> Markdown version of [/jobs/ext/3963395-it-cybersecurity-specialist-infosec](https://www.wearedevelopers.com/jobs/ext/3963395-it-cybersecurity-specialist-infosec). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT CYBERSECURITY SPECIALIST (INFOSEC) - **Company:** Missile Defense Agency - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Salary:** $76,463.0 - $164,301.0 - **Contract:** Permanent contract - **Skills:** HTML, Cloud Computing Security, Cyber Security, Information Systems, Data Security, Information Security Management, Internet Security, Transport Layer, Network Segmentation, Package Development Process, Zero Trust Network Access, Software Requirements Analysis, Software Vulnerability Management, Software Security, Information Technology, Plan of Action and Milestones, Vulnerability Analysis - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/it-cybersecurity-specialist-infosec-washington-dc--25658c2e-b684-4890-9ce4-db3690471a16 ## About the Role Information/Data Security (InfoSec), Internet Security, Information Technology & Information Systems, Government Organizations, HTTPS (HyperText Transport Protocol Secure), Information/Data Security (InfoSec), Internet Security, Information Technology & Information Systems, Computer Security, Reimbursement, Drug test No Security clearance Secret Position sensitivity and risk Noncritical-Sensitive (NCS)/Moderate Risk Jobs require a background check and some require a security clearance. The type depends on the job. Background check type * National security Financial disclosure required No Some jobs require financial disclosure to identify conflicts of interests., All qualification and time-in-grade (if applicable) requirements must be met within 30 days of the closing date of this announcement. You must meet the minimum qualification requirements as stated in the Office of Personnel Management (OPM) Operating Manual, Qualification Standards for General Schedule Positions, http://www.opm.gov/qualifications/Standards/group-stds/gs-prof.asp. Basic Requirement: Applicants must have IT-related experience demonstrating the following competencies appropriate to, or above, the level of this position. For vacancies below the full-performance level of the position, the basic requirement will be evaluated on a developmental basis. Your resume and work experience should clearly support your ability to meet these competencies and will be evaluated as part of the entire application process. * Attention to Detail- experience reviewing my own information technology-related work or data and have been asked by others to review their work or data to ensure accuracy, completeness, and consistency with standards. * Customer Service- experience maintaining relationships with customers, assessing current information technology needs of customers, and developing or identifying information technology products and services that are tailored to meet customer needs. * Oral Communication- briefing mid-level management and IT staff on the status of information technology systems, projects, or daily operations, including the communication of technical information to a non-technical audience. * Problem Solving- identifying alternatives to address complex information technology-related issues by gathering and applying information from a variety of sources that provide a number of potential solutions. In addition to meeting the basic requirement, you must have one year specialized experience. NH-03: You must have one year of specialized experience at the next lover broadband NH-02, equivalent to the GS-11 grade level or equivalent in other pay systems. Specialized experience must demonstrate support for RMF program support for information systems, including: * Supporting RMF lifecycle activities, including categorization, control selection, control implementation, assessment preparation, authorization package development, and continuous monitoring. * Familiarity with FedRAMP authorization, continuous monitoring, cloud security control implementation, shared responsibility models, and secure configuration practices for federal cloud environments. * Preparing, reviewing, and maintaining RMF artifacts, including System Security Plans, control implementation statements, Security Assessment Reports, POA&Ms, risk acceptance documentation, assessment artifacts, and continuous monitoring records. * Analyzing vulnerability scan results, configuration compliance data, audit findings, system changes, and assessment results to identify risk, support remediation, validate closure evidence, and document compensating controls. * Practical understanding of Zero Trust architecture initiatives across ICAM, device compliance, network segmentation, application security, data, protection, telemetry, and automation pillars. NH-04: One year of specialized experience at the next lower broadband NH-03, equivalent to the GS-13 grade level or equivalent in other pay systems. Specialized experience must demonstrate leadership or advisory responsibility for RMF program execution for complex, high-visibility, or enterprise information systems, including: * Preparing, reviewing, and approving organizational cybersecurity and RMF policies, directives, procedures, and instructions to ensure alignment with federal, DoD, and organizational security requirements. * Leading RMF planning, authorization readiness, control implementation reviews, assessment coordination, continuous monitoring, POA&M governance, risk acceptance analysis, and development of risk recommendations for leadership. * Reviewing and validating authorization packages, security control evidence, vulnerability remediation strategies, cloud security responsibilities, system interconnections, software assurance results, and major system changes to determine cybersecurity risk and mission impact. * Advising system owners, program managers, technical teams, assessors, contractors, and leadership on RMF execution, documentation quality, control implementation, audit readiness, vulnerability prioritization, Zero Trust alignment, and secure system lifecycle requirements. * Leading cross-functional coordination across acquisition, engineering, operations, security, and executive stakeholders to resolve cybersecurity risks, support authorization decisions, maintain continuous monitoring visibility, and align RMF activities with mission priorities. PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week. VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social). Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Education Education is not substitutable for specialized experience for this grade level., FOREIGN EDUCATION: Education completed in foreign colleges or universities may be used to meet the requirements. You must show proof the education credentials have been deemed to be at least equivalent to that gained in conventional U.S. education program. It is your responsibility to provide such evidence when applying., Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. ## Description * Sign in * My jobs * Profile * Resumes & documents * Notifications * Talent networks * Sign out * My jobs * Profile * Resumes & documents * Notifications * Talent networks * Sign out * Events * Help Center * Search, Help NH03: * This position serves as an Information System Security Officer (ISSO), supporting Risk Management Framework (RMF) execution for information systems through security control implementation and assessment, authorization package development, evidence collection, vulnerability tracking, Plan of Action and Milestones (POA&M) management, and continuous monitoring. * Experienced in executing RMF activities for assigned information systems, applying cybersecurity principles, security controls, vulnerability management, continuous monitoring, and applicable federal, DoW, organizational, and Zero Trust requirements. * Experienced in evaluating security control implementation and effectiveness; maintains authorization documentation; analyzes assessment evidence and findings; manages POA&Ms; and monitors security posture. * Provides technical cybersecurity guidance and recommendations to system owners and stakeholders regarding security requirements, risks, controls, remediation, and authorization decisions. * Experience in analyzing security documentation, vulnerability and configuration data, assessment findings, and system changes to identify security weaknesses, evaluate risk, and recommend remediation, mitigation, or compensation controls. * Evaluates cybersecurity impacts of system changes and resolves or recommends solutions for complex issues involving vulnerabilities, control deficiencies, technical limitations, and competing mission and security requirements. * Coordinates with technical stakeholders to validate remediation actions and security evidence and independently determines whether deficiencies have been adequately addressed. * Evaluates cybersecurity practices and controls to identify gaps, risks, and improvement opportunities associated with Zero Trust, vulnerability management, continuous monitoring, and emerging cybersecurity requirements. * Identifies recurring or systemic vulnerabilities and control weaknesses and recommends corrective actions or risk mitigation strategies. * Develops technical analyses, risk assessments, metrics, reports, and briefings on system security posture, authorization status, vulnerabilities, remediation, and continuous monitoring results. NH04: * This position serves as a senior ISSM and cybersecurity technical authority for a portfolio of complex, high-profile enterprise systems, programs, and modernization initiatives. * Establishes technical priorities and governance for RMF execution, security controls, authorization readiness, continuous monitoring, vulnerability management, and POA&M oversight. * Interprets and applies federal, DoW, organizational, and emerging cyber security requirements to resolve complex issues and ensure consistent risk management across the portfolio. * Integrates cybers security risk information across systems and programs to identify significant or systemic weaknesses and mission impacts. * Reviews and validates significant control deficiencies, remediation strategies, compensating controls, cloud security, system interconnections, software assurance, and major system changes. * Develops risk-management strategies and recommendations for complex issues extending beyond the individual system level and advises leadership on authorization, operational, acquisition, and risk decisions. * Advises senior leadership, system owners, program managers, and technical officials on cyber security risk, authorization readiness, vulnerability priorities, Zero Trust, cloud security, modernization, and emerging requirements. * Leads integration of cyber security requirements and risk considerations across engineering, acquisition, operations, and program organizations to resolve significant cross-functional issues. * Presents executive-level risk analyses, metrics, trends, and recommendations addressing portfolio security posture, systemic risks, and issues affecting mission execution. Certifications: Positions require a current cybersecurity certification appropriate to the role and grade level in alignment with DoD 8140 cyber workforce requirements, such as Security+, CySA+, CASP+, CISSP, CISM, or an equivalent ISSO/ISSM qualifying certification. Requirements Help Conditions of employment * U.S. Citizenship is required * Males must be registered for Selective Service, see Legal and Regulatory Guidance, please go to http://www.sss.gov for more information * Incumbent may be required to obtain and maintain an appropriate security clearance. * You may be required to serve a one (1) year probationary period. * The incumbent of this position may be required to work overtime, irregular shifts, and/or on the weekend. * Work may require travel away from the normal duty station on commercial aircraft., Warfighting Acquisition University requires reporting to the assigned duty location during each pay period. The University supports telework as determined by agency policy, but remote work and full-time telework are not offered. This position is in the Competitive Service. For more information regarding Competitive Service employment please visit: https://help.usajobs.gov/working-in-government/service WarU participates in e-Verify with the Department of Homeland Security and United States Citizenship and Immigration Services. If selected for this position, you must be able to start employment within 30 days of acceptance (unless otherwise approved by WarU). Direct Deposit: All federal employees are required to have direct deposit. If applicable, AcqDemo Expanded Probationary Period for Supervisors and Managers: An additional supervisory probationary period of one year may be required when an employee is officially assigned to a different supervisory position that constitutes a major change in supervisory responsibilities from any previously held supervisory position, (e.g., moving from a journeyman level supervisory acquisition position to a Critical Acquisition Position or moving from a Critical Acquisition Position to a Key Leadership Position)., Best Meets Mission Requirements definition: Applicant has the knowledge, skills, abilities, and/or competencies to substantially exceed the minimum qualification requirements for the position. This equates to the best qualified assessment criteria established for the vacancy and based on overall demonstrated experience, education, training, appraisals/evaluations, job-related awards, certifications, honors and relevant outside activities., * Transcripts/Registration/License: If qualifying on education/position requires education, you must submit copies of your transcripts and if required for the position, submit an active, current registration/license. * Veterans: If claiming VEOA, VRA or 30% Disabled Veteran - Submit VOW certification memo or copy of the official DD-Form 214, which must include the character of service (i.e., with an honorable or general discharge). This will be annotated in block 24 on member copy 2, 4, or 7 of the DD-Form 214. If claiming 30% Disabled Veteran, you must also submit a VA Letter or a disability determination from a branch of the Armed Forces. NOTE: All veterans claiming 10-point preference must also submit a SF-15. For additional Veterans information please visit: https://help.usajobs.gov/working-in-government/unique-hiring-paths/veterans or http://www.fedshirevets.gov * SF-50: Current and former federal employees, including those currently working for the agency, must submit their SF-50 (Notification of Personnel Action) reflecting their highest grade held on a permanent basis for at least 52 weeks, tenure, and appointment type. Failure to provide this document may result in disqualification. * Promotion Consideration (Current Federal Employees): If you wish to be considered as a promotion candidate and your SF-50 has an effective date within the past year, it may not clearly demonstrate you meet the one year of specialized experience required at next lower grade/band level. You will need to provide additional SF-50s which clearly demonstrates you meet the one year specialized experience requirements (examples of appropriate SF-50s include Promotions, Within Grade, Grade/Range Increases, and SF-50s with an effective date more than on year old). If you are relying on your education to meet qualification requirements: Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education. Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating., 1. Your Resume (your latest resume will be used to determine your qualifications). If you submit more than one copy of your resume, only the most recent (latest) version will be reviewed. The latest timestamp will be used to determine which version of your resume is "most recent." * It is your responsibility to check the status and timestamp of all documents you submit as part of your application. * If your resume includes photographs (or links to social media), inappropriate material, inappropriate content, or personal information such as age, sex, religion, social security number, etc., you will not be considered for this vacancy. * For qualification determinations your resume must contain hours worked per week (if part-time) and dates of employment (i.e., hours per week and month/year to month/year or month/year to present). If your resume does not contain this information, your application may be marked as insufficient and you will not receive consideration for this position. 2. A complete Application Questionnaire 3. Additional Required Documents (see Required Documents section). Ensure all submitted documents contain your full name. PLEASE NOTE: It is the applicants responsibility to verify that information entered and/or uploaded, (i.e., resume) is received, accurate, and submitted by the closing date. You may verify your documents have been processed with your application package successfully. You can access your USAJOBS account to do so by clicking here. Uploaded documents may take up to one hour to clear the virus scan. The DFAS Human Resources WILL NOT modify or change any answers submitted by an applicant. ACTIVE DUTY SERVICE MEMBERS: The Veterans Opportunity to Work (VOW) Act requires federal agencies to treat an eligible active duty service member as a veteran, disabled veteran, and preference eligible (as applicable) when applying for civil service positions before the effective release or discharge date. Appointment of military members before the release or discharge date is permissible if the member is on terminal leave. At the time the active duty member applies for a civil position, he or she must submit a "certification" memo in lieu of a DD-Form 214, Certificate of Release or Discharge from Active Duty. Active duty members applying for a civil service position without submitting a valid certification memo or DD-Form 214 with their application will render the member ineligible for the position. The certification memo must originate from the members military service branch on official letterhead and contain the following: * Name/Rank/Grade of Service Member * Branch of Armed Forces * Dates of Active Service (Start and End Date(s) * Expected Date of Discharge/Release from Active Duty * Terminal leave start date (if applicable) * Expected character of service/discharge and type of separation (i.e. separation or retirement) * Must be certified within 120 days of anticipated discharge * Signature by, or by direction of the adjutant, personnel office, unit commander, or higher headquarters commander. Note: The VOW Act provides tentative preference. If appointed, a DD Form-214 must be submitted upon receipt. Note: It is the applicants responsibility to verify that information and documents entered or uploaded are received, legible, and accurate., Once the online questionnaire is received you will receive an acknowledgement email that your submission was successful. Your application package will be used to determine your eligibility and qualifications for consideration. If you are determined to be ineligible or not qualified, your application will receive no further consideration. All eligible candidates will be forwarded to the WarU hiring official for consideration. WarU will have a panel review all referred applicants and will contact individuals for interviews, if applicable. You will be notified of the outcome after each of these steps has been completed. After making a tentative job offer, you will be requested to conduct a suitability/security background investigation. You will no longer need to call the DFAS HR Customer Care Center to determine your application status. USAJOBS has added an alert setting to their system to drive status updates notification for applicants. You can elect to activate the proactive notification from your USAJOBS profile at any point during the application process to sign-up for automatic alerts when there are status changes for jobs to which you have applied. To check the status of your application or return to a previous or incomplete application, log into your USAJOBS account, select My Applications, and click on the more information link under the application status for this position. If you do not provide an email address, you are responsible for checking status updates and notifications in USAJOBS. Hard copy notifications will not be sent to you. Fair and transparent The Federal hiring process is set up to be fair and transparent. Please read the following guidance. Criminal history inquiries Equal Employment Opportunity (EEO) Policy Financial suitability New employee probationary period Privacy Act Reasonable accommodation policy Selective Service Signature and false statements Social security number request Required Documents, Once the online questionnaire is received you will receive an acknowledgement email that your submission was successful. Your application package will be used to determine your eligibility and qualifications for consideration. If you are determined to be ineligible or not qualified, your application will receive no further consideration. All eligible candidates will be forwarded to the WarU hiring official for consideration. WarU will have a panel review all referred applicants and will contact individuals for interviews, if applicable. You will be notified of the outcome after each of these steps has been completed. After making a tentative job offer, you will be requested to conduct a suitability/security background investigation. You will no longer need to call the DFAS HR Customer Care Center to determine your application status. USAJOBS has added an alert setting to their system to drive status updates notification for applicants. You can elect to activate the proactive notification from your USAJOBS profile at any point during the application process to sign-up for automatic alerts when there are status changes for jobs to which you have applied. To check the status of your application or return to a previous or incomplete application, log into your USAJOBS account, select My Applications, and click on the more information link under the application status for this position. If you do not provide an email address, you are responsible for checking status updates and notifications in USAJOBS. Hard copy notifications will not be sent to you. Expand Hide next steps Fair and transparent The Federal hiring process is set up to be fair and transparent. Please read the following guidance. Criminal history inquiries Equal Employment Opportunity (EEO) Policy