IT Cybersecurity Specialist (INFOSEC)

See below for important information regarding this job.

Major duties

• Serves as principal technical authority and program manager for the Security Operations Center program, directing strategic development, accreditation, and sustainment.
• Defines the enterprise roadmap for compliance with DoW mandates and federal statutes, leveraging NIST RMF 2.0 to govern risk and optimize cyber posture.
• Establishes strategic plans for Cyber Emergency Response Team adherence to NIST SP 800-61r3, integrating complex IT services and shaping DoW cyber programs.
• Consults with senior leadership on cybersecurity policies, emerging technologies, and threat intelligence to advance enterprise cyber defense posture.
• Directs complex external assessments, including red and purple team operations, analyzing outcomes to identify systemic risks and architectural weaknesses.
• Serves as lead authority to defend Cyber Key Terrain, fusing disparate intelligence data and briefing executive leadership on mission assurance risks.
• Serves as Contracting Officer's Technical Representative, authoring complex technical requirements, statements of work, and performance standards.
• Exercises final technical authority to accept or reject contractor deliverables, ensuring contract outcomes align with enterprise cybersecurity objectives.

Qualifications

To qualify for a IT Cybersecurity Specialist (INFOSEC), your resume and supporting documentation must support: A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to successfully perform the duties of the position and is directly in or related to this position. To qualify at the GS-14 level, applicants must possess one year of specialized experience equivalent to the GS-13 level or equivalent under other pay systems in the Federal service, military, or private sector. Applicants must meet eligibility requirements including time-in-grade (General Schedule (GS) positions only), time-after-competitive appointment, minimum qualifications, and any other regulatory requirements by the cut-off/closing date of the announcement. Creditable specialized experience includes: Managing enterprise-level cybersecurity operations or Security Operations Center (SOC) programs Implementing cybersecurity risk management frameworks such as NIST RMF Directing advanced threat analysis or red and purple team assessments Providing authoritative technical leadership and contract oversight for mission-critical cyber defense initiatives. B. Education: Applicants may not qualify for this position based on education in lieu of specialized experience. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

Substitution of education may not be used in lieu of specialized experience for this grade level.