Cybersecurity Testing and Evaluation Specialist

National Security Agency; Fort Meade (MD); On-site; USD 87,000 - 153,000; Full time

Job summary

National Security Agency is seeking a Cybersecurity Testing Specialist (Entry to Mid-Level) at Fort Meade, MD. The role focuses on formal assessments, mimicking real-world attacks, and identifying methods to bypass security features across applications, systems, and networks.

The position emphasizes evidence-based testing, cutting-edge methodologies, and potential to advance national security through rigorous testing and remediation guidance.

Qualifications

• Degree in CS or related field with foundational CS coursework.
• Experience in engineering of computer or information systems lifecycle, programming, vulnerability analysis, and testing.
• Experience with RMF/NIST 800-53 testing practices and cybersecurity testing workflows.
• Interest or training in JCAC or related military cyber training counts toward experience.

Responsibilities

• Conduct security controls testing to ensure proper implementation by system owners.
• Test cloud services and configurations across multiple providers.
• Assess effectiveness of security solutions against MITRE ATT&CK framework.
• Develop and evolve cybersecurity testing procedures and automation.
• Participate in RMF lifecycle steps for NSA IT systems.
• Support automation across testing processes.

Skills

Cybersecurity testing

RMF/NIST 800-53

MITRE ATT&CK

Automation tooling

Analytical thinking

Team collaboration

Education

Bachelor's degree in Computer Science or related field

Associate's degree + 2 years relevant experience

Master's/Doctoral degree + relevant experience

Tools

Nmap

Nessus

Metasploit

Dnsnoop/Dsniff

Netcat

Shell scripting (Python/Perl/Ruby)

Job description

Cybersecurity Testing and Evaluation Specialist - Entry to Mid-Level (Maryland)

Fort George G. Meade Complex, MD
Pay Plan: GG , Grade: 07/1 to 12/10
Open: 2026-09-11, Close: 2026-09-14

Job Posting: 1262518

Responsibilities

Cybersecurity testers at NSA play a vital role in the security of NSA's mission by conducting both security controls and adversarial testing against our state-of-the-art Information Technology (IT) systems executing NSA's SIGINT and Cybersecurity missions. NSA is advancing technology to deliver mission outcomes. As such, Cybersecurity testers have the opportunity to work across a broad set of technologies including commercial cloud fabrics, artificial intelligence, high performance computing, and advanced cryptographic systems. These personnel are involved in both developmental and operational testing so NSA systems can be protected from the most sophisticated nation state adversaries. Some examples of tasks include:

• Conducting security controls testing of NSA systems to ensure controls are properly implemented by system owner(s)
• Conducting testing against cloud fabrics, including various security configuration options of cloud services and a wide variety of different security configurations
• Assessing the effectiveness of security solutions against cybersecurity frameworks (e.g. MITRE Attack Framework)
• Operating within teams focused on implementing and evolving cybersecurity testing procedures and implementing automation to reduce testing time and improve consistent analysis
• Operating within a cybersecurity team for each of the life cycle steps of the Federal Government's Risk Management Framework (RMF), as maintained by the National Institute of Standards and Technology (NIST 800-53)
• Implementing automation across the cybersecurity testing processes

Depending on their education, training, and experience, Cybersecurity testers are hired into positions as a Testing and Evaluation Specialist and placed into functional positions performing cybersecurity testing functions commensurate with their skills. Entry-level cybersecurity professionals will take on the front-line control testing of our systems while beginning to learn the intricacies of secure system design. The most experienced testing personnel will have opportunities to formulate unconstrained cybersecurity testing to emulate cybersecurity adversary and rogue system administrator threats.

Job Summary

As a Cybersecurity Testing Specialist, you will apply your cybersecurity expertise to perform formal assessments mimicking real-world attacks to identify methods for circumventing security features of applications, systems, and networks. This fact-based testing, leveraging cutting-edge methodologies, will give you the unique opportunity to identify flaws and vulnerabilities in system design and influence remediations. As a Cybersecurity Testing Specialist, you will optimize and influence improvements to the protection of national security interests as part of the world's most advanced team of cybersecurity professionals.

Qualifications

The qualifications listed are the minimum acceptable to be considered for the position.Degree must be in Computer Science (CS) or related field (e.g., Engineering, Mathematics). Degrees in Information Technology, Information Systems, Information Security, Networking (Systems Administration), Information Assurance, and Cybersecurity may be considered relevant if the programs contain, at minimum, a concentration of courses in the following foundational CS areas: algorithms; computer architecture (not network architecture); programming methodologies and languages; data structures; logic and computation; and upper-level mathematics.Relevant experience must be in engineering of computer or information systems over their lifecycle (i.e., requirements analysis, design, development, implementation, testing, integration, deployment/installation, and maintenance), programming, vulnerability analysis, penetration testing, computer forensics, and/or systems engineering. Completion of military training in a relevant area such as JCAC (Joint Cyber Analysis course) will be considered towards the relevant experience requirement (i.e., 24-week JCAC course will count as 6 months of experience).ENTRYEntry is with a Bachelor's degree and no experience. An Associate's degree plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position.FULL PERFORMANCEEntry is with a Bachelor's degree plus 3 years of relevant experience or a Master's degree plus 1 year of relevant experience or a Doctoral degree and no experience. An Associate's degree plus 5 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position.

We're looking for someone with knowledge, skills, and experience in one or more of the following:- Cloud Security Knowledge for commercial cloud environments such as Amazon Web Services, Microsoft Azure, Oracle or Google cloud environments- Knowledge of or experience with penetration testing or ethical hacking methodologies- Knowledge of network attacks based on MITRE Attack Framework- Familiarity with exploitation techniques and frameworks (network firewalls, intrusion detection systems, networks)- Familiarity with various exploitation frameworks (e.g. Metasploit)- Understanding of shell scripting for the development of network attack tools and techniques (e.g. Python, Perl, or Ruby)- Knowledge of vulnerability identification, mitigations, and countermeasures- Understanding of network protocols- Knowledge of Windows / Linux network programming- Knowledge of network architecture, network and IT infrastructure devices, physical and virtual- Understanding of tools (nmap, nessus, dsniff, libnet, netcat, network sniffers) and techniques (e.g. fuzzing)- Understanding of threat modeling and development of test scenarios- Critical thinking and ability to break large complex problems into manageable partsExperience and knowledge of computer security tools, vulnerability analysis, systems architecture, systems engineering, test and evaluation tradecraft, and software engineering is helpful. Working knowledge of automation tools and Linux is helpful.The ideal candidate is someone with a desire for experiential learning and strong problem-solving, analytic and interpersonal skills who is:- willing to take the initiative- innovative- able to work effectively across several different functional areas in a collaborative environment- able to communicate effectively (both orally and written)- well-organized and able to handle multiple assignments.

Pay: Salary offers are based on candidates' education level and years of experience relevant to the position and also take into account information provided by the hiring manager/organization regarding the work level for the position.Salary Range: $87,362 - $153,082 (Entry/Developmental, Full Performance)Salary range varies by location, work level, and relevant experience to the position.Training will be provided based on the selectee's needs and experience.Benefits: NSA offers a comprehensive benefits package.Work Schedule: This is a full-time position, Monday - Friday, with basic 8hr/day work requirement between 6:00 a.m. and 6:00 p.m. (flexible).DCIPS Trial Period:If selected for this position, you will be required to serve a two-year DCIPS trial period, unless you are a veterans' preference-eligible employee, in which case you are required to serve a one-year trial period. This trial period runs concurrently with your commitment to the position, if applicable. Before finalizing your appointment at the conclusion of your trial period, NSA will determine whether your continued employment advances the public interest. This decision will be based on factors such as your performance and conduct; the Agency's needs and interests; whether your continued employment would advance the Agency's organizational goals; and whether your continued employment would advance the efficiency of the Federal service.Upon completion of your trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.If you do not receive certification for continued employment, you should receive written notice prior to the end of your trial period that your employment will be terminated and the effective date of such termination.

DCIPS Disclaimer

VETERANS AND TRANSITIONING SERVICE MEMBERS Thank you for your service! The National Security Agency (NSA) is part of the Defense Civilian Intelligence Personnel System (DCIPS). All positions at NSA are in the Excepted Service under Title 10, United States Codes (U.S.C.), Section 1601 appointment authority.Veterans' PreferenceIn accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, "DoD Civilian Personnel Management System: Defense Civilian Intelligence Personnel System Employment and Placement," NSA applies veterans' preference, as defined by Section 2108 of Title 5, U.S.C., to eligible candidates. If you are claiming veterans' preference, you are required to provide acceptable documentation of your preference eligibility upon application.Acceptable documentation includes:

• DD-214: "Certificate of Release or Discharge from Active Duty," which shows dates of service and discharge under honorable conditions (Copy 4)
• OR- Certification of Service: A written document on letterhead from the appropriate branch of the armed forces that certifies the service member is expected to be discharged or released from active duty service in the armed forces under honorable conditions not later than 120 days after the date the certification is signed. The certification should include the military service dates, including the expected discharge or release date
• AND- Standard Form 15 (SF-15) Application for 10-point Veteran Preference (http://www.opm.gov/forms/pdf_fill/sf15.pdf)
• IF you are claiming a service-connected disability of 30 percent or more, the documentation you provide must specifically demonstrate this level of disability; and- VA Letter of Disability (for 10pt and Sole Survivorship rating)You may obtain a letter from the Department of Veterans Affairs reflecting your level of disability for preference eligibility by visiting a VA Regional Office, contacting a VA call center, or online (https://www.ebenefits.va.gov/).