IT Cybersecurity Specialist (INFOSEC) - 892776500

Caecommunity; Washington; On-site; USD 80,000 - 120,000; Full time

Job summary

Department of Veterans Affairs (VA) is seeking an IT Cybersecurity Specialist to strengthen the security posture of VA IT systems and protect Veteran data. You will work within the Office of Information Security to support enterprise-wide strategy and governance, with responsibilities across risk management, policy development, and incident response.

The role requires applying security controls and collaborating with VA and OIT to advance a secure digital transformation that protects patient

Qualifications

• Ability to apply IT security principles, policies, and procedures
• Strong problem solving and analytical skills
• Excellent written and verbal communication with leadership
• Experience working in IT security in complex environments

Responsibilities

• Apply IT security principles, policies, and procedures to protect networks, systems, and devices.
• Conduct risk assessments and authorization/accreditation activities for complex information systems.
• Develop or recommend IT security policies, controls, or countermeasures based on risk findings.
• Communicate technical security analysis and recommendations to organizational leadership

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families. To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 11/19/2026.

You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below.

Minimum Qualifications Requirements

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

-AND-

Specialized Experience:

You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT.

Specialized experience for this position is defined as applying IT security principles, policies, and procedures to protect networks, systems, and devices, which includes: conducting risk assessments and authorization/accreditation activities for complex information systems; developing or recommending IT security policies, controls, or countermeasures based on risk assessment findings; communicating technical security analysis and recommendations to all levels of organizational leadership; and conducting research risk assessments for research studies.

-AND-

Selective Placement Factor:

This position includes a skill, knowledge, ability or other worker characteristic basic to, and essential for, satisfactory performance of the job. Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration.

Selective Placement Factors for this position is defined as experience with applying system development life cycle management concepts sufficient to performance monitoring of complex risk management of IT networks, systems and specialized medical equipment as related to Federal Information Security Management to support security review assessments, Risk Management Framework (RMF), and compliance requirements to ensure compliance with VA secure configuration guides and applicable Federal security policies based on National Institute of Standards and Technology (NIST) standards and Federal policies. Experience applying the NIST Risk Management Framework (RMF) to assess, authorize, and secure networked systems, devices, or special purpose systems within a healthcare, research, or similarly complex federal IT environment.

Evidence of all of these requirements must be reflected in your resume.

For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/.