Cyber Protection Brigade Information Technology Specialist

U.S. Army Cyber Command; Fort Meade (MD); On-site; USD 60,000 - 100,000; Full time

Benefits offered by this job

Health Insurance

Retirement Plans

Paid Time Off

Training and Development Programs

Flexible Work Schedules

Relocation Assistance

Job Security

Performance Bonuses

Job summary

Join a premier cyber protection team dedicated to safeguarding critical infrastructure and ensuring national security. As a Network Analyst, you will utilize your expertise in network security monitoring and analysis to detect and mitigate cyber threats. This role involves hands-on engagement with cutting-edge tools and technologies, working alongside a team of highly trained professionals. You'll play a crucial part in protecting our nation's interests by conducting thorough assessments and implementing robust security measures. If you are passionate about cybersecurity and eager to make a difference, this position offers an exciting opportunity to advance your career in a dynamic and impactful environment.

Qualifications

• One year of specialized experience in network security and analysis.
• Graduate education in computer science or related fields may substitute for experience.

Responsibilities

• Analyze network architecture and provide hardening recommendations.
• Develop incident response and threat mitigation countermeasures.
• Provide technical support for cyber defense incidents.

Skills

Network Security Monitoring

Network Traffic Analysis

Cyber Threat Emulation

Incident Response

Wireshark

Splunk

Network Configuration

Cybersecurity Best Practices

Education

Bachelor's in Computer Science

Master's in Information Systems

Ph.D. in Cybersecurity

Tools

Firewalls

Routers

Switches

Operating Systems

Job description

Organization

U.S. Army Cyber Command

Duty Location

FORT MEADE, ANNE ARUNDEL, MD

Major Duties

The U.S. Army Cyber Protection Brigade (CPB), also known as the "Hunter" brigade, is Army's premier cyber threat hunter. We hunt advanced adversaries to enable information advantage in multi-domain operations and maintain and defend strategic cyber infrastructure. We are comprised of 1,300-plus specially trained and mission-focused Soldiers and civilians who work as a cohesive team to drive cyberspace operations and impose cost on our nation's enemies.
The incumbent will serve as a Network Analyst on a U.S. Army Cyber Protection Team (CPT) in the U.S. Army Cyber Protection Brigade (CPB). Uses knowledge of networking and network security monitoring to enable cyber security operations. The role of Network Analyst includes hunt, clear, enable hardening, and continual assessment operations as well as provide Cyber Threat Emulation (CTE) and Discovery and Counter-Infiltration (D&CI) capabilities.

• Analyze network architecture by installing, operating, maintaining, configuring, testing, and securing hardware and software-based routers, switches, firewalls, and various operating systems to enable network hardening recommendations.
• Provide expert technical support to enterprise-wide and local network technicians to identify and resolve cyber defense incidents.
• Interpret provided network diagrams, run local scanning software, and encompass sensor related data to create logical, physical, and persona-based diagrams utilized by the Cyber Protection Team during missions.
• Survey and evaluate network traffic, identify baselines to facilitate locating adverse network trends, anomalous traffic, or malicious cyberspace activity (MCA).
• Develop Army and Department of Defense incident response and threat mitigation countermeasures, friendly network forces prioritization, and operational assessments.
• Provide technical advice, guidance, and assistance on a wide range of complex cybersecurity issues and distribute information pertaining to cyber related threats impacting the Department of Defense Information Network (DoDIN).
• Defend and clear critical assets, Mission Relevant Terrain (MRT), or Key Terrain Cyber (KT-C) either remotely or by deploying to the affected location as needed.

Qualifications/ Specialized Experience

To qualify, you must meet the education and/or experience requirements described below for each applicable grade level you wish to be considered. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations. You will receive credit for all qualifying experience, including volunteer experience. Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application.

Additional information about transcripts is in this document. To qualify based on your experience, your resume must describe one year of specialized experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position. Such experience is typically in or directly related to the work of the position to be filled. Specialized experience would be demonstrated by:

GG-07: Monitoring network traffic and/or host processes to determine anomalies; assisting with analysis of information systems (e.g. networks, security, operating systems) compliance; and assisting customers in resolving technical issues.

GG-09: Installing network switches to establish new services; modifying network switch configurations to resolve incidents; performing remote diagnostics; and troubleshooting network related issues.

GG-11: Conducting research to identify unanticipated network threats; monitoring and analyzing network traffic and performance; monitoring tools such as Wireshark and Splunk to formulate hypothesis on anomalous traffic.

GG-12: Conducting analysis on network traffic using any tool such as Wireshark and Splunk; applying cybersecurity best practices and providing recommendations to customers or management, either individually or as part of a team; applying an understanding of the Open Systems Interconnection (OSI) Reference Model as it relates to networking and traffic flow.

EDUCATION:

GG-07 Substitution of Education for Experience: One full year of graduate level education from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, graduate level education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GG-09 Substitution of Education for Experience: Master's or equivalent graduate degree or 2 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, two full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GG-11 Substitution of Education for Experience: Ph.D. or equivalent doctoral degree or 3 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, three full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GG-12 You must meet the qualification requirement using experience alone--no substitution of education for experience is permitted.

Conditions of Employment

• Appointment to this position is subject to a three year probationary period unless the appointee has previously met the requirements as described in Department of Defense Instruction 1400.25 Version 3005, Cyber Excepted Service, Employment and Placement.
• Must be able to obtain and maintain TOP SECRET eligibility with access to Sensitive Compartmented Information (SCI).
• This position is classified as Information Technology access level IT-I (Privileged User).
• Must successfully pass urinalysis screening for illegal drug use prior to appointment and periodically thereafter according to Army Regulation (AR) 600-85, Alcohol and Drug Abuse Prevention and Control Program.
• May be required to successfully complete an initial and periodic Counter Intelligence-scope Polygraph (CI Poly) examination with No Deception Indicated (NDI).
• Personnel assigned to work in a National Security Agency (NSA) facility must be able to obtain and maintain access to National Security Agency (NSA) facilities and networks.
• Duties of this position may entail alternative work schedules (AWS) including extended shifts; 24/7 rotating shifts, nights, weekends, and/or holidays as required.
• Temporary duty travel (TDY) may be required up to 30% annually. All Team employees are subject to extended temporary duty travel (TDY) during crisis situations to perform mission essential functions as determined by management.
• May be required to carry a cellular telephone/Portable Electronic Device (PED) and maintain a working personal telephone at all times.
• Incumbent is required to successfully complete all applicable preparation courses, training, and comply with the Career Management Field's training certification policy.
• This position has been designated mission essential. Employee may be required to remain on duty or report for duty during severe weather or other installation closings.
• Position is subject to situational or ad hoc telework. Telework agreement required.

Additional Information

• If you are a current federal career/career-conditional employee, you will be placed on an excepted appointment.
• Male applicants born after December 31, 1959, must complete a Pre-Employment Certification Statement for Selective Service Registration.
• You will be required to provide proof of U.S. Citizenship.
• Direct Deposit of Pay is required.
• Must be able to obtain and maintain a Top-Secret security clearance.
• Selection is subject to restrictions resulting from Department of Defense referral system for displaced employees.
• If you have retired from federal service and you are interested in employment as a reemployed annuitant, see the information in the Reemployed Annuitant information sheet.
• Multiple positions may be filled from this announcement.
• Salary includes applicable locality pay or Local Market Supplement.
• Permanent Change of Station (PCS) allowances may be authorized, subject to the provisions of the Joint Travel Regulations and an agency determination that a PCS move is in the Government Interest.
• Relocation incentive may be authorized.
• Recruitment incentive may be authorized.

Statement of Excepted Service - This position is a DoD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 U.S.C. 1599f.

Required Documents

• Your resume: Your resume may be submitted in any format and must support the specialized experience described in this announcement.
• Other supporting documents: Transcripts (if using education to qualify), SF50, DD214, Veteran’s Administration letter with disability rating.

Important Information about Application Supporting Documents/Attachments for Cyber Excepted Service (CES) Flyer Announcements:

Provide documents that support your qualification for the position, typically, these are documents such as resume, transcript, and SF-50. Personally Identifiable Information (PII), such as SSN and DOB data should be REDACTED or REMOVED from documents prior to submission.

Applicants can go to this link to learn more about what to include in a Federal resume: https://help.usajobs.gov/faq/application/documents/resume/what-to-include

Interested Applicants can direct questions to: [e-mail]

Equal Opportunity Employer - The United States government does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service or other non-merit factor.