This job originated on www.usajobs.gov. For the full announcement and to apply, visit www.usajobs.gov/job/778750400. Only resumes submitted according to the instructions on the job announcement listed at www.usajobs.gov will be considered.
The Associate Chief Information Officer for Security Operations is responsible for leading and managing all function of the day-to-day operation of the Treasury Shared Services Security Operation Center (TSOC), which is the enterprise SOC for the Department. The TSOC operates 24×7×365 and provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions for both unclassified and classified systems.
02/27/2024 to 03/28/2024
$147,649 - $221,900 per year
ES 00
1 vacancy in the following location:
No
Yes—as determined by the agency policy.
Occasional travel - You may be expected to travel for this position.
No
Permanent
Full-time
Senior Executive
00
Yes
No
24-12331444-KM
778750400
U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Current or former competitive service federal employees.
Current excepted service federal employees.
Those who meet the five Executive Core Qualifications (ECQs).
Threat defense: the incumbent will lead a cross-functional team of Departmental stakeholders to identify and implement protective controls that minimize Treasury's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale.
Threat detection: the incumbent shall operate a set of technical capabilities that ingest signal from internal sensors (e.g., endpoint agents, proxies, firewalls, packet capture, netflow) and capture telemetry from external sources (e.g., vulnerability scans, vulnerability disclosures, third parties). to identify threats.
Incident response: the incumbent oversees all activities as captured in the Departmental incident response plan, including but not limited to incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. The incumbent shall use digital forensics to support these activities.
Provides executive guidance to establish and manage relationships with external USG parties (intelligence community, law enforcement, national security) and external commercial parties (hardware/software vendors, service providers) to enrich and advance the Department's approach to active defense.
Oversees and manage the Security Operations Center budget. Leading the work of a subordinate a hybrid staff of federal/contracted practitioners and specialists that are focused on ensuring the confidentiality, integrity, and availability of all Treasury's classified and unclassified systems.
Communicate to the CIO, DCIO, and other programs and policy officials regarding Treasury's active defense activities. Provides authoritative recommendations and solutions to problems and challenges with respect to federal mandates/legislation, risk management, and improvement of operational capabilities.
This requirement is directly attributable to Executive Order 14028 on Improving the Nation's Cybersecurity, along with numerous other Federal government cybersecurity mandates, guidance, and requirements from ONCD, OMB, NIST, and/or the Legislature.
Fundamental Competencies: These competencies are the foundation for success in each of the Executive Core Qualifications: Interpersonal Skills, Oral Communication, Continual Learning, Written Communication, Integrity/Honesty, Public Service Motivation. The Fundamental Competencies are crosscutting and should be addressed over the course of each ECQ narratives.
When completing Executive Core Competencies, applicants should follow the Challenge, Context, Action and Result (CCAR) model outlined in the guide.
Additional information about the SES and Executive Core Qualifications can be found on the Office of Personnel Management (OPM) SES Website. You are strongly encouraged to review OPMs Guide to SES Qualifications for specific examples and guidance on writing effective ECQ narrative statements.
MANDATORY TECHNICAL QUALIFICATIONS (MTQs): All applicants must submit a written narrative that addresses each of the MTQs separately. The narrative must not exceed one (1) page per MTQ. Applicants who fail to adhere to the one (1) page per MTQ limit will be disqualified and no longer considered for the position. In addition to the ECQs, applicants must possess the following technical qualifications that represent the knowledge, skills, and abilities essential to perform the duties and responsibilities of the position. You must fully address each MTQ to be rated for further consideration.
MTQ 1: IT Security Operation Center (SOC)
Demonstrated experience in leading and managing functions of day-to-day operations of a Security Operation Center (SOC), which provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions systems.
MTQ 2: IT Incident Response
Demonstrated executive knowledge of and experience in IT Incident Response. Demonstrated experience leading operations for a portfolio of enterprise IT Incident Response activities such as incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions.
MTQ 3: IT Threat Defense
Demonstrated experience in IT Threat Defense in terms of leading a cross-functional team of stakeholders to identify and implement protective controls that minimize an organization's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale.
This job does not have an education qualification requirement.
CONDITIONS OF EMPLOYMENT:
Equal Employment Opportunity Policy
The United States Government does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
You will be evaluated for this job based on how well you meet the qualifications above.
A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.
As a new or existing federal employee, you and your family may have access to a range of benefits. Your benefits depend on the type of position you have - whether you're a permanent, part-time, temporary or an intermittent employee. You may be eligible for the following benefits, however, check with your agency to make sure you're eligible under their policies.
1) Resume.
2) A separate narrative of 10-pages or less that addresses the Executive Core Qualifications (ECQs). Pages beyond the first ten (10) will not be considered in the process. Current and former career Senior Executive Service employees and graduates of a SES Candidate Development Program who have been certified by OPM's QRB are not required to address the ECQs. ECQ narratives are MANDATORY for all other applicants in order to be considered.
3) A separate narrative that addresses each of the Mandatory Technical Qualifications (MTQs). It is MANDATORY for all applicants to submit this narrative. The narrative must address each of the MTQs separately and must not exceed one (1) page per MTQ. Applicants who fail to adhere to the one (1) page per MTQ limit will be disqualified and no longer considered for the position.
4) SF-50 (or other personnel action that verifies civil service). Current Federal employees must submit their most recent SF-50 (Notification of Personnel Action) that documents current tenure, position title, series, and grade level. Current or former SES must submit a SF-50 that documents career appointment status in the SES.
5) Proof of OPM QRB Certification. SES Candidate Development Program (SESCDP) graduates that have not been appointed to the SES must submit a copy of their OPM QRB Certification. This document should be uploaded under the "other document type" field.
Applicants who fail to submit ALL required documents WILL NOT receive consideration for this position. Application will result in an "Incomplete" rating. NOTE: YOU MUST SUBMIT ALL DOCUMENTATION BY 11:59 P.M. EST ON THE CLOSING DATE OF THIS ANNOUNCEMENT TO BE ELIGIBLE FOR CONSIDERATION.
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
1) Resume.
2) A separate narrative of 10-pages or less that addresses the Executive Core Qualifications (ECQs). Pages beyond the first ten (10) will not be considered in the process. Current and former career Senior Executive Service employees and graduates of a SES Candidate Development Program who have been certified by OPM's QRB are not required to address the ECQs. ECQ narratives are MANDATORY for all other applicants in order to be considered.
3) A separate narrative that addresses each of the Mandatory Technical Qualifications (MTQs). It is MANDATORY for all applicants to submit this narrative. The narrative must address each of the MTQs separately and must not exceed one (1) page per MTQ. Applicants who fail to adhere to the one (1) page per MTQ limit will be disqualified and no longer considered for the position.
4) SF-50 (or other personnel action that verifies civil service). Current Federal employees must submit their most recent SF-50 (Notification of Personnel Action) that documents current tenure, position title, series, and grade level. Current or former SES must submit a SF-50 that documents career appointment status in the SES.
5) Proof of OPM QRB Certification. SES Candidate Development Program (SESCDP) graduates that have not been appointed to the SES must submit a copy of their OPM QRB Certification. This document should be uploaded under the "other document type" field.
Applicants who fail to submit ALL required documents WILL NOT receive consideration for this position. Application will result in an "Incomplete" rating. NOTE: YOU MUST SUBMIT ALL DOCUMENTATION BY 11:59 P.M. EST ON THE CLOSING DATE OF THIS ANNOUNCEMENT TO BE ELIGIBLE FOR CONSIDERATION.
The Federal hiring process is set up to be fair and transparent. Please read the following guidance.
This job originated on www.usajobs.gov. For the full announcement and to apply, visit www.usajobs.gov/job/778750400. Only resumes submitted according to the instructions on the job announcement listed at www.usajobs.gov will be considered.
Learn more about
The U.S. Department of the Treasury has a distinguished history dating back to the founding of our nation. As the steward of U.S. economic and financial systems, Treasury is a major and influential leader in today's global economy. We have over 100,000 employees across the country and around the world and we make diversity of thoughts and inclusion a core value. Come Join the Department of the Treasury and Invest in Tomorrow.