Information Technology Specialist (Security)

US Department of State Headquarters; Washington (District of Columbia); On-site; USD 110,000 - 140,000; Full time

Job summary

The U.S. Department of State seeks a GS-13 cyber incident responder to monitor, analyze, and mitigate threats to the Agency's IT systems within the DT/CTMR. You will manage incident response activities and coordinate with leadership and contractor teams.

This on-site role is based in Washington, D.C. Qualified candidates have IT-related experience across the full incident lifecycle, documented analyses, and proven briefing skills to senior officials.

Qualifications

• Experience as a senior cyber incident responder monitoring, analyzing, and mitigating threats.
• Experience documenting and escalating cyber incidents, analyzing trends, and improving response processes.
• Experience briefing senior leadership and contractor teams on cyber risks and solutions.

Responsibilities

• Lead incident response activities across the full lifecycle, from detection to mitigation.
• Coordinate with leadership and contractor teams to ensure timely action and accountability.
• Provide clear, authoritative briefings and reports on threats, incidents, and remediation steps.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

This serves as public notice for the use of OPM's Direct Hire Authority. Applicants who meet the qualification requirements will be forwarded to the selecting official for consideration. We may select from this announcement or any other source to fill one or more vacancies.

This position is located in the Bureau of Diplomatic Technology, Office of Cyber Security Testing, Monitoring & Response (DT/CTMR) & monitors & conducts incident response for the Agency’s classified/unclassified IT systems

Applicants must meet all the qualification requirements described below by the closing date of this announcement.

Applicants applying for the GS-13 grade level must meet the following requirements: Have IT-related experience demonstrating EACH of the four competencies AND specialized experience listed below:

1. Attention to Detail - Monitors and analyzes network activity, documents and correlates incidents, and ensures controls and processes accurately address identified risks.
2. Customer Service - Provides timely alerts, reports, and recommendations to Department leadership and other stakeholders, and follows up to ensure corrective actions are completed.
3. Oral Communication - Delivers clear, authoritative briefings and incident updates to leadership and contractor teams, explaining threats, impacts, and recommended actions.
4. Problem Solving - Manages the full incident lifecycle, evaluates and improves cybersecurity capabilities and processes, leads CIRT projects, and directs contractor efforts to resolve complex cyber threats.

AND Have at least 1 full year of specialized experience equivalent to the GS-12 level in the Federal service which provided you with the particular knowledge, skills and abilities to perform the duties of the position.

Qualifying specialized experience must demonstrate the following:

• Experience as a senior cyber incident responder managing cybersecurity events from detection and monitoring through analysis and mitigation of threats.
• Experience documenting and escalating cyber incidents, analyzing incident and trend data to assess attack effectiveness, and applying and improving incident response processes.
• Experience briefing senior leadership and contractor teams on cybersecurity risks and solutions through oral and written reports.

NOTE: In order to qualify for this position, your experience MUST be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. There is no substitute of education for specialized experience for the GS-13 position.