IT Cybersecurity Specialist (INFOSEC)

Summary

Join the Office of Information Security (OIS) service line under OIT and be part of VA's digital transformation. OIS manages VA's cybersecurity program to protect Veteran data and VA information systems. Delivers enterprise-wide strategy, policy, governance, and network defense through collaboration with VA and OIT. As an IT Cybersecurity Specialist, you will enhance the security posture and resilience of VA's IT systems and data and protect the privacy and trust of Veterans and their families.

Duties

Provides expert security advice and consultation in the implementation and risk management of IT networks, systems, and devices to ensure controlled accessibility and security compliance, as well as prevent and defend against unauthorized access to systems, networks, and data. Administers and monitors the division's implementation of the Risk Management Framework (RMF) steps and activities throughout system life cycle. Ensures the confidentiality, integrity, and availability of networks, systems, devices, and data through the planning, analysis, development, implementation, maintenance and enhancement of information systems security program policies, procedures, and tools. Uses data collected from a variety of cyber defense tools to analyze events that occur within their environments for the purposes of mitigating threats. Assists in the implementation of programs to ensure the safeguarding of systems, networks, and devices, and data users are aware of, understand, and adhere to systems security policies and procedures. Supports the implementation of information technology (IT) security controls, security authorization documents, and participates in system audits. Leads teams in conducting comprehensive program studies and evaluations to assure the continuous operations of IT networks/systems/devices and adherence to established Federal regulations and VA policies and procedures to prevent unauthorized access and data compromise. Investigates cyber security incidents for IT networks, systems, and devices to identify possible break of security policies and/or other violations. Establishes and implements enterprise research cybersecurity programs that support unique and complex research projects and collaborative studies. Conduct risk assessments for all VA/VHA network connected medical devices and associated healthcare systems, medical security boundaries, and Special Purpose Systems. This position is primarily aligned to the following NICE Cybersecurity Workforce Framework work roles: 722: Information Systems Security Manager: Responsible for the cybersecurity of a program, organization, system, or enclave. 805: IT Program Auditor: Conducts system, network, and device security control assessments, audits, and reviews, and develops security contingency, disaster recovery, and cybersecurity incident response plans and procedures. 511: Cyber Defense Analyst: Uses data collected from a variety of cyber defense tools to analyze events that occur within their environments for the purposes of migrating threats. For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.cisa.gov/tools/cyber-career-pathways-tool Position Description/PD#: IT Cybersecurity Specialist (INFOSEC)/PD17918A Work Schedule: Monday - Friday; 8:00am-4:30pm Compressed/Flexible: As determined by the Agency Policy. Telework: ADHOC/Situational. Virtual: This is not a virtual position. Remote: This is not a remote position. Relocation/Recruitment Incentives: Not authorized. Permanent Change of Station (PCS): Not authorized. Travel Required: 25% or less. Bargaining Unit: No Physical Demands: The work is sedentary. Some work may require walking and standing in conjunction with travel and to attendance at meetings and conferences away from the work site. No special physical demands are required to perform the work. Work Environment: The work is performed in an adequately lighted and climate controlled office environment which involves everyday risks or discomforts that require normal safety precauations. Requirements

You must be a U.S. Citizen to apply for this job To be considered for this position, you must complete all required steps in the process. In addition to the application and questionnaire, this position requires an online assessment. The online assessment measures critical general competencies required to perform the job. Subject to background/security investigation Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements (https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents). Effective May 7, 2025, driver's licenses or state-issued dentification cards that are not REAL ID compliant cannot be utilized as an acceptable form of identification for employment. As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: your performance and conduct; the needs and interests of the agency; whether your continued employment would advance organizational goals of the agency or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. All required documents must be uploaded at the time you submit your application. The system supports only one submission. Applicants will not be able to edit their application or upload additional documents once it has been submitted. Applications that are incomplete-including those missing required documentation-will not be considered. Applicants are responsible for reviewing the Required Documents section and ensuring all mandatory materials are included prior to submission. Note: Applicants will not be contacted for missing information. It is the applicant's responsibility to provide all documentation necessary to determine qualification and eligibility. Qualifications

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 11/19/2026. You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below. Minimum Qualifications Requirements: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization. Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. Specialized experience for this position is defined as applying IT security principles, policies, and procedures to protect networks, systems, and devices, which includes: conducting risk assessments and authorization/accreditation activities for complex information systems; developing or recommending IT security policies, controls, or countermeasures based on risk assessment findings; communicating technical security analysis and recommendations to all levels of organizational leadership; and conducting research risk assessments for research studies. -AND- Selective Placement Factor: This position includes a skill, knowledge, ability or other worker characteristic basic to, and essential for, satisfactory performance of the job. Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration. Selective Placement Factors for this position is defined as experience with applying system development life cycle management concepts sufficient to performance monitoring of complex risk management of IT networks, systems and specialized medical equipment as related to Federal Information Security Management to support security review assessments, Risk Management Framework (RMF), and compliance requirements to ensure compliance with VA secure configuration guides and applicable Federal security policies based on National Institute of Standards and Technology (NIST) standards and Federal policies. Experience applying the NIST Risk Management Framework (RMF) to assess, authorize, and secure networked systems, devices, or special purpose systems within a healthcare, research, or similarly complex federal IT environment. Evidence of all of these requirements must be reflected in your resume. For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/.

How You Will Be Evaluated

Your qualifications will be evaluated based on your application materials (e.g., resume, supporting documents), your responses on the application questionnaire, and your responses to all assessments required for this position. You will be assessed on the following Competencies for this position: Accountability Attention to Detail Customer Service Decision Making Flexibility Influencing/Negotiating Integrity/Honesty Interpersonal Skills Learning Reading Comprehension Reasoning Self-Management Stress Tolerance Teamwork USA Hire Assessments include a cut score based on the minimum level of required proficiency in these critical general competencies. You must meet or exceed the cut score to be considered. You will not be considered for the position if you score below the cut score or fail to complete the assessment. Your experience must be fully documented on your resume and must include job title, duties, month and year start/end dates AND hours worked per week. A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. IN DESCRIBING YOUR EXPERIENCE, PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration. Cheating on the online assessment may also result in your removal from consideration. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religions; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. During the application process you may have an option to opt-in to make your resume available to hiring managers in the agency who have similar positions. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions. Veterans and Transitioning Service Members: Please visit the VA for Vets site for career-search tools for Veterans seeking employment at VA, career development services for our existing Veterans, and coaching and reintegration support for military service members. Benefits

Receiving Service Credit or Earning Annual (Vacation) Leave: Federal Employees earn annual leave at a rate (4, 6 or 8 hours per pay period) which is based on the number of years they have served as a Federal employee. VA may offer newly-appointed Federal employee's credit for their job-related non-federal experience or active duty uniformed military service. This credited service can be used in determining the rate at which they earn annual leave. Such credit must be requested and approved prior to the appointment date and is not guaranteed. This job opportunity announcement may be used to fill additional vacancies. If you are unable to apply online or need an alternate method to submit documents, please reach out to the Agency Contact listed in this Job Opportunity Announcement. Other Information

This is not a remote position. OIT has multiple worksites at various duty locations, and the individual(s) selected may be assigned to any federal government work site. This announcement will NOT be used for changing duty locations. If selected, and you are a current VA employee, and not on an approved exemption, you will continue to report to your current duty location. Oakland, CA Washington, DC Hines, IL Eatontown, NJ Albany, NY Philadelphia, PA Austin, TX Salt Lake City, UT Martinsburg, WV Shepherdstown, WV Manchester, NH Bath, NY Canandaigua, NY Syracuse, NY Providence, RI White River Junction, VT Wilmington, DE Newark, NJ Bronx, NY Wappingers Falls, NY Coatesville, PA Lebanon, PA Erie, PA Clarksburg, WV Huntington, WV Salem, VA Tuskegee, AL Charleston, SC Dublin, GA Gainesville, FL San Juan, PR Augusta, GA Lexington, KY Mountain Home, TN Murfreesboro, TN Danville, IL Marion, IL Ft. Wayne, IN Indianapolis, IN Ann Arbor, MI Saginaw, MI St. Cloud, MN St. Paul, MN Tomah, WI Alexandria, LA Shreveport, LA Biloxi, MS Grand Junction, CO Topeka, KS Columbia, MO Kansas City, MO Poplar Bluff, MO Cheyenne, WY Boise, ID White City, OR Seattle, WA Spokane, WA Walla Walla, WA Sacramento, CA Las Vegas, NV Prescott, AZ Tucson, AZ San Diego, CA Anchorage, AK Under the Fair Chance to Compete Act, the Department of Veterans Affairs prohibits requesting an applicant's criminal history prior to accepting a tentative job offer. For more information about the Act and the complaint process, visit Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP) at The Fair Chance Act. The Career Transition Assistance Plan (CTAP) provide eligible displaced VA competitive service employees with selection priority over other candidates for competitive service vacancies. To be qualified you must submit appropriate documentation (a copy of the agency notice, your most recent performance rating, and your most recent SF-50 noting current position, grade level, and duty location) and be found well-qualified for this vacancy. To be well-qualified: applicants must possess experience that exceeds the minimum qualifications of the position including all selective factors, and who are proficient in most of the required competencies of the job. Information about CTAP eligibility is on OPM's Career Transition Resources website at http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/. A selectee receiving a first appointment to the Federal Government (Civil Service) is entitled only to the lowest step of the grade for which selected. The display of a salary range on this vacancy shall not be construed as granting an entitlement to a higher rate of pay.