IT Cybersecurity Specialist

Small Business Administration; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

Small Business Administration in Washington, DC is seeking an IT Cybersecurity Specialist at GS-14 level to lead risk and vulnerability assessments for enterprise systems and guide security architecture. You will evaluate cybersecurity programs, ensure confidentiality, integrity, and availability, and provide mitigation recommendations to strengthen the agency's information systems.

This role requires experience aligned with IT-2210 standards and opens to CTAP/ICTAP eligible candidates.

Qualifications

• Leading risk and vulnerability assessments to identify systemic weaknesses and inform mitigations.
• Building cybersecurity architecture with long-range security strategies for enterprise systems.
• Evaluating cybersecurity programs to identify gaps and improvements for effectiveness.

Skills

Leading risk assessments

Vulnerability analyses

Cybersecurity architecture

Job description

This position is located in the Small Business Administration, Office of the Chief Information Officer in Washington, DC. The incumbent serves as an Information Technology (IT) Cybersecurity Specialist for the U.S. Small Business Administration (SBA). This vacancy is open to CTAP and ICTAP eligible candidates only. If you are not eligible for one of these you will be made ineligible for consideration for this position.

Qualifications: GS-14:

Specialized experience includes:

• Leading risk and vulnerability assessments, such as directing comprehensive risk assessments and vulnerability analyses of enterprise systems, networks, and software to identify systemic weaknesses and inform mitigation strategies.
• Building cybersecurity architecture, such as developing long-range system security strategies to ensure confidentiality, integrity, and availability of enterprise systems.
• Evaluating cybersecurity programs, such as assessing enterprise cybersecurity programs to identify gaps, ensure compliance with organizational requirements, and recommend improvements to enhance overall program effectiveness.

Specialized experience must show demonstrable competencies aligned to the position's job analysis and the IT-2210 standard. These qualifications must be clearly referenced in your resume. Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions. It is available for your review on OPM's Qualifications web site: Information Technology Management Series, 2210 Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Generally, time in Non-Pay status as a federal employee is not creditable towards the specialized experience requirement listed above. All qualification requirements must be met by 11:59 pm (Eastern Time) on 11/11/2026.