IT Cybersecurity Specialist (Information Security)
What you'd do
Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.
Major duties
Detect exploits against targeted networks and hosts and react accordingly. Implement specific cybersecurity countermeasures for systems and/or applications. Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. Work with stakeholders to resolve computer security incidents and vulnerability compliance. Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications. Maintain situational awareness and functionality of organic operational infrastructure. Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization). Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities. Employ secure configuration management processes. This is a Non-Bargaining Unit Position. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: Cybersecurity Code 461 - Systems Security Analyst: Responsible for the analysis and development of the integration, testing, operations, and maintenance of systems security. Cyber Code 441 - Network Operations Specialist: Plans, implements, and operates network services/systems, to include hardware and virtual environments. Cyber Code 652 - Network Operations Specialist: Ensures that the stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.us-cert.gov/workforce-development/cyber-career-pathways Work Schedule: Monday-Friday 8 am-4:30 pm Compressed/Flexible: As determined by the Agency Policy. Telework: This position may be authorized for ADHOC telework. Virtual: This is not a virtual position. Position Description/PD#: IT Cybersecurity Specialist (Information Security)/PD18270A Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and attendance at meetings and conferences away from the work site. Some employees may carry light items, such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical efforts. Work Environment: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities.
What you need to qualify
You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below. Applicants must meet all requirements by the closing date of this announcement, 08/20/2026. Minimum Qualifications Requirements: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-12 in the normal line of progression for the occupation in the organization. Examples of specialized experience would typically include, but are not limited to: Experience planning, implementing, and operating network security systems to protect information from unauthorized access, including diagnosing connectivity issues and patching vulnerabilities; perform security reviews, identified gaps in security architecture, and contributed to risk management plans in alignment with established frameworks such as NIST RMF; and administer specialized cyber defense applications and provide cybersecurity recommendations and technical guidance to stakeholders based on emerging threats and security requirements. AND Selective Placement Factor: Experience in performing network routing, load balancing, stateful firewalls in addition to implementing cybersecurity countermeasures within an enterprise network environment, to include configuring or administering at least one of the following: firewalls, intrusion detection/prevention systems (IDS/IPS), and/or packet brokers. Evidence of all of these requirements must be reflected in your resume. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. It is the policy of the VA to not deny employment to those who have faced financial hardships or periods of unemployment.
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.