INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

US Defense Counterintelligence and Security Agency; Hanover (MD); On-site; USD 90,000 - 110,000; Full time

Job summary

The US Defense Counterintelligence and Security Agency (DCSA) Industrial Security Office seeks Information Systems Security Professionals to oversee complex information assurance and cyber activities at cleared contractor sites nationwide. You will work with security managers to ensure proper controls and processes protect classified information.

Applicants should have specialized experience demonstrating competencies in cybersecurity, risk management, system administration, and written/oral

Qualifications

• Specialized experience demonstrates competencies in cybersecurity and information technology concepts.
• Experience applying information assurance regulations, policies, and procedures.
• At least one year of specialized experience at a level equivalent to GS/GG-12.

Responsibilities

• Utilize cybersecurity principles to protect confidentiality, integrity, and availability of systems and data.
• Identify, document, and communicate security vulnerabilities and risks.
• Apply risk management to analyze operating/developmental IT systems and identify deficiencies.

Skills

Cyber Security

Risk Management

System Administration

Oral Communication

Problem Solving

Writing

Job description

DCSA's Industrial Security Office is looking for Information Systems Security Professionals (ISSP) with responsibility for oversight of complex information assurance and cyber related activities at cleared contractor sites across the country. The ISSP employs technical knowledge and interpersonal skills to ensure information systems security managers understand and implement the technical controls and processes required to protect classified information. The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 10/16/2026

Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position.

You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GS/GG-12 in the Federal service and are prepared to take on greater responsibility.

Generally, this would include one year or more of such specialized experience.

Specialized experience for this position includes:

Utilizing a wide range of Cybersecurity and advanced Information Technology concepts, principles, and practices to apply to difficult and complex work assignments; Identifying, documenting and communicating security plan vulnerabilities; Utilizing risk management principles to perform risk analysis; Evaluating and applying information assurance regulations, policies, and procedures to analyze operating/developmental computer systems and identifying deficiencies in their ability to safeguard classified data and information.

Specifically you will be evaluated on the following competencies:

1. Cyber Security - Support protection of the confidentiality, integrity, non-repudiation, and availability of systems, networks, and data through planning, analysis, development, penetration testing, access control, implementation, maintenance, and enhancement of information security systems, programs, policies, procedures, and tools.
2. Risk Management - Knowledge of the principles, methods, and tools used for risk assessment and mitigation, including assessment of failures and their consequences.
3. System Administration - Administer Information Technology systems to ensure effective system operation.
4. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
5. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
6. Writing - Recognizes or uses correct English grammar, punctuation, and spelling; communicates information (for example, facts, ideas, or messages) in a succinct and organized manner; produces written information, which may include technical material that is appropriate for the intended audience.