About this role
Job SummaryJoin the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.
QualificationsYou must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below. Applicants must meet all requirements by the closing date of this announcement, 08/20/2026. Minimum Qualifications Requirements: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-12 in the normal line of progression for the occupation in the organization. Examples of specialized experience would typically include, but are not limited to: Experience planning, implementing, and operating network security systems to protect information from unauthorized access, including diagnosing connectivity issues and patching vulnerabilities; perform security reviews, identified gaps in security architecture, and contributed to risk management plans in alignment with established frameworks such as NIST RMF; and administer specialized cyber defense applications and provide cybersecurity recommendations and technical guidance to stakeholders based on emerging threats and security requirements. AND Selective Placement Factor: Experience in performing network routing, load balancing, stateful firewalls in addition to implementing cybersecurity countermeasures within an enterprise network environment, to include configuring or administering at least one of the following: firewalls, intrusion detection/prevention systems (IDS/IPS), and/or packet brokers. Evidence of all of these requirements must be reflected in your resume. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/. Note: A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. It is the policy of the VA to not deny employment to those who have faced financial hardships or periods of unemployment.
Major DutiesDetect exploits against targeted networks and hosts and react accordingly. Implement specific cybersecurity countermeasures for systems and/or applications. Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. Work with stakeholders to resolve computer security incidents and vulnerability compliance. Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources. Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications. Maintain situational awareness and functionality of organic operational infrastructure. Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization). Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities. Employ secure configuration management processes. This is a Non-Bargaining Unit Position. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: Cybersecurity Code 461 - Systems Security Analyst: Responsible for the analysis and development of the integration, testing, operations, and maintenance of systems security. Cyber Code 441 - Network Operations Specialist: Plans, implements, and operates network services/systems, to include hardware and virtual environments. Cyber Code 652 - Network Operations Specialist: Ensures that the stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.us-cert.gov/workforce-development/cyber-career-pathways Work Schedule: Monday-Friday 8 am-4:30 pm Compressed/Flexible: As determined by the Agency Policy. Telework: This position may be authorized for ADHOC telework. Virtual: This is not a virtual position. Position Description/PD#: IT Cybersecurity Specialist (Information Security)/PD18270A Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and attendance at meetings and conferences away from the work site. Some employees may carry light items, such as papers, books, or small parts, or drive a motor vehicle. The work does not require any special physical efforts. Work Environment: The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. Some employees may occasionally be exposed to uncomfortable conditions in such places as research and production facilities.RequirementsYou must be a U.S. Citizen to apply for this job Selective Service Registration is required for males born after 12/31/1959 Subject to background/security investigation May serve a probationary period. A complete application package; Resume, SF-50s, etc. Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements (https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents). Effective May 7, 2025, driver's licenses or state-issued dentification cards that are not REAL ID compliant cannot be utilized as an acceptable form of identification for employment. As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.