INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

US Defense Counterintelligence and Security Agency; Norwood (MA); On-site; USD 80,000 - 110,000; Full time

Job summary

Defense Counterintelligence and Security Agency is seeking Information Systems Security Professionals responsible for oversight of complex information assurance using Risk Management Framework and cybersecurity activities at cleared contractor sites nationwide. The position requires applying advanced INFOSEC concepts and coordinating with contractors and government staff to protect classified information.

Qualified applicants will be evaluated on specialized experience with cybersecurity, risk

Qualifications

• Specialized experience demonstrating competencies in cybersecurity, risk management, and communications.
• Experience applying information assurance concepts to regulated environments.
• Knowledge of government cybersecurity standards and OPM qualification standards.

Responsibilities

• Oversee information assurance at cleared contractor sites using Risk Management Framework and related cybersecurity activities.
• Evaluate security plans, vulnerabilities, and compliance with policies.
• Communicate security requirements and guidance to stakeholders; support continuous monitoring and incident response.

Skills

Cybersecurity

Risk management

Problem solving

Communications

Job description

DCSA's Industrial Security Field is looking for Information Systems Security Professionals (ISSP) with responsibility for oversight of complex information assurance utilizing Risk Management Framework & cybersecurity related activities at cleared contractor sites across the country. The ISSP employs technical knowledge and interpersonal skills to ensure information systems security managers understand and implement the technical controls and processes required to protect classified information. The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 11/16/2026

Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position.

You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GG/GS 12 in the Federal service and are prepared to take on greater responsibility.

Generally, this would include one year or more of such specialized experience.

Specialized experience for this position includes:

Utilizing a wide range of Cybersecurity and advanced Information Technology concepts, principles, and practices to apply to difficult and complex work assignments; Identifying, documenting and communicating security plan vulnerabilities; Utilizing risk management principles to perform risk analysis; Evaluating and applying information assurance regulations, policies, and procedures to analyze operating/developmental computer systems and identifying deficiencies in their ability to safeguard classified data and information.

Specifically you will be evaluated on the following competencies

1. Cybersecurity - Support protection of the confidentiality, integrity, non-repudiation, and availability of systems, networks, and data through planning, analysis, development, penetration testing, access control, implementation, maintenance, and enhancement of information security systems, programs, policies, procedures, and tools
2. Risk Management - Knowledge of the principles, methods, and tools used for risk assessment and mitigation, including assessment of failures and their consequences.
3. Problem Solving - Identifies and analyzes problems; weighs relevance and accuracy of information; seeks/generates and evaluates alternative perspectives/solutions; makes timely/ effective recommendations, based on potential implications of findings or conclusions. Critically evaluates to identify the causes of problems, and chooses courses of action that balance the interests of the mission and stakeholders.
4. Communications - Communicate (i.e., written and oral) rights, responsibilities, management directives, policies, and/or regulations to employees, supervisors, and/or other pertinent individuals.