Duties

Summary

This is a public notice flyer to notify interested applicants of anticipated vacancies. Applications will not be accepted through this flyer. Interested applicants must follow the directions in the "How to Apply" section of this flyer to be considered. There may or may not be actual vacancies filled from this flyer. Notice of Result letters will not be sent to applicants who respond to this flyer.

Learn more about this agency

Responsibilities

• You will serve as a Penetration Tester supporting command assessments of Navy Networks, enterprises and critical assets and programs.
• You will assess threats and vulnerabilities through testing and evaluation activities such as network/enterprise penetration testing, web application security testing and conducting social engineering exercises.
• You will identify vulnerabilities found within information systems (IS), networks, applications, programs and data and assess their associated exploitability and impacts to operators' missions.
• You will use extensive information technology (IT) expertise, analytical abilities and communication skills in order to identify, explain and document risk findings in the context of operational environments.
• You will serve as a Cyber Threat Emulator in the Command Cyber Operational Readiness Inspections (CCORI) to identify real-world risk by discovering vulnerabilities as they relate to mission-critical systems.
• You will provide unit commanders with risks to their missions based on the network's current state of cybersecurity and provide the command the level of risk that a unit's cyber security posture poses to DOD.
• You will apply and utilize authorized cyber capabilities to enable access to targeted networks.
• You will demonstrate capability in running advanced exploitation techniques with and without the use of automated tools.
• You will conduct assessments to include determine deviations from required and/or acceptable configurations, evaluate existing level of risk, recommend appropriate remediation measures and evaluate remedial risk after remediation.

Travel Required

75% or less - You may be expected to travel for this position.

Supervisory status
No

Promotion Potential
12

Requirements

Conditions of Employment

• Must be a US Citizen.
• Must be determined suitable for federal employment.
• Must participate in the direct deposit pay program.
• New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov
• Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
• Males born after 12-31-59 must be registered for Selective Service.
• You will be required to obtain and maintain an interim and/or final Top Secret/SCI security clearance prior to entrance on duty. Failure to obtain and maintain the required level of clearance may result in the withdrawal of a job offer or removal.
• This position is designated as a Cyber IT/Cybersecurity Workforce position. You must obtain and maintain the credentials as described in SECNAV M-5239.2 for specialty area 121 within 6 months of appointment.
• Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or pass the test. You will be subject to random testing.
• This position may require travel from normal duty station to CONUS and OCONUS and may include remote or isolated sites. You must be able to travel on military and commercial aircraft for extended periods of time.
• You will be required to obtain and maintain a U.S. Passport.
• Interested Applicants must submit resumes/application packages to: FCC_C10F_NSAH_RESUME@navy.mil

Qualifications

Applicants must have directly applicable experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies or knowledge, skills and abilities necessary to successfully perform the duties of the position. Such experience is typically in or directly relates to the work of the position to be filled by demonstrating each of the four competencies listed below:

1- Attention to Detail- Is thorough when performing work and conscientious about attending to detail. IT-related experience demonstrating this competency include: Designs and runs advanced exploitation techniques with and without the use of automated tools to breach security-protected applications and networks.
2- Customer Service- Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. IT-related experience demonstrating this competency include: Analyzes complex vulnerability information and generate impact/risk assessments that provide a holistic depiction of an organizations's cybersecurity readiness posture and threat environment.

3- Oral Communication- Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. IT-related experience demonstrating this competency include: Develops operational impact statements to measure defense in-depth architecture and communicates this information to senior military, civilian and technical audiences in oral and written formats.

4- Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. IT-related experience demonstrating this competency include: Stays abreast of the latest methods for ethical hacking and testing, AND qualifying experience would be demonstrated by:

• Assessing the ability of systems and networks to withstand sophisticated adversaries and identify attack vectors and their impacts in order to provide risk determinations and provide mitigation/remediation strategies.
• Performing penetration testing for internal and external assessments of enterprise network assets and devices to analyze system responses, thwart intrusions and distinguish attack vectors as passive, active, insider, close-in or distribution attacks.
• Applying cyber collection, environment preparation and engagement expertise to enable new exploitation and/or continued collection operations or in support of mission requirements.
• Implementing and applying pen testing tools i.e. Network Mapper, metasploit ,Wireshark, Web Application Attack and Audit Framework and John the Ripper.

This position is within the Work Category Professional at Work Level Full Performance, Series and Grade 2210-12.

Additional qualifications information can be found from the following Department of Defense website: https://dodcio.defense.gov/Cyber-Workforce/CES.aspx

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

Education

This job does not have an education qualification requirement.

Additional information

Recruitment incentives may be authorized to eligible new hires.

A relocation incentive is generally a single payment intended to offset some of the relocation costs experienced by the selectee. A relocation incentive may be authorized.

This position is in the excepted service and does not confer competitive status.

This position is eligible for part time, full time or ad-hoc telework at the discretion of management.

This position is a DoD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 U.S.C. 1599f.

The Cyber Interagency Transfer Authority (CITA) permits movement of CES employees appointed under Section 1599f of Title 10 U.S.C. and excepted service employees appointed under Schedule A, Section 213.3106(b)(11) of Title 5 CFR, into cyber workforce positions in the competitive service and movement of competitive service employees into DoD Cyber Workforce positions within the Military Departments and Defense Agencies.

This position is covered by the Department of Defense Priority Placement Program.

Several vacancies may be filled.

A tentative offer of employment will be rescinded if the selectee fails to meet the pre-employment requirements, including failure to report to any of the scheduled appointments.

Federal annuitant information: The selection of an annuitant is subject to the Department of Defense and Department of the Navy policy on the employment of annuitants. Policy information may be found at: http://www.secnav.navy.mil/donhr/Documents/CivilianJobs/FedCivAnnuitants.pdf .

How You Will Be Evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

In order to qualify for this position, your resume must provide sufficient experience and/or education, knowledge, skills, and abilities to perform the duties of the specific position for which you are being considered. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience.

As vacancies occur, the Human Resources Office will review your resume to ensure you meet the hiring eligibility and qualification requirements listed in this flyer. You will be rated based on the information provided in your resume, along with your supporting documentation.

If selected, you may be required to provide additional supporting documentation.

If after reviewing your resume and supporting documentation, a determination is made that you inflated your qualifications and/or experience, you may be found ineligible/not qualified.

Please follow all instructions carefully. Errors or omissions may affect your rating or consideration for employment.

All qualification requirements must be met before being considered for any vacancies.

Background checks and security clearance

Security clearance
Sensitive Compartmented Information

Drug test required
Yes

Position sensitivity and risk
Special-Sensitive (SS)/High Risk

Trust determination process
National security

Required Documents

A complete resume is required. Your resume must show relevant experience, job title, duties and accomplishments. Your resume must show complete information for each job entry to support minimum qualifications. The following information should be provided in your resume, but it is acceptable to provide elsewhere in your application package: employer's name, starting and end dates (Mo/Yr), hours per week, and pay plan, series and grade level (e.g. GS-0201-09) for relevant federal experience.TIP: A good way to ensure you include all essential information is to use the Resume Builder in USAJOBS to create your resume.

Are you claiming membership in any professional organizations, or possession of a license, certificate or credentials? Check the Conditions of Employment section above to see if any are required. If you claim membership, license, certification, or credentials, you must submit a copy of said document in your application package.

Are you using education as a substitute for some or all of the experience requirement? Is there a basic education requirement for this position? Check the Education section above to see what is allowed and what is required. Any claims you make in your resume or assessment questionnaire regarding education or degrees MUST be supported by official or unofficial transcripts or a list of courses, grades earned, completion dates, and quarter and semester hours earned issued from your school. While unofficial transcripts are acceptable for initial application, an official transcript will ultimately be required if you are selected for the position. You may submit a copy your degree(s) if specific coursework does not have to be verified.

Are you a veteran claiming 5-point veterans' preference or claiming sole survivorship preference? You must submit a copy of your latest DD-214 Certificate of Release or Discharge from Active Duty (any copy that shows all dates of service, as well as character of service [Honorable, General, etc.] is acceptable) OR a VA letter that shows dates of service or service connected disability AND character of service. If you have more than one DD-214 for multiple periods of active duty service, submit a copy for each period of service. If you were issued a DD-215 to amend aforementioned information on the DD-214 you must submit that too. If you are not sure of your preference eligibility, visit the Department of Labor's website: Veterans' Preference Advisor

Are you a disabled veteran or claiming 10-point veterans' preference?
If you are eligible to claim 10 point veterans preference you must submit a DD-214 Certificate of Release or Discharge from Active Duty as described above for 5-point preference.

You must also provide the applicable supporting documentation of your disability (e.g. disability letter from the VA) as described on Standard Form-15 (SF-15). http://www.opm.gov/forms/pdf_fill/SF15.pdf .

Are you an active duty service member? Active Duty Service Members are required to submit a statement of service printed on command letterhead and signed by the command. The statement of service must provide the branch of service, rate/rank, all dates of service, the expected date of discharge and anticipated character of service (Honorable, General, etc.).

Documents submitted as part of the application package, to include supplemental documents, may be shared beyond the Human Resources Office. Some supplemental documents contain personal information such as SSN and DOB and some documents such as military orders and marriage certificates may contain personal information for someone other than you. You may sanitize these documents to remove said personal information before you submit your application. You must provide an un-sanitized version of the documents if you are selected.