IT Cybersecurity Specialist (CYBERMGT)

Salary: $131,009.00 to $170,317.00 Per Year

This position is part of the Office of Environmental Management - Consolidated Business Center, Department of Energy. As a IT Cybersecurity Specialist (CYBERMGT), you will provide technical leadership and guidance for implementing established IT security requirements across the organization.

Major duties

The mission of the Office of Environmental Management, Consolidated Business Center is to deliver integrated core business and technical services using EMCBC's diverse workforce to ensure the safe, cost-efficient and timely completion of the EM. EMCBC has a vision to be a center of excellence for safe, cost-effective, and successful execution of EM's mission and values such as people are our most important asset, providing exceptional service and prioritizing safety at all times. We are truly honored that DOE has been named America's #1 Best Employer for Veterans in 2023 by Forbes-not only among Government agencies, but among employers across the U.S. We are so proud of this ranking which reflects our commitment to the employment of veterans. As so many veterans at DOE renew their service to our Nation, we are deeply committed to their success and advancement. Veterans shape the future of energy As a IT Cybersecurity Specialist (CYBERMGT), you will: Serve as a technical authority advising DOE leadership, federal agencies, and external stakeholders on critical cybersecurity issues and strategic solutions. Provide oversight for risk and vulnerability assessments on planned and operational systems, networks, and hardware, ensuring assessment methodologies meet compliance standards and adequately safeguard classified and sensitive data. Evaluate emerging technologies, zero-trust frameworks, and modern cyber threats, and make recommendations to leadership to guide the integration of advanced security solutions into DOE infrastructure. Work as the Information System Security Manager (ISSM) and advise leadership on the implementation of federal and DOE cybersecurity regulations (e.g. NIST, OMB, FISMA) to secure agency networks and maintain strict policy compliance. Manage full project lifecycles to ensure cybersecurity programs directly support agency mission priorities. Represent DOE on standing committees and working groups to align strategy, deliver technical briefings, and coordinate cross-functional cybersecurity efforts.

Qualifications

BASIC REQUIREMENT: Applicants must have IT-related education and experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidate's online application and resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level GS-13 in the Federal service. Specialized experience for this position is defined as meeting 2 of 3 of the following: Conducting risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities and risks. Implementing security measures to protect classified or sensitive/controlled unclassified information (CUI) information. Applying cybersecurity frameworks (e.g. NIST, FISMA, ISO/IEC 27001, Zero Trust) to protect proprietary data and maintain core system confidentiality, integrity, and availability. There are no specific education requirements or substitution of education for experience for this position. "Experience" refers to paid and unpaid experience. Examples of qualifying unpaid experience may include: volunteer work done through National Service programs (such as Peace Corps and AmeriCorps); as well as work for other community-based philanthropic and social organizations. Volunteer work helps build critical competencies, knowledge, and skills; and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. CTAP/ICTAP candidates: To be considered "well qualified" you must meet all of the requirements as described in this section. You must meet all qualifications and eligibility requirements by the closing date of this announcement.