This is a National Guard Dual Status Technician position requiring military membership. The primary purpose of this position is to provide expertise in cybersecurity policy and process development; conducting audits to validate compliance; responsible for the risk management framework and ensures systems are operated and maintained IAW AR 25-2 and all applicable command, DA, JS and DOD security directives and procedures.

MAJOR DUTIES:

1) Serves as an Information Technology Specialist providing Cybersecurity for a state National Guard headquarters. Operates within the DoD and Army security procedures, operations, and practices. Ensures systems are operated and maintained IAW AR 25-2 and all applicable command, DA, JS and DOD security directives and procedures. Monitors Microsoft and DoD information security bulletins and notifications as they relate to Information Security Vulnerability Alerts (ISVAs). Coordination is required with peer state contacts, FORSCOM and MACOM elements and commercial vendors. Incumbent is required to ensure compliance with Federal, DoD and DA Information Assurance/Cyber Security policies. Utilizes extensive knowledge of all areas of automation security to establish operating standards and procedures for the installation Information Assurance Program. Coordinates requirements with the responsible personnel and tracks suspense for completing required actions and reports virus problems in accordance with established procedures. Ensures the confidentiality, integrity and availability of systems and networks by planning, analyzing, developing, and implementing information systems security programs, policies, procedures, and tools. The incumbent serves as a subject matter expert (SME) in advising, posturing, preparing and auditing the organization for No Notice Army Cyber Readiness Assessments (NACRA), Organizational Inspection Program (OIP), and accreditations. May serve in a team lead role for auditing/assessment teams, such as a Site Assistance Visit (SAV).

2. Coordinates with Program Information System Security Managers and Organizational Information System Security Officer at other locations to verify or clarify information pertinent to cybersecurity/ Information Assurance procedures. Ensures all IS and COTS/GOTS within the DODIN­A (NG) Enclave are properly certified and accredited in accordance with, Risk Management Framework (RMF), and configuration management policies and practices prior to installing devices/systems on the production ICAN. The incumbent has program oversight responsibility for the Installation Campus Area Network (ICAN)/Local Area Network (LAN) Certification and Accreditation (C&A), documentation and meets AR 25-1, AR 25-2, DoDI 8500.01 (Cybersecurity) and DoDI 8510.01 (Risk Management Framework (RMF) for DoD Information Technology) and DoDI 8500.2 Information Security (IS) Implementation. Ensures all aspects of the RMF are implemented for all assets connected, or to be added, to the ICAN are accepted and approved by the appropriate Designated Approving Authorities (DAAs) for RMF Assess Only process and Configuration Management Board.

3. Maintains an operational knowledge base of past, current and possible future threats to the security posture by attending courses, conferences, seminars, online research, and information sharing between other Cyber Security/Information Assurance professionals. Using this knowledge base, the incumbent will be able to devise and implement new policies and procedures to prevent or react to security concerns.

**Performs other duties as assigned**

Conditions of employment

• The incumbent of this position description must have, at a minimum, a completed National Agency Check (NAC) prior to position assignment.
• Irregular and overtime (compensatory) hours may be required to support operational requirements or contingencies.
• The employee may be required to travel in military and/or commercial aircraft to perform temporary duty assignments.
• Males born after 31 December 1959 must be registered for Selective Service.
• Federal employment suitability as determined by a background investigation.
• May be required to successfully complete a probationary period.
• Participation in direct deposit is mandatory.
• Work may require access to classified information. Must be able to obtain and maintain the appropriate security clearance.
• May occasionally be required to work other than normal duty hours; overtime may be required.

Qualifications

NATIONAL GUARD MEMBERSHIP IS REQUIRED: This is a Title 32 excepted service position that requires membership in a compatible military assignment in the National Guard. Selectee will be required to wear the military uniform. Acceptance of an excepted service position constitutes concurrence with these requirements as a condition of employment. Applicants who are not currently a member of the Vermont Army National Guard must be eligible for immediate membership and employment in the National Guard in the military grade listed in this announcement. If you are not sure you are eligible for military membership, please contact 1-800-GO-GUARD or visit NATIONALGUARD.COM/VT prior to applying for this position.

OPEN AREAS OF CONSIDERATION: AREA 1, 2, 3
Area I: All current On-board Permanent and Indefinite Dual Status 32 and Title 5 (Competitive and Excepted) Technicians (Tenure: 1-Career, 2-Conditional, 3-Indefinite) - Only those Vermont National Guard members who are in permanent or indefinite technician status as a result of being competitively hired within that National Guard component applying for a position within the component which they are currently employed.
Area II: All Members of the Vermont Army National Guard.
Area III: Currently assigned service members in other branches of the military outside of the VTNG, to include those assigned to Active Duty, Reserve or other state's National Guard

Military Grade/Rank:
Enlisted: SSG/E6 through SGM/E9
Warrant Officer: WO1-CW4
Officer: 2LT/O1-MAJ/O4

MINIMUM REQUIREMENTS :Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate.
For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

SPECIALIZED EXPERIENCE: 36 months experience, with 1-year specialized experience equivalent to at least the next lower grade. Specialized experience includes experience, education, or training that approaches techniques and requirements appropriate to an assigned computer applications area or computer specialty area in an organization. Experience planning the sequence of actions necessary to accomplish the assignment where this entailed coordination with others outside the organizational unit and development of project controls. Experience that required adaptations of guidelines or precedents to meet the needs of the assignment. Experience preparing documentation on cost/benefit studies where is involved summarizing the material and organizing it in a logical fashion. Experience in managing the function of the work to be performed. Experience which includes leading, directing and assigning work of personnel. Experience in managing the function of the work to be performed. Experience which includes leading, directing and assigning work of personnel.

Length of time is not of itself qualifying. Candidates' experience should be evaluated based on the duties performed rather than strictly on the rank of the individual; however, established compatibility criteria/assignments must be followed. The applicant's record of experience, training, and education must show possession of the knowledge, skills, and abilities needed to fully perform the duties of the position.

NOTE: This information must be supported in your resume to be considered for the position

OR

Education: A Ph.D or equivalent doctoral degree OR 3 full years of progressively higher level graduate education leading to such Ph.D. or equivalent doctoral degree in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management or a degree that provided a minimum of 24 semester hours in one of more of the identified above fields identified above and required the development or adaptation of applications, systems or networks. Note: You must submit copies of your official transcripts.


PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

CONTINUATION OF CONDITIONS EMPLOYMENT & NOTES:
1. Must be able to obtain and maintain at least a SECRET clearance. However, TOP SECRET (TS) security clearance with eligibility for access to Sensitive Compartmented Information (SCI) may be required based on the highest classification level utilized in the state.

2. Irregular and/or overtime (compensatory) hours may be required to support operational requirements or contingencies or may be required to work hours outside of the normal duty day.

3. May be required to travel by car, in military and/or commercial aircraft, and by other means of transportation as appropriate to perform temporary duty assignments

4. Position is designated as PR-VAM-001 within the Defense Cybersecurity Workforce as guided by NIST SP 800-181; National Initiative for Cybersecurity Education, Cybersecurity Workforce Framework. Which establishes the Tasks, Skills, Knowledge and Abilities expected of this position.(https://www.nist.gov/itl/ applied-cybersecurity /nice/nice-framework-resource-center).

5. This is an Information Security Workforce position. Selectee must meet position requirements for certification at Level II in Information Assurance Management (IAM-II). Incumbent must complete appropriate training and obtain required certifications IAW DoDI 8140 or DOD 8570.01 Mor applicable governing document(s) for Cyber workforce as an IA Technician Level within 9 months of employment pending training seat availability