Information Technology Specialist (Security)

USDA Animal and Plant Health Inspection Service (APHIS); Fort Collins (CO); On-site; USD 106,000 - 138,000; Full time

Job summary

USDA Animal and Plant Health Inspection Service (APHIS) in Fort Collins, CO seeks a Cyber Security Engineer to administer a program integrating cybersecurity into the IT solution development lifecycle. You will provide full life cycle vulnerability assessment for all MRP-ITD IT systems and elevate secure design across projects.

The role requires specialized experience at the GS-13 level, including evaluating security of architectures, performing code scans, and guiding remediation per

Qualifications

• Specialized experience at GS-13 level or equivalent, including secure SDLC knowledge.
• Experience evaluating security of solutions, architectures, and changes across the SDLC.
• Ability to perform code scanning reviews and remediation per OWASP/NIST guidelines.

Responsibilities

• Apply federal IT security guidelines (OWASP, NIST, SANS) for cyber defense planning.
• Contribute to delivery of enterprise security services (WAF, data masking).
• Develop policies to ensure reliable, secure information systems and prevent unauthorized access.
• Participate in network and systems design ensuring proper security controls.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Cyber security

SDLC security

Tools

OWASP

NIST guidelines

Static/Dynamic code analysis

Job description

Find Your Future With Us at USDA — Animal Plant Health Inspection Service

Job Summary

The mission of the Information Technology Division (ITD) is to acquire and use IT resources to improve the quality, timeliness, and cost effectiveness of Animal and Plant Health Inspection Service (APHIS) and Agricultural Marketing Service (AMS) service delivery. You will serve as Cyber Security Engineer administering a program that integrates cybersecurity throughout the IT solution development lifecycle (SDLC); provide full life cycle vulnerability assessment for all MRP-ITD IT systems.

Qualifications

Applicants must meet all qualifications and eligibility requirements by the closing date of the announcement, including specialized experience and/or education, as defined below. FOR THE GS-13 LEVEL: Applicants must have one year of specialized experience (equivalent to the GS-12 level) that may have been obtained in the private or public (local, county, state, Federal) sectors which demonstrates: Evaluating current and proposed technical solutions, processes, and architectural changes to ensure secure design and configuration principles are implemented throughout the IT system development lifecycle (SDLC). Performing static and dynamic source code scanning reviews and code level remediation of vulnerability findings in compliance with IT guidelines such as OWASP Top 10 standards and National Institute of Standards and Technology (NIST) guidelines. Communicating potential and confirmed risks and vulnerabilities to stakeholders and providing remediation steps. Participating in cyber incident response and remediation efforts related to application or network security incidents. In addition, all applicants qualifying based on experience must have IT-related experience demonstrating each of the four competencies listed below. Applicants must demonstrate possession of these competencies within the body of the resume; no separate statements addressing them are required. Attention to Detail – Is thorough when performing work and conscientious about attending to detail. Customer Service – Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication – Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving – Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Note: There is no education substitution for this grade level. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Major Duties

The duties may include, but are not limited to:Applies knowledge of federal and industry IT security guidelines, such as Open Web Application Security Project (OWASP), National Institute of Standards and Technology (NIST), and SANS Institute to effect agency-wide cyber defense planning.Contributes to delivery of enterprise security services such as Web Application Firewall (WAF), Enterprise Datamasking,Optimizes the effectiveness and efficiency of the IT security engineering and architecture programs based on meaningful operational and performance metrics.Develops policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data.Participates in network and systems design to ensure implementation of appropriate systems security policies.

Position Start Date

11/03/2026

Position Close Date

11/09/2026

Salary Offered

106437 – 138370 USD Per Year

You can make a difference! The U.S. Department of Agriculture’s (USDA) Marketing and Regulatory Programs (MRP) needs bright, energetic and committed professionals to facilitate the domestic and international marketing of U.S. agricultural products and to protect the health and care of animals and plants in the United States. We operate in domestic and global markets. Be part of an organization that protects the health and agriculture of the American people. Join our team! To learn more about what it’s like to work at the Animal and Plant Health Inspection Service, what the agency does, and the types of careers, please visit the APHIS careers site. APHIS is an emergency response agency. This means that all Agency employees may be asked or assigned to participate in rotating temporary duty assignments to support emergency programs at some time during their careers with APHIS. For details click: APHIS Emergency Response