
Information Technology Specialist (INFOSEC) - Direct Hire Authority
Department of State Headquarters
Arlington, VAFull-time$122–158K/yrPosted 1 day ago
Most applications go out cold — see where you stand first. No sign-up to start.
Watch jobs like this. New roles like this one near Arlington, VA, by email.
Don't just apply. Show up ready.
Olive works from this exact posting.
At a glance
Olive lists jobs from US employers, including remote roles you can work from the United States.
Job overview
The Information Technology Specialist (INFOSEC) is located in the Department of State’s Bureau of Diplomatic Security, Emerging Technologies Division. The role leads innovation and emerging technology initiatives and evaluates proposed IT and operational technology solutions. It conducts security reviews and cybersecurity assessments, identifies vulnerabilities and risks, evaluates security controls, and recommends policies and procedures for secure technology implementation. Applicants must meet the GS-13 specialized-experience requirements; education cannot substitute for that experience.
Skills & qualifications
Skills
Qualifications
Full job description
Summary
This position is located in the Bureau of Diplomatic Security, Office of Technology Innovation and Engineering, Emerging Technologies Division (DS/TIE/ET). This serves as public notice for the use of OPM's Direct Hire Authority. Applicants who meet the qualification requirements will be forwarded to the selecting official for consideration. We may select from this announcement or any other source to fill one or more vacancies. For more information about this Bureau, visit: DS.
Duties
- Leads assigned Innovation and Emerging Technology (IET) initiatives within the Emerging Technologies Division (ETD).
- Plans, coordinates, and conducts research, evaluation, testing, and assessment activities involving emerging information technology (IT) and operational technology (OT) solutions proposed for Department use.
- Conducts comprehensive security reviews of IT and OT solutions to identify vulnerabilities, assess risks, evaluate security controls, and determine compliance with applicable laws, regulations, policies, standards, and security frameworks.
- Performs cybersecurity assessments, vulnerability analyses, configuration reviews, and security control evaluations of hardware, software, cloud-based services, communications technologies, and integrated systems proposed for Department use.
- Develops, coordinates, and recommends cybersecurity policies, standards, guidelines, and procedures governing the secure implementation and use of emerging technologies, IT systems, and OT solutions.
Qualifications
Applicants must meet all the qualification requirements described below by the closing date of this announcement. Applicants applying for the GS-13 grade level must meet the following requirements: Have IT-related experience demonstrating EACH of the four competencies AND specialized experience listed below: 1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail; 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services; 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately; 4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations; AND Have at least 1 full year of specialized experience equivalent to the GS-12 level in the Federal service which provided you with the particular knowledge, skills and abilities to perform the duties of the position. Qualifying specialized experience must demonstrate the following: Experience conducting cybersecurity assessments to identify, evaluate, and prioritize vulnerabilities and threats; Experience recommending safeguards and corrective actions to reduce risk and strengthen security protections; AND Experience delivering cybersecurity consulting and advisory services to stakeholders on secure implementation of IT and Operational Technology systems. NOTE: In order to qualify for this position, your experience MUST be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. There is no substitute of education for specialized experience for the GS-13 position.
Education
Education requirements do not apply to this vacancy announcement. How You Will Be Evaluated
The evaluation process consists of the ApplyGov Competency Based Assessments for which applicants will be assigned a score between 70 and 100. A resume review by subject matter experts will be conducted for the top qualified candidates based on total score. Resumes longer than two pages will be deemed ineligible and will not be considered further. All applications that meet the required qualifications and the cutoff score will be referred to the selecting official in the order in which the applications were received. You will be assessed on the following job-related competencies (knowledge, skills, abilities, and other characteristics): Non-Supervisory: Oral Communication, Writing, Interpersonal Skills, Problem Solving, Teamwork, Technology Orientation, Customer Service, Attention to Detail and Self-Management. Set aside at least 2 hours to take the external assessments; however, most applicants complete the assessments in less time. There are timed sections that must be completed within the allotted timeframe. Your score from the external assessment (i.e., Non-supervisory) will remain on file for 180 days, allowing you to apply for multiple DOS-announced positions without the need to retake the assessments. Top applicants may be referred to the hiring manager for further consideration. The assessment is used to measure the degree in which your background matches the competencies and KSAs required for this position. Your qualifications will be evaluated on the following competencies: Knowledge of cybersecurity laws, regulations, policies, standards, frameworks, and guidance. Skill in project coordination. Skill in conducting cybersecurity assessments. Ability to recommend effective corrective actions and compensating controls. Ability to advise on cybersecurity principles, concepts, methods, standards, and practices. Ability to collaborate with internal and external partners. Resume review: Subject matter experts (SMEs) will review your resume to determine your qualifications for this position based on the required specialized experience. Your resume should demonstrate how you meet all aspects of the specialized experience statement. SMEs will not review additional information beyond your resume (e.g., links embedded in your resume will not be opened.). If meeting basic qualifications through education only or a combination of education and experience, applicants will not be referred to the SME panel but will be reviewed by the HR Specialist for referral. In describing your experience, please be clear and specific. We do not make assumptions regarding your experience. Overstating your qualifications and/or experience in your application may result in your removal from consideration. You may preview questions for this vacancy. Other Information
To request a reasonable accommodation for additional time on the timed sections of the assessment, please submit your request using the “Request a Reasonable Accommodation” button within the Assessment Application. For all other reasonable accommodations at the U.S. Department of State, please contact the Office of Accessibility and Accommodations (OAA) at [email protected]. OAA is responsible for reviewing and adjudicating reasonable accommodation (RA) requests for the Assessment Battery being used for this announcement. The following applies to all RA requests: RA requests cover additional time on timed sections only. Applicants submitting a RA request MUST attach supporting medical documentation signed by a licensed, treating medical provider. The documentation should describe the nature, severity, and expected duration of the condition, identify the relevant medical condition or diagnosis, and explain the basis for the requested extension. RA requests that do not contain supporting medical documentation attachments at the time of initial request may be subject to further review. Note: the following documents do not, on their own, qualify for automatic approval of the RA request: Schedule A letters, VA benefits letters, or SSA letters. Applicants MUST submit their application before the vacancy closes, even if pending an accommodation decision. Applicants are encouraged to carefully follow instructions related to medical documentation provided in the vacancy announcement prior to beginning the RA process. Applicants will have 48 hours after their RA request is adjudicated to complete the assessment battery. Scores generated after the allotted timeframe will not be admissible and the applicant will not be considered further for the vacancy. If a different type of RA is needed, please contact OAA directly at [email protected]. If eligible, situational telework agreements may be permitted with supervisory approval. Multiple positions may be filled from this announcement. If eligible, applicants to this announcement may be referred to other similar positions in other Bureaus/Offices in the Department for up to 240 days. Telework eligibility and security clearance requirements may vary for such similar positions. Under the provisions of the Direct-Hire Authority, veterans' preference and traditional rating and ranking of applications does not apply. Agency & Interagency Career Transition Assistance Program (CTAP & ICTAP): View OPM's CTAP & ICTAP eligibility website for more information. You must be rated in the Well-Qualified category and submit supporting documents under the required documents section of this announcement to receive selection priority consideration. To be considered Well-Qualified applicants must: score an 85 or above, meet Minimum Qualifications, and demonstrate proficiency in some, but not all major aspects of the position.
How this job compares
Set against the 1,050 open Cybersecurity Analyst jobs on Olive Jobs, counted October 31, 2026.
- Pay
- This posting$122–158K/yr
- Virginia median$99–160K/yr105 salary ranges
- US median$103–148K/yr758 salary ranges
This range's midpoint, $140K, is 7% above the Virginia median midpoint ($131K) — in the middle half of Cybersecurity Analyst salary ranges in Virginia.
- Openings
- Olive Jobs lists 149 open Cybersecurity Analyst jobs in Virginia and 1,050 across the US. 4% of them nationwide are listed as remote or flexible.
- Hiring the most in Virginia
- ARSIEM13 open
- Accenture9 open
- General Dynamics Information Technology9 open
- Experience
- This posting asks for at least 1 year of experience — less than three in four Cybersecurity Analyst postings that state a minimum ask for (median 5 years, across 860 postings).
- Education
- 235 of the 1,050 open Cybersecurity Analyst jobs (22%) ask for a bachelor's degree or higher.
Counted across the open, public US postings on Olive Jobs on October 31, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.
You've read the whole posting — now see how you match it.


