Summary This position is located in Cybersecurity Operations and Response Division (CORD). The Cybersecurity Operations and Response Division (CORD) plays a pivotal role in safeguarding the organization against cyber threats. We ensure the resilience and security of USPTO digital assets. Responsibilities Come join our team if you are enthusiastic about… Analyzing and consolidating for reporting log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security. Leading the ownership of incidents originating in the SOC and works incidents toward resolution including any final reports required for internal and external audiences. Providing real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs). Assisting in the restricting, reorienting, and/or recasting of long and short-term goals, objectives, plans, and roadmaps. This announcement was AMENDED, changing Telework eligibility to Remote. Remote (TEAP-over 50 mile straight line distance from USPTO Alexandria, VA Campus) This position is eligible for fully remote work anywhere within the 50 United States, District of Columbia, and Puerto Rico. There is no reporting requirement. The duty station is the authorized telework location (typically your home address) and locality pay is adjusted appropriately. If selected for an interview, applicants are encouraged to discuss telework options and eligibility specific to the position in which they applied with the hiring manager. Requirements Conditions of Employment Qualifications You must meet the United States Office of Personnel Management's (OPM) qualification requirements (including specialized experience and/or educational requirements) for the advertised position. You must meet all eligibility and qualifications requirements by the closing date of the job announcement. OPM Qualifications Standards are available at Information Technology (IT) Management Series 2210 (Alternative A) Specialized Experience is experience that has equipped applicants with the particular knowledge, skills and abilities to successfully perform the duties of the position, and that is typically in or related to the position to be filled. To be creditable, specialized experience must have been equivalent to at least the next lower grade level in the federal service. Specialized experience for this position: For the GS-09: The next lower grade level is a GS-07. Specialized experience for this position includes: Performing forensics examinations on IT systems and devices; AND Conducting analysis of log files, evidence and other sources of information; AND Collecting and preparing technical documents, incidents reports, findings from computer examinations or other information for internal and external reporting. OR EDUCATION: Master's or equivalent graduate degree or 2 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, two full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks. OR A combination of education and experience. For the GS-11: The next lower grade level is a GS-09. Specialized experience for this position includes: Preparing and executing incident response plans; AND Performing forensics examination on IT systems and device; AND Providing initial investigation services for misuse on computer systems, networks and applications. OR EDUCATION: Ph.D. or equivalent doctoral degree or 3 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, three full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks. OR A combination of education and experience. In addition to meeting the specialized experience you must meet the basic requirement below to qualify for this series. Basic Requirement Competencies: The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. NOTE: This is a career-ladder position that includes grades GS-09, 11, 12, and 13. Upon satisfactory completion of qualification/performance requirements and at management's discretion, the incumbent may be advanced non-competitively to the next higher level. It is the ability to demonstrate satisfactory performance at the next higher level in all aspects of the position that is the primary basis for consideration for promotion. Meeting the time-in-grade requirement for the higher-grade position does not automatically entitle the incumbent to a promotion. Education Education may be substituted for experience at the GS-9 and GS-11 grade levels. If this position requires proof of higher education, or you are substituting education for experience, you must submit an unofficial transcript or a list of courses that includes the following information: name of accredited institution, grades earned, completion dates, and quarter and semester hours earned. Education completed in foreign colleges or universities may be used to meet the requirements. Please refer to General Schedule Qualification Policies for more information. You are not required to submit official documents at this time; copies are sufficient. Special Instructions for Foreign Education: Qualifying education from colleges and universities in foreign countries must be evaluated in terms of equivalency to that acquired in U.S. colleges and universities. Applicants educated in whole or in part in foreign countries must submit sufficient evidence, including transcripts, to an accredited private organization for an equivalency evaluation of course work and degree. A listing of these accredited organizations can be found on the Department of Education's website - US Department of Education. Another listing of services that can perform this evaluation is available at the National Association of Credential Evaluation Services (NACES) website. You must provide a copy of the letter containing the results of the equivalency evaluation with a course by course listing along with your application. Failure to provide such documentation when requested will result in lost consideration. NOTE: Only education and experience acquired before the filing deadline will be considered. Report only attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education. Additional Information If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System. If you are exempt from registration under Selective Service Law, you must provide appropriate proof of exemption. Please visit the Selective Service System website for more information. This is a Non Bargaining Unit position. This is a Public Trust position and has a risk level designation of "moderate". If selected for this position, you may be required to complete the Fair Credit Act Memo, which gives consent so that one or more consumer credit reports may be obtained for employment purposes. Background Investigation - If selected for this position, you may be required to complete a Declaration for Federal Employment (OF-306), which includes a fingerprint and credit check, to determine your suitability for Federal employment and to authorize a background investigation. The USPTO participates in E-Verify. For more information on E-Verify, please visit the Department of Homeland Security Website. All Federal employees are required to have Federal salary payments made by direct deposit to a financial institution of their choice. Relocation Expenses are not authorized and will not be paid. CTAP and ICTAP candidates will be eligible for selection priority if it is determined that they have exceeded the minimum qualifications for the position by attaining at least a "well qualified" rating of 85 out of 100. Information about CTAP and ICTAP eligibility is on the Office of Personnel Management's Career Transition Resources website at: OPM CTAP/ICTAP. CTAP/ICTAP documentation requirements are listed in the 'Required Documents' section of this announcement. More than one selection may be made from this announcement if additional identical vacancies in the same title, series, grade, and unit occur within 90 days from the date the certificate was issued. All application materials become the property of the United States Patent and Trademark Office. USPTO Job Applicants requiring reasonable accommodation for any part of the application and hiring process should request accommodation(s) from the USPTO at USPTO Reasonable Accommodation. The United States Patent and Trademark Office is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, retaliation, parental status, military service, or other non-merit factors. If you believe that you have been discriminated against and would like to file an EEO complaint, you must do so within 45 days of the date of the alleged discriminatory act. Claims of employment discrimination must be submitted to the attention of the USPTO's Office of Equal Employment Opportunity & Diversity via email (oeeod@uspto.gov) or phone (571-272-8292).