INFORMATION TECHNOLOGY SPECIALIST (INFOSEC)

About this role

The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: for professional positions or positions with a basic education requirement: https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/; for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 10/13/2026 Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position.

Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position. You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GS/GG-12 in the Federal service and are prepared to take on greater responsibility.

Generally, this would include one year or more of such specialized experience. Specialized experience for this position includes: 1. Expertise of Cybersecurity, Risk Management Framework (RMF), advanced information technology principles, concepts, methods, standards, and practices. 2. Ability to utilize expert knowledge, concepts, principles, and practices (to include experience with enterprise level systems and non-standard systems) to evaluate and analyze difficult and complex work assignments.

3. Identifying, documenting and communicating risks and cybersecurity vulnerabilities to include identifying deficiencies and inability to safeguard classified data and information. 4. Utilizing risk management principles to perform risk analysis; Ability to make risk determinations/decisions/recommendations; Performing technical assessment, inspections and reviews of information systems. 5. Evaluating and applying cybersecurity regulations, policies, and procedures to analyze operating/developmental computer systems.