USA Staffing

1. Select the response that best describes your qualifications for the IT Specialist (Security) GS-14, position. Specialized experience must be documented and evident in your resume.

A. I possess at least one year of specialized experience equivalent to the GS-13 level in federal service. Specialized experience includes the ability to develop, implement, and maintain cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance; execute decision-making authorities and establish vision and direction for the organization's cyber and cyber-related resources and/or operations; and ensure stakeholder security requirements are adequately addressed to protect the organization's mission and business processes.

B. I do not meet the requirements.

2. Choose any of the following that describe your IT security program implementation experience. (Select all that apply)

A. Demonstrated experience with National Institute of Standards in Technology (NIST) Systems Assessment and Authorization (A&A) requirements and processes, as well as Continuous Monitoring.

B. Conducted enterprise-wide IT systems security reviews, audits, vulnerability assessments, risk assessments and evaluations regarding compliance with security requirements in accordance with industry best practices and applicable government regulations, standards and guidance to ensure that systems, networks, data and users adhere to systems security policies, procedures and regulations.

C. Provided authoritative technical advice, guidance, and consultation regarding all aspects of security and integrating enterprise cybersecurity tools with other mission systems.

D. Developed IT Security strategies and advised leadership on adopting and applying IT Security strategies, methodologies, tools, technologies, and concepts.

E. Established guidelines, studies, technical assessments, surveys, and evaluations as needed based on security problems or deficiencies.

F. Analyzed enterprise-wide security programs, determined requirements, and developed and implemented acquisition strategies designed to address the Agency's security requirements.

G. Managed the implementation and monitoring of a Continuous Diagnostics and Mitigation (CDM) program, comparable enterprise level security operation centric evolutions or similar enterprise cybersecurity monitoring program.

H. Ensured that the appropriate security and cyber-hygiene protections are incorporated into Agency acquisitions.

I. Interpreted policy and teams with various groups within the organization to accomplish mission goals; and advises leadership on adopting and applying IT Security strategies, methodologies, tools, technologies, and concepts.

J. None of the above.

3. Choose any of the following that describe your experience implementing as well as auditing IT security procedure, policy, and guidelines. (Select all that apply)

A. Interpreted, formulated, and implemented IT security policies and management guidelines in alignment with policy for complex and changing information technology systems.

B. Reviewed and evaluated existing security incident response policies and practices – assessing and identifying the need for changes based on new security technologies, evolving Federal policy, industry best practices, or identified threats.

C. Tested and implemented new policies as well as institutes measures to ensure awareness and compliance; monitored and audited baseline configuration procedures.

D. Led deployment of Cybersecurity tools at an enterprise-level, while coordinating with multiple teams using technical knowledge and interpersonal skills to successfully complete deployment.

E. Implemented the technical short and long-range goals for IT security and continuous monitoring programs and adapted Agency policies and procedures to comply with strategic plans.

F. Provided high-level technical advice and counsel to the CISO, DCIO, CIO, and other key officials on matters relating to new or modified policies, strategies and programs that affect or relate to current and existing functions, and programs.

G. None of the above.

4. Please identify your training/certifications in the area of cybersecurity (multiple selections allowed):

A. I have a degree in Cybersecurity, Information Assurance or Information Security

B. I have an active CISSP, CCSP, CISM, CRISC, CISA and/or SANS certification

C. I have an active “Ethical Hacking” or “Incident Handling/Handler” certification

D. I have other cybersecurity-related certifications or training

E. None of the above

5. Please identify which of the below areas you have direct mastery/expert knowledge and ability in, related to securing and testing secure applications and services (multiple selections allowed). Please note that the selected skills should be referenced in your resume.

A. Security implementation techniques and strategies in web services.

B. Skilled security evaluation of databases (e.g., SQL, Oracle) using commercial or open source tools such as SQLmap, mongoaudit, etc.

C. Expert Web Application Attack and Audit Frameworks to include Security evaluation of applications and websites using commercial or open tools, such as NMAP, W3af, etc.

D. Expert execution of a continuous monitoring and remediation program using commercial or open tools (e.g., Azure Security Center, Nessus, NMAP, Wireshark, Qualys, etc.)

E. Expert execution of an end-point detection and response (EDR) remediation program using commercial or open tools (e.g., HBSS, SEP, Defender, etc.)

F. Expert knowledge of and experience coordinating security operation center (SOC) principles, incident handling (IH), incident response (IR) as well as exploitation tactics, techniques, and procedures (TTP).

G. Facilitate the adoption of security best practices with functional teams (e.g., developers, database administrators, web application administrators, etc.) using technical knowledge and interpersonal skills.

H. None of the above.

6. Certification of Understanding - I certify that, to the best of my knowledge and belief, all of the information included in this questionnaire is true, correct, and provided in good faith. I understand that if I make an intentional false statement, or commit deception or fraud in this application and its supporting materials, or in any document or interview associated with the examination process, I may be fined or imprisoned (18 USC 1002); my eligibilities may be cancelled; I may be denied an appointment; or I may be removed and debarred from Federal service (5 CFR part 731). I understand that any information I give may be investigated and that responding "No" or providing no response to this item will result in my not being considered for this position.

A. Yes, I understand the information provided above and certify that the information provided in this questionnaire is true, correct, and provided in good faith.

B. No, I do not certify this information and do NOT wish to be considered for this position.

Terms & Conditions

Your Session is About to Expire!