Summary This position is located in the Office of Nuclear Security and Incident Response, Division of Physical and Cyber Security and Policy, Cyber Security Branch. The supervisor is Mario Fernandez. This position is in the Bargaining Unit with the National Treasury Employees Union, Chapter 208. This position is subject to Confidential Financial Disclosure reporting requirements. This position is subject to security ownership restriction reporting requirements. Responsibilities The successful candidate will perform the full range of Reactor Systems Engineer (Cyber) duties. Such duties include but are not limited to: 1. Reviews plant specific critical systems and critical digital assets, determining adverse impacts including propagating effects from cyber compromise, taking into consideration unique design differences associated with a variety of individual facilities of different licensee types. Utilizes knowledge of integrated system operations and functions to determine potential cyber-related adverse impacts such as maloperation or failure of digital systems on safety, security, emergency preparedness, and material control, and accounting systems. Inspects licensee cyber security program implementation, specifically including licensee critical system, and critical digital asset analyses. Provides cyber security inspection report input in coordination with headquarters cyber security specialists and regional inspection teams. 2. Provides technical support for development of cybersecurity requirements , associated regulatory guidance, and oversight products . Reviews and evaluates analyses and assessments from other divisions in the Office of Nuclear Security and Incident Response, Office of Nuclear Reactor Regulation, Office of Nuclear Materials Safety and Safeguards, Office of Nuclear Regulatory Research, and other organizational units. Provides technical assistance and advice to the regions offices and other NRC offices on matters which fall into the Cyber Security Branch’s area of responsibility. Reviews licensee cybersecurity plans to verify that licensee cybersecurity programs are adequate to meet regulatory requirements. 3. Gathers and interprets complex and diverse technical data; analyzes the data and forms recommendations with technical bases for agency positions related to cyber security, including assessment of cyber events. Recommends technical assistance or research work that the NRC should sponsor to enhance the cyber security of NRC-licensed facilities; develops or confirms requirements and supports development and implementation of cybersecurity-related contracts or interagency agreements. Prepares responses to inquiries received from members of Congress, other federal agencies, Industry, and other members of the public regarding Commission activities in the area of cyber security. Identifies and develops cyber security related policy, programmatic, and regulatory issues associated with NRC-licensed facilities. Requirements Conditions of Employment U.S. Citizenship Required This is a Drug Testing position. Background investigation leading to a clearance is required for new hires You must meet the qualifications for this position by no later than 30 calendar days after the closing date of this announcement and before placement in the position. Qualifications In order to qualify for this position, you must have at least one year of specialized experience at the next lower grade level (GG-13) in the Federal service or equivalent experience in the private or public sector. The ideal candidate will be able to demonstrate the following: 1. Demonstrated knowledge of and an ability to interpret and apply rules, regulations, policies, guidelines, practices, and procedures related to the operation, licensing, and inspection or nuclear facilities. (Describe education, training, and experience which demonstrate your knowledge of and ability to interpret and apply standards, including an understanding of technical issues and problems underlying the need for regulation. Describe training and experience which demonstrate your knowledge and application of such regulations. Describe situations in which you have been required to develop, interpret, implement, comply with, and apply regulations). 2. Demonstrated knowledge of the theory, principles, and practices in the field of engineering with specific knowledge of nuclear power plant digital systems and equipment associated with safety, security, and emergency preparedness functions. (Describe education, training, experience, and accomplishments which demonstrate knowledge of the theory, principles, and practices in the field of engineering with specific knowledge of nuclear power plant digital systems and equipment associated with safety, security, and emergency preparedness functions. Include examples of experience involving design, installation, maintenance, or inspection of digital systems. Highlight any experience evaluating digital systems for cyber vulnerabilities, or applying and evaluating countermeasures, cybersecurity controls, or protection strategies to protect power plant digital systems from cyber attacks). 3. Demonstrated ability to effectively communicate technical information both orally and in writing. (EXAMPLE: Describe specific experience, training, and provide examples which demonstrate your ability to effectively communicate complex technical information both orally and in writing in a clear, concise, and easy to understand manner to audiences who are not experts in the cybersecurity field. Examples may also include complex technical discussions, developing and/or delivering training, consolidating complex and diverse opinions, data, or analysis results into balanced and well-founded recommendations, and producing high-quality technical reports to diverse stakeholders.) 4. Demonstrated ability to develop and implement successful approaches to problem solving, conflict resolution, apply effective decision-making using available information and risk insights. (EXAMPLE: Describe professional experience with problem identification and resolution and give instances where your problem-solving and conflict resolution skills were demonstrated to be especially effective, or contributed to the success of a project or an organization.) SPECIALIZED EXPERIENCE is defined as: Demonstrated experience performing reviews of high-risk critical systems or digital assets from critical infrastructure sectors (e.g., chemical, communications, manufacturing, dams, defense industrial base, energy, food and agricultural, healthcare, transportation systems, or water and wastewater systems) to determine adverse impact resulting from cyber compromise inspections in at least one of the of the following areas as described above. A description of how you possess the specialized experience as well as how you meet the qualifications desired in an ideal candidate should be addressed in your resume. Education 0801 Basic Requirements: A. Degree: Engineering. To be acceptable, the program must: (1) lead to a bachelor’s degree in a school of engineering with at least one program accredited by ABET; or (2) include differential and integral calculus and courses (more advanced than first-year physics and chemistry) in five of the following seven areas of engineering science or physics: (a) statics, dynamics; (b) strength of materials (stress-strain relationships); (c) fluid mechanics, hydraulics; (d) thermodynamics; (e) electrical fields and circuits; (f) nature and properties of materials (relating particle and aggregate structure to properties); and (g) any other comparable area of fundamental engineering science or physics, such as optics, heat transfer, soil mechanics, or electronics. OR B. Combination of education and experience -- college-level education, training, and/or technical experience that furnished (1) a thorough knowledge of the physical and mathematical sciences underlying engineering, and (2) a good understanding, both theoretical and practical, of the engineering sciences and techniques and their applications to one of the branches of engineering. The adequacy of such background must be demonstrated by one of the following: 1. Professional registration or licensure -- Current registration as an Engineer Intern (EI), Engineer in Training (EIT)1, or licensure as a Professional Engineer (PE) by any State, the District of Columbia, Guam, or Puerto Rico. Absent other means of qualifying under this standard, those applicants who achieved such registration by means other than written test (e.g., State grandfather or eminence provisions) are eligible only for positions that are within or closely related to the specialty field of their registration. For example, an applicant who attains registration through a State Board's eminence provision as a manufacturing engineer typically would be rated eligible only for manufacturing engineering positions. 2. Written Test -- Evidence of having successfully passed the Fundamentals of Engineering (FE)2 examination or any other written test required for professional registration by an engineering licensure board in the various States, the District of Columbia, Guam, and Puerto Rico. 3. Specified academic courses -- Successful completion of at least 60 semester hours of courses in the physical, mathematical, and engineering sciences and that included the courses specified in the basic requirements under paragraph A. The courses must be fully acceptable toward meeting the requirements of an engineering program as described in paragraph A. 4. Related curriculum -- Successful completion of a curriculum leading to a bachelor's degree in an appropriate scientific field, e.g., engineering technology, physics, chemistry, architecture, computer science, mathematics, hydrology, or geology, may be accepted in lieu of a bachelor’s degree in engineering, provided the applicant has had at least 1 year of professional engineering experience acquired under professional engineering supervision and guidance. Ordinarily there should be either an established plan of intensive training to develop professional engineering competence, or several years of prior professional engineering-type experience, e.g., in interdisciplinary positions. (The above examples of related curricula are not all-inclusive.) Additional Information The duty location of this position is in Rockville, Maryland (HQs). In general, employees are expected to be in the office at a minimum of 4 days per pay period**. Telework schedules, including full-time telework, are approved, on a case-by-case basis. If selected, telework will be determined in accordance with Agency policy and the Collective Bargaining Agreement, if applicable.