IT Cybersecurity Specialist (CYBERMGT)

BASIC REQUIREMENT: Applicants must have IT-related education and experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidate's online application and resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level GS-14 in the Federal service.

Specialized experience for this position is defined as meeting 2 of 4 of the following: Lead and manage cybersecurity or IT security projects from planning through execution, including developing project schedules, tracking milestones, allocating technical resources, and evaluating project performance using structured project management or Agile frameworks.

Direct or oversee the design, implementation, and optimization of enterprise cyber defense tools, hardware, and software to protect complex network infrastructures and sensitive data systems. Lead technical vulnerability assessments, system scans, and cyber risk analyses across enterprise systems to identify security weaknesses and engineer remediation or mitigation strategies.

Evaluate IT systems against formal cybersecurity standards, security control frameworks, and compliance mandates (such as NIST SP 800-53/RMF, ISO 27001, CMMC, or equivalent industry/federal standards) to maintain system authorizations, approve security plans, and remediate compliance deficiencies. "Experience" refers to paid and unpaid experience.

Examples of qualifying unpaid experience may include: volunteer work done through National Service programs (such as Peace Corps and AmeriCorps); as well as work for other community-based philanthropic and social organizations. Volunteer work helps build critical competencies, knowledge, and skills; and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

CTAP/ICTAP candidates: To be considered "well qualified" you must meet all of the requirements as described in this section. You must meet all qualifications and eligibility requirements by the closing date of this announcement.

The Office of Cybersecurity, Energy Security, and Emergency Response (CESER) works to enhance the security and resilience of U.S. critical energy infrastructure to all hazards, mitigate the impacts of disruptive events and risk to the sector overall through preparedness and innovation, and respond to and facilitate recovery from energy disruptions in collaboration with other Federal agencies, the private sector, and State, local, tribal, and territory governments.

The ETAC's mission is to deliver timely and actionable cyber threat analysis and insights that strengthen the collective security and resilience of the U.S. energy sector. We are truly honored that DOE has been named America's #1 Best Employer for Veterans in 2023 by Forbes-not only among Government agencies, but among employers across the U.S. We are so proud of this ranking which reflects our commitment to the employment of veterans.

As so many veterans at DOE renew their service to our Nation, we are deeply committed to their success and advancement. Veterans shape the future of energy As an IT Cybersecurity Specialist (CYBERMGT), you will: Direct the planning, implementation, and long-term sustainment of Department-wide cybersecurity programs, projects, and strategic initiatives to safeguard enterprise networks and mission systems.

Serve as an authoritative technical expert and consultant to senior DOE executives, interagency working groups, and external partners on complex cybersecurity policies, emerging technologies, and risk management. Interpret and implement federal and commercial cybersecurity directives (e.g., NIST, CISA, OMB) to evaluate system compliance, mitigate cyber risk, and resolve intractable IT security issues.

Oversee the design, installation, configuration, testing, and administration of dedicated cyber defense hardware, software, and tools to ensure system resilience and operational performance. Lead system vulnerability scans, security assessments, and audit reviews to detect deviations from established baselines and recommend remediation strategies across enterprise platforms.

Justify program requirements, develops resource and staffing plans, and determines technical training needs to align cyber capabilities with mission objectives and protect classified information.