Supervisory Information Technology (Information Security)

U.S. Army Intelligence and Security Command; Fort Belvoir (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

The U.S. Army Intelligence and Security Command, Enterprise Cybersecurity at Fort Belvoir, Virginia, seeks a cybersecurity professional to monitor, analyze, and respond to network threats under DCIPS.

You will conduct incident response, develop detection logic, and perform vulnerability and threat assessments to inform leadership and reduce risk.

Qualifications

• Experience monitoring and analyzing network activity to identify anomalies and security events.
• Ability to perform incident response activities, including investigation, containment, and recovery.
• Experience developing detection logic, defensive content, and signatures to improve telemetry and response.
• Ability to conduct comprehensive log and traffic analysis to assess scope and urgency of threats.

Responsibilities

• Conduct continuous monitoring and analysis of network activity to identify anomalies, validate alerts, and distinguish malicious behavior from normal operations.
• Evaluate alerts, correlate events from multiple sources, and conduct log/traffic analysis to determine scope and impact of threats.
• Assist in developing defensive techniques, guidance, and after-action reviews.
• Perform incident response operations (investigation, containment, recovery) of cyber incidents across the network.
• Develop detection logic, defensive tool content, and signatures to ensure effective detection and response.
• Perform system and network vulnerability and threat assessments informing leadership and reducing risk.

Skills

Network monitoring

Incident response

Threat analysis

Log analysis

Defensive techniques

Job description

About the Position:

This position is in the Defense Civilian Intelligence Personnel System (DCIPS). Employees occupying DCIPS positions are in the Excepted Service and must adhere to U.S. Code, Title 10, as well as Department of Defense Instruction 1400.25. This position is with the U.S. Army Intelligence and Security Command, Enterprise/Surveillance & Reconnaissance Activity, Enterprise Cybersecurity located at Fort Belvoir, Virginia.

As part of the assessment process, your resume will be evaluated using a competency-based method. This structured evaluation measures your qualifications, experience, and skills against the core competencies required for the position. Final scores will determine whether you are referred to the Hiring Manager for further consideration.

Who May Apply:

Only applicants who meet one of the employment authority categories below are eligible to apply for this job. You will be asked to identify which category or categories you meet, and to provide documents which prove you meet the category or categories selected. See Proof of Eligibility for an extensive list of document requirements for all employment authorities.

10-Point Other Veterans' Rating 30 Percent or More Disabled Veterans 5-Point Veterans' Preference Current Army Defense Civilian Intelligence Personnel System (DCIPS) Employee Current Department of Army Civilian Employees Current Department of Defense (DOD) Civilian Employee (non-Army) Current DoD Defense Civilian Intelligence Personnel System (DCIPS) Employee (non-Army) Defense Civilian Intelligence Personnel System (DCIPS) Interchange Agreement Disabled Veteran w/ a Service-Connected Disability, More than 10%, Less than 30% Non-Department of Defense (DoD) Transfer Prior Federal Service Employee Priority Placement Program, DoD Military Reserve (MR) and National Guard (NG) Technician Eligible Priority Placement Program, DoD MR and NG Preference Eligible Tech Receiving Disability Retirement Priority Placement Program, DoD Retained Grade Preference Eligible United States Citizen Applying to a DCIPS Position Army DCIPS positions apply Veteran's Preference to preference eligible candidates as defined by Section 2108 of Title 5 U.S.C., in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, DCIPS Employment and Placement.

Specialized and Other Experience:

Specialized Experience:

• Conducting continuous monitoring and analysis of network activity to identify anomalies, validate alerts, and distinguish malicious behavior from normal operations
• Evaluating alerts, correlating events from multiple sources, and conducting comprehensive log and traffic analysis to determine the scope, urgency, and operational impact of potential threats
• Assisting in the development of defensive techniques, guidance, after action reviews
• Performing incident response operations (such as investigation, analysis, containment, mitigation, and recovery) of cyber incidents across the network environment
• Developing detection logic, defensive tool content, and signatures, ensuring detection and response technologies are properly tuned, maintained, and integrated to support capability development and modernization
• Performing system, network vulnerability and threat assessments informing leadership of cybersecurity and operational risk, recommending, and validating corrective actions and ensuring defensive controls effectively reduce risk

This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service (GS/GG-13). The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined:

(1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Examples of IT-related experience demonstrating this competency include: leading others by setting the standards for the quality of work, even in the most difficult and/or high pressure circumstances; reviewing and editing work completed by others to ensure that