint, DoD, Department of Homeland Security, applicable policies and directives, mission functions/operations and oversight on the scope of cyber weapons system operation on DoD or trusted partner networks to include a high level of skill in establishing and maintaining effective relationships, negotiating complex issues, and resolving conflicts based on mature judgment, experience, and recognized professional standing.
Knowledge of architectural disciplines related to Defensive Cyber Operations (DCO), cyberspace attack, cyberspace defense, Communications Security (COMSEC), Computer Security (COMPUSEC), Emanations Security (EMSEC), and Operations Security (OPSEC), computer systems, digital communications systems, network protocols, computer architectures, cyber weapons, cyber security testing, Cyberspace Intelligence, Surveillance and Reconnaissance (C-ISR) integration, tactics, and techniques; and computer security penetration tools and techniques are required. Extensive knowledge and skill in one or more of the following areas: (1) computer operating systems (Unix, Windows, etc.) enterprise services, file systems, security, configuration and analysis; (2) network operations and security including net flows, protocols, PCAP, etc.; (3) computer programming and scripting; (4) malware identification and analysis; (5) system forensics. Skilled in developing new or modified work methods, processes, or information protection procedures; and ability to develop and articulate technical direction and approaches to formulating interoperability plans, implementation plans, and contingency plans involving communications and connectivity between major command and control systems; proficiency in applying analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of program operations, to include Advanced knowledge of and skill in application of the concepts, and practices in the following areas: Advanced cyberspace exercise training and simulation, Mission Essential Task (METs) range platforms, including Persistent Cyber Training Environment (PCTE) and/or Joint Cyber Training Environment (JCTE).
PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work.
You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment.
You will receive credit for all qualifying experience, including volunteer experience.
Major Duties
As a recognized defensive cyber expert serves as group defensive cyber operations technical advisor providing technical guidance, advisory support, training/certification and lead on projects and/or major phases for broad and varied operations. Serves as a CPT mission lead, functional expert, and/or team member at the master experience level on a CPT conducting cyber defense analysis and security investigations on complex networks and system architectures. Serves as a CPT mission lead, functional expert, and/or team member at the Master experience level conducting penetration testing and assessments of mission partner defense capabilities on complex networks and system architectures.
Exercises supervisory personnel management responsibilities. Directs and/or participates as a subject matter expert in Technical Review Boards, various advisory committees, conducted to review technology requirements, procedures, findings and results of major tasking and projects.
Education
KSA'S CONTINUED: 5. Ability to foresee the impact of changing information technology and in applying analytical and evaluative techniques to identify, investigate, and resolve complex issues or problems; and ability to develop innovative approaches and technical analysis processes to tackle emerging intelligence problems by applying skills gained through professional experience working within the defensive cyber fields.
- Ability in establishing organizational priorities and strategic direction, determining resource allocation, and identifying programs or infrastructures that are required to achieve goals within a domain of interest; and expert ability to effectively organize and analyze information; produce authoritative reports, position papers, and briefings that are responsive to the specific needs of commanders and senior management officials; present clear and concise findings; and effectively advocate for a position. CONDITIONS OF EMPLOYMENT CONTINUED: Position is designated special-sensitive and incumbent must be able to obtain and retain a TOP SECRET (TS) clearance with access to Sensitive Compartmented Information (SCI).
Polygraph will be required as part of the security clearance requirement. The incumbent must sign a non-disclosure agreement. Failure to obtain or maintain required clearance eligibility (including unescorted access to required facilities) is a condition of employment and may result in removal from this position and/or termination of employment.
Drug Testing: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Drug Demand Reduction Program. Information Assurance Certification is a condition of employment. Compliance with Cyber Mission Force (CMF) training specified in the USCYBERCOM Cyber Mission Forces Training and Readiness Manual; and applicable higher headquarters guidance memoranda for Cyber-Crew Training, Standardization and Evaluation, and Cyberspace Operations, is a condition of employment.
The employee may be required to travel to CONUS and OCONUS locations, to include austere locations. Notice of the need to travel may be received in less than three days. Travel may be frequent and/or may be for long periods lasting 6 months or more and may be to austere locations.
Employee may be required to travel on military and commercial aircraft.
This position is Emergency-Essential (E-E). The incumbent of this position must meet all requirements of E-E positions and may be required as a condition of employment to take a series of vaccinations and annual boosters to immunize against anthrax and other diseases. During a crisis, the incumbent must continue to perform the E-E duties until relieved by proper authority.
A pre-employment physical examination is required and a condition of hiring. Selectee must meet requirements specified on SF 78, Certificate of Medical Examination for position at overseas/deployed locations due to the following. The duties of this position require moderate physical exertion involving walking and standing, possible use of firearms, and exposure to inclement weather.
Due to travel requirements, individual must be capable of lifting and carrying a suitcase/transit case weighing a minimum of 50 lbs. unassisted. Manual dexterity with comparatively free motion of finger, wrist, elbow, shoulder, hip, and knee joints is required. Arms, hands, legs, and feet must be sufficiently intact and functioning in order that applicants may perform the duties satisfactorily.
Sufficiently good vision, with or without correction, is required to perform the duties satisfactorily. Near vision, corrective lenses permitted, must be sufficient to read printed material the size of typewritten characters. Hearing loss, with or without a hearing aid, as measured by an audiometer, must not exceed 35 decibels at 1000, 2000, and 3000 Hz levels.
Training required/provided for this position may be 80 hours or longer in duration and may require that the employee sign Continuing Service Agreement (CSA) to attend the course. For all Initial Qualifications Training (IQT), Mission Qualifications Training (MQT) or training required for position-related certification/readiness or continuing education, the employee must accept the CSA as a condition of employment.
How You Will Be Evaluated
Your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine your eligibility, qualifications, and quality ranking for this position. Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.
Your responses to the questionnaire may be compared to the documents you submit. The documents you submit must support your responses to the online questionnaire. If your application contradicts or does not support your questionnaire responses, you will receive a rating of "not qualified" or "insufficient information" and you will not receive further consideration for this job. Applicants who disqualify themselves will not be evaluated further.
Additional Information
Summary Continued: The incumbent will serve as the Director of the Cyber National Mission Force Advanced Hunt Academy and the DCO lead for all Joint and Service National Level Certification Training Exercises (CTEs). The incumbent is responsible for conducting oversight and developing DCO programs, technical training, and certification of Service and Joint National Cyberspace Protection Teams (CPT). The incumbent also leads AF-CNMF integration to CNMF-TX.
Leads and participates in Air Force level and Joint CYBERCOM Combatant Command (COCOM) level boards to develop (DCO) emerging technology and processes to counter emerging cyber threat technologies. Serve as an experienced, master-skill-level Defensive Cyberspace Operations (DCO) technical expert and Cyberspace Protection Team (CPT) Mission Element crew member or lead supporting tasked Service, Combatant Command and National Agency partners, to include providing advanced DCO training and exercise subject matter expertise (SME) to develop and certify the DCO workforce. Assists mission partners to ensure mission assurance (MA) and Information Assurance (IA) of critical key cyber terrain and mission areas.
As an experienced master-skill-level operational team member or lead, enables hardening of systems and networks against exploitation, detect unauthorized, malicious, or adversary activity, eliminate adversary presence, and assess defensive capabilities by utilizing leading-edge computer security technology, tactics, techniques and procedures. Provides technical expertise in the performance of work requiring the application of cyber security principles, methods, and techniques. Employed Annuitants (Reemployed Annuitants): Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants.
Click here for more information. 120-Day Register: This announcement may result in a 120-day register that may be used to fill like vacancies for 120 days after the closing date.
Applicants may be referred for consideration as vacancies occur. Direct Deposit: All federal employees are required to have direct deposit. Disabled veteran leave is available to a Federal employee hired on/after 5 Nov 2016, who is a veteran with a service-connected disability rating of 30% or more.
For more information, click here. If you have questions regarding this announcement and have hearing or speech difficulties click here. Selectees who physically reside permanently in the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during the entire recruitment process (application, selection, and acceptance of a formal job offer) and selected for employment in the foreign area are eligible to receive certain foreign area benefits such as: Living Quarters Allowance (LQA) or government quarters, Post Allowance, Home Leave, etc. (subject to approval) Selectees who physically reside outside the U.S., the Commonwealth of Puerto Rico or Northern Mariana Islands, and the Possessions of the U.S., during any step of the recruitment process (application, selection, and acceptance of a formal job offer) will have foreign area benefits eligibility be determined on a case by case basis.
How to Apply
The complete Application Package must be submitted by 11:59 PM (EST) on 05/27/2026 To preview the Application Questionnaire, please click the following link: https://apply.usastaffing.gov/ViewQuestionnaire/12945224 To begin the process, click the Apply Online button to create an account or log in to your existing USAJOBS account.
Follow the prompts to complete the application questionnaire. Please ensure you click the Submit My Application button at the end of the process. To apply for this position, you must provide a complete Application Package which includes: 1.
Your Resume. If you submit more than one resume, only the most recent will be reviewed. The "most recent" is considered the resume with the latest timestamp. Resumes may not exceed two pages. The two-page resume ensures the most relevant experience is reviewed and considered, which is a common practice in both the public and private sectors.
Resumes exceeding two pages will be removed from consideration. Additional information on how to complete or update your resume may be located here. For qualification determination your resume must contain hours worked per week and dates of employment (i.e., month/year to month/year or month/year to present).
If your resume does not contain this information, your application may be marked as insufficient, and you will not receive consideration for this position. If you are a current Federal employee or previous Federal employee, provide your pay plan, series and grade, i.e. GS-0301-09.
Current Federal Civilian Employees may list any relevant performance related rating (given within the last three years) and/or incentive awards in your resume. Do NOT include photographs, inappropriate material, inappropriate content, nor personal information such as age, gender, religion, social security number, etc., on your resume. If the resume you submit contains such information you will not be considered for this vacancy.
Your name, first and last, MUST be included on your resume.
- A complete Application Questionnaire
- Additional Required Documents (see Required Documents section). Ensure all submitted documents contain your full name.
- Help recruiters find you. Make your resume and profile searchable, which means recruiters may contact you about possible jobs. Additional information may be located here.
- Return Rights: Per AFI 36-1101 - DCIPS employees have no statutory right of return to the previous position, unit, or geographic location. PLEASE
NOTE: It is the applicant's responsibility to verify that information entered and/or uploaded, (i.e., resume) is received, accurate, and submitted by the closing date.
You may verify your documents have been processed with your application package successfully. You can access your USAJOBS account to do so by clicking here. Uploaded documents may take up to one hour to clear the virus scan. Human Resources WILL NOT modify or change any answers submitted by an applicant.
Required Documents
The following documents are required and must be provided with your application. Applicants who do not submit required documentation to determine eligibility and qualifications will be eliminated from consideration. Other documents may be required based on the eligibility/eligibilities you are claiming.
Click here to view the AF Civilian Employment Eligibility Guide and the required documents you must submit to substantiate the eligibilities you are claiming. Online Application: Questionnaire Resume: Your resume may NOT exceed two pages, and the font size should not be smaller than 10 pts.
You will not be considered for this vacancy if your resume is illegible/unreadable. Additional information on resume requirements can be located under "How To Apply". Transcripts/Registration/License: If qualifying on education/position requires education, you must submit copies of your transcripts and if required for the position, submit an active, current registration/license.
Current or Former Federal Civilian Employees (includes current Air Force employees): You must submit a legible copy/copies of your last or most recent SF-50, Notification of Personnel Action. The SF-50, block 24 must contain "1" or "2" AND block 34 must be a "1". Employees eligible under an OPM approved interchange agreement, block 34 may contain a "1" or "2".
Promotion Consideration: If you wish to be considered as a promotion candidate and your SF-50 has an effective date within the past year, it may not clearly demonstrate you meet the one-year time-in-grade requirements.
You will need to provide additional SF-50s which clearly demonstrates you meet the time-in-grade requirements (examples of appropriate SF-50s include Promotions, Within-Grade, Grade/Range Increases, and SF-50s with an effective date more than one year old). OCONUS - Current or Former Federal Civilian Employees (includes current Air Force employees): You must submit a legible copy of a SF-50, Notification of Personnel Action. The SF-50, block 24 must contain "1" or "2" and block 34 must be a"1". Employees eligible under an OPM approved interchange agreement, block 34 may contain a "1" or "2".
NOTE: For OCONUS employees who claim eligibility MSP or Family Member Preference, your SF-50 may contain a "3" in block 24 and a "2" in block
- OPTIONAL DOCUMENTS: Performance Appraisals for Current Federal Civilian Employees - Most recent performance appraisals (dated within last 3 years) showing the official rating of record, signed by a supervisor, or statement why the performance appraisal is unavailable. Awards for Current Federal Civilian employees - List any awards received within the last 3 years on the resume.
Note: Applicant must not submit award Notification of Personnel Actions (SF50s).