IT Cybersecurity Specialist

GS-14: You must demonstrate the competencies required to successfully perform the duties of the position. These competencies are normally attained through one year of specialized experience equivalent to the next lower grade level of the position being filled but may be obtained through other means. Experience may be paid or unpaid (internships, volunteerism). Experience must be validated through the assessment process, consistent with OPM's skills-based hiring policy.

Qualifying specialized experience includes: - Leading risk and vulnerability assessments, such as directing comprehensive risk assessments and vulnerability analyses of enterprise systems, networks, and software to identify systemic weaknesses and inform mitigation strategies. - Building cybersecurity architecture, such as developing long-range system security strategies to ensure confidentiality, integrity, and availability of enterprise systems. - Evaluating cybersecurity programs, such as assessing enterprise cybersecurity programs to identify gaps, ensure compliance with organizational requirements, and recommend improvements to enhance overall program effectiveness.

Specialized experience must show demonstrable competencies aligned to the position's job analysis and the IT-2210 standard. These qualifications must be clearly referenced in your resume. Additional information on the qualification requirements is outlined in the OPM Qualifications Standards Handbook of General Schedule Positions.

It is available for your review on OPM's Qualifications web site: Information Technology Management Series, 2210 Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g. Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social).

Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Generally, time in Non-Pay status as a federal employee is not creditable towards the specialized experience requirement listed above. All qualification requirements must be met by 11:59 pm (Eastern Time) on 11/11/2026.

As an IT Cybersecurity Specialist at the GS- 2210-14, some of your typical work assignments may include: Lead risk and vulnerability assessments of enterprise information systems to identify vulnerabilities, risks, and protection needs and support remediation. Provide technical oversight of cybersecurity requirements and implementations, develop long-range security plans, and design enterprise security controls.

Evaluate enterprise security programs, assess compliance, identify gaps, and recommend improvements to minimize vulnerabilities and strengthen program effectiveness. Investigate security incidents, develop security resolutions, implement remediation measures, and strengthen authentication and authorization controls.