Summary
This position serves as the Associate Chief Information Officer for Security Operations and reports to the Deputy Administrator for Technology Services Operations, and is responsible for leading and managing all functions of the Treasury Security Operation Center (TSOC). The TSOC provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions for both unclassified and classified systems.
Responsibilities
As Associate Chief Information Officer for Security Operations, you will: Lead a cross-functional team of Departmental stakeholders to identify and implement protective controls that minimize Treasury's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale. Operate a set of technical capabilities that ingest signal from internal sensors (e.g., endpoint agents, proxies, firewalls, packet capture, netflow) and capture telemetry from external sources (e.g., vulnerability scans, vulnerability disclosures, third parties). to identify threats. Oversee all activities as captured in the Departmental incident response plan, including but not limited to incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. The incumbent shall use digital forensics to support these activities. Oversee and manage the Security Operations Center budget. Lead the work of a subordinate a hybrid staff of federal/contracted practitioners and specialists that are focused on ensuring the confidentiality, integrity, and availability of all Treasury's classified and unclassified systems. Communicate to the Deputy Administrator, Treasury Chief Information Officer and Treasury Chief Information Security Officer, and other program and policy officials regarding Treasury's active defense activities. Provides authoritative recommendations and solutions to problems and challenges with respect to federal mandates/legislation, risk management, and improvement of operational capabilities.
Qualifications
Applicants must meet all qualifications and eligibility requirements by the closing date of this announcement. To meet the minimum qualifications for the position of Associate Chief Information Officer for Security Operations, applicants must possess the Executive Core Qualifications listed below. Typically, qualified applicants will have gained experience of this nature at or above the (GS)-15 grade level or its equivalent in the public or private sector. To be qualified for this position, your resume must reflect experience in a managerial capacity. Typically, experience of this nature is gained at or above the GS-15 grade level in the Federal service, or its equivalent with state or local government, the private sector, or nongovernmental organizations. As such, your resume must demonstrate that you have the knowledge, skills, and abilities to successfully fulfill responsibilities inherent in most SES positions such as: Directing the work of an organizational unit; Accountability for the success of one or more specific programs or projects; Monitoring progress toward organizational goals and periodically evaluates and makes adjustments to such goals; Supervising the work of employees (other than personnel assistants) at least 25% of the time; or Exercising important policy-making, policy-determining, or other executive functions Applicants seeking initial career appointment to the Senior Executive Service (SES) must clearly demonstrate the ability to meet the ECQs within their two (2) page resume (any experience exceeding 2 pages will not be reviewed). OPM's Guide to the Senior Executive Services Qualifications provides detailed information on the ECQs. In addition to meeting the minimum qualifications, you must also demonstrate the following Executive Core Qualifications (ECQs) and Mandatory Technical Qualifications (MTQs): EXECUTIVE CORE QUALIFICATIONS (ECQs): By statute, OPM prescribes ECQs for the appointment of career SES members. The ECQs were designed to evaluate executive experience and not technical expertise. The following ECQs provide the focus for certification of executive core qualifications for initial appointment to the Senior Executive Service. Your two-page resume should show that you possess the Executive Core Qualifications. ECQ 1 - Commitment to the Rule of Law and the Principles of the American Founding: Demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Leadership Competencies: Knowledge of the American System of Government, Commitment to the Rule of Law, Civic-Mindedness. ECQ 2 - Driving Efficiency: Demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Leadership Competencies: Fiscal Responsibility, Managing Resources, Leveraging Technology. ECQ 3 - Merit and Competence: Demonstrated knowledge, ability, and technical competence to effectively and reliably produce work that is of exceptional quality. Leadership Competencies: Technical Skill, Problem Solving, Agility and Resilience. ECQ 4 - Leading People: Demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Leadership Competencies: Accountability, Developing Others, Executive Judgement. ECQ 5 - Achieving Results: Demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Leadership Competencies: Operational Mindset, Innovation, Strategic Thinking. Additional information about the SES and ECQs can be found on the Office of Personnel Management (OPM) SES Website: Executive Core Qualifications. MANDATORY TECHNICAL QUALIFICATIONS (MTQs): In addition to the ECQs, candidates must address MTQs. MTQs are designed to assess an applicant's experience relevant to the specific position requirements. All applicants must clearly demonstrate in their two-page resume, experience and accomplishments related to the MTQs below: MTQ 1 - IT Security Operations Center (SOC): Demonstrated experience in leading and managing functions of day-to-day operations of a Security Operation Center (SOC), which provides threat defense, threat detection, threat intelligence, digital forensics, and incident response functions systems. MTQ 2 - IT Incident Response: Demonstrated executive knowledge of and experience in IT Incident Response. Demonstrated experience leading operations for a portfolio of enterprise IT Incident Response activities such as incident characterization, incident severity determination, and incident declaration, along with containment, eradication, and post-mortem analysis/actions. MTQ 3 - IT Threat Defense: Demonstrated experience in IT Threat Defense in terms of leading a cross-functional team of stakeholders to identify and implement protective controls that minimize an organization's attack surface, reduce critical points of exposure, increase the efficacy of existing/new technical countermeasures, and drive cost effectiveness through the development of economies of scale. Please DO NOT submit separate documents addressing the ECQs or MTQs.