> Markdown version of [/jobs/ext/2634446-it-cybersecurity-specialist](https://www.wearedevelopers.com/jobs/ext/2634446-it-cybersecurity-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Cybersecurity Specialist - **Company:** US Western Area Power Administration - **Location:** Phoenix, AZ, United States (Remote available) - **Salary:** $106,437.0 - $154,280.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Data Security, Digital Forensics, Software Vulnerability Management, System Availability, Forescout, Operating System Security, Splunk, Vulnerability Analysis - **Published:** August 25, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f34e3725a5471b56 ## About the Role QUALIFICATION REQUIRMENTS: To qualify for this position, you must meet the minimum qualification requirements as well as the specialized experience requirements outlined below: MINIMUM REQUIREMENTS FOR GRADE 12 and Above (GS or Equivalent): The competencies listed in the "How You Will Be Evaluated" section will be used to evaluate whether or not you meet the minimum proficiency level established for the 2210 series SPECIALIZED EXPERIENCE for Cybersecurity Infrastructure and Architecture (IA): A qualified candidate's online application and resume must demonstrate at least one (1) year of specialized experience equivalent in difficulty and responsibility to the next lower grade level GS-12 in the Federal service (obtained in either the public or private sectors). Specialized experience for this position is defined as having at least two (2) of the following: * Test, analyze, and/or implement existing and future systems to complement existing cybersecurity architectures; often leading Authority to Operate (ATO) job functions such as control testing and validation, Plan of Actions & Milestones (POAM) tracking or Risk Acceptance (RA)., * Accountability * Attention to Detail * Customer Service * Decision Making * Flexibility * Influencing/Negotiating * Integrity/Honesty * Interpersonal Skills * Learning * Reading Comprehension * Reasoning * Self-Management * Stress Tolerance * Teamwork, Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education. ## Description As an IT Cybersecurity Specialist (INFOSEC), you will provide technical expertise and guidance to WAPA functional and project teams regarding cybersecurity technical issues, risk analyses, mitigation plans and continuity of operations planning., As a IT Cybersecurity Specialist, you will: * Provide technical oversight of IT operating system security ensuring the confidentiality, integrity, and availability of systems, networks and data. * Develop, review and evaluate information security policies for WAPA. * Employ Defense in Depth principles and technology and other best practices in security engineering designs and implementation. * Evaluate the quality of Federal Information Security Management Act (FISMA) and North American Electric Reliability Corporation (NERC) Critical Information Protection (CIP) evidence for the purposes of ensuring WAPA is meeting regulatory requirements and standards common in the industry (e.g. NERC and FERC guidelines). Create and maintain evidence in specific evidence repositories. * Serve as one of WAPA's lead technical experts on systems, network, and cloud security to management and other technical specialists on critical IT issues. * Analyze Information Assurance (IA) security events, including threat model development and resulting security risk analysis of systems. Requirements Conditions of employment * Must be a U.S. Citizen or National. * This employer participates in the e-Verify program. * Males born after 12/31/1959 must be registered for Selective Service. * Suitable for Federal employment, as determined by a background investigation. * Appointments made under the DHA are processed as "new" appointments. Status and Non-Status applicants from outside DOE selected under this authority are required to serve a mandatory one (1) year probationary period. A DOE career status employee selected for this position may be required to serve a new one (1) year probationary period, pursuant to 5 CFR 315.802. Employees serving on a probationary period may be terminated at any time during the probationary or trial period for performance, conduct, or business-related reasons in the interest of Federal service. * Limit your resume to no more than two (2) pages. If more than two pages are submitted, only the first two pages will be reviewed to determine your eligibility and qualifications. * In accordance with Executive Order 14170, applicants are encouraged to respond to the four short, free-response, essay questions in the questionnaire. Answers to these questions are not scored or rated. Your answers will be reviewed by the hiring manager and agency leadership if you are referred for selection consideration. * Overtime may be required on short notice to include nights, holidays and weekends in support of related mission requirements. * On-call (Rotational) - The duties of this position may require the incumbent to be placed in a 24/7 on-call status on a rotational basis. On-call status on a rotational basis is anticipated to be approximately 15% of the year. While in an on-call duty status, required to carry a cellular phone and remain within one-half hour travel time of their primary place of residence (or approved on-call place of residence) and, will sustain themselves in an able to respond and perform work condition., * Analyze security events, including threat model development and resulting security risk analysis of systems. * Design and develop security architecture to execute a company's cybersecurity program to meet Federal Information Security Modernization Act (FISMA), North American Electric Reliability (NERC), Critical Information Protection (CIP), or NIST 800-53 Controls. * Perform vulnerability management to include scans, assessments, and remediation in conjunction with other IT business units to reduce company-wide risk. -OR- SPECIALIZED EXPERIENCE for Cybersecurity Operations (Ops): A qualified candidate's online application and resume must demonstrate at least one (1) year of specialized experience equivalent in difficulty and responsibility to the next lower grade level GS-12 in the Federal service (obtained in either the public or private sectors). Specialized experience for this position is defined as having at least two (2) of the following: * Configure and manage and/or manage the lifecycle of at least 1 (one) of the following cybersecurity systems: Axonius, Carbon Black App Control, Carbon Black Endpoint Detection and Response (EDR), Corelight, Forescout, Splunk, and Tenable. * Apply the Risk Management Framework (RMF) and assess cybersecurity systems against federal and industry compliance standards, such as NIST SP 800-53, FISMA, or NERC CIP. * Conduct incident response activities, vulnerability assessments, and/or digital forensics, including analyzing security events to understand and mitigate active potential cybersecurity threats., * Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. * Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. * Set aside about two (2) hours to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. * Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. Visit the USA Hire Applicant Resource Center for practice assessments and assessment preparation resources at https://support-usahire.opm.gov/hc/en-us. You may update your application, including supporting documentation, at any time during the announcement open period by returning to your USAJOBS account, select Update Application: https://my.usajobs.gov/Account/Login. This option will no longer be available once the announcement has closed. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)