cybersecurity specialist

EEOC

<div>
 <strong>
  Summary
  <br/>
  <br/>
 </strong>
 As an IT Specialist (INFOSEC) at the GS-2210-14, you will be part of the Cybersecurity and Risk Management Division (CRMD), Office of the Chief Information Officer, U.S. Equal Employment Opportunity Commission (EEOC). If selected, you will serve as an Information Technology (IT) Specialist, Information Security Officer (ISO), in support of the agency's information security (INFOSEC) programs.
 <br/>
 <br/>
 Duties
 <br/>
 <br/>
 Help
 <br/>
 <br/>
 <ul>
  <li>
   Advises leadership on federal information security (INFOSEC) laws, regulations, standards, and emerging requirements, and contributes to the development and implementation of agency-level IT security policies and directives.
  </li>
  <li>
   Monitors and reports on cybersecurity threats, vulnerabilities, and mitigation efforts, including reviewing and updating Plans of Action and Milestones (POA and M) and briefing the Chief Information Security Officer (CISO) on risk status.
  </li>
  <li>
   Develops, reviews, and maintains key security authorization documentation, including System Security Plans (SSP), Contingency Plans (CP), Risk Assessments (RA), and other materials required to obtain or maintain an Authorization to Operate (ATO).
  </li>
  <li>
   Conducts technology assessments, trend analyses, feasibility studies, and acquisition support activities, including drafting specifications, reviewing contract deliverables, and recommending courses of action to support cybersecurity objectives.
  </li>
  <li>
   Provides operational support by resolving assigned incidents, responding to staff inquiries, tracking fulfillment requests, coordinating with technical teams, and ensuring all activities are documented in agency management tools.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 Help
 <br/>
 <br/>
 Conditions of employment
 <br/>
 <br/>
 <ul>
  <li>
   Must be a U.S. Citizen or National
  </li>
  <li>
   Males born after 12-31-59 must be registered for Selective Service
  </li>
  <li>
   Suitable for federal employment, determined by a background investigation
  </li>
  <li>
   May be required to successfully complete a probationary period
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 IT-related experience; experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. Experience must have demonstrated each of the four competencies listed below.
 <br/>
 <br/>
 <ul>
  <li>
   Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
  </li>
  <li>
   Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
  </li>
  <li>
   Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
  </li>
  <li>
   Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
   <br/>
   <br/>
  </li>
 </ul>
 For the GS-14: You must have one year of specialized experience equivalent to the GS-13 level in federal service.
 <br/>
 <br/>
 <strong>
  Specialized Experience Must Include Demonstrable Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Guides secure cloud operations and sustainment by ensuring consistent approaches for cloud services, identifying and mitigating technical threat vectors and APT activity, and implementing practical remediation to reduce attack surface.
  </li>
  <li>
   Enhances cybersecurity operations through improved SOC, SIEM, and SOAR processes, strengthening continuous monitoring (CONMON), maturing operational procedures, and sustaining a hardened security posture.
  </li>
  <li>
   Advances DEVSECOPS maturity by implementing automated and manual AppSec testing (SAST, DAST, IAST, SCA, container scanning), implementing and enforcing secure coding including hardened deployment standards, and continuously monitoring environments for cybersecurity events.
  </li>
  <li>
   Applies deep technical expertise in major cloud platforms, scripting/automation (Python, Bash, Golang), and cybersecurity frameworks (NIST, OWASP, CIS), including hands-on execution of Zero Trust pillars and secure AI practices.
  </li>
  <li>
   Leads major INFOSEC initiatives-balancing workload across projects and incidents, keeping leadership dutifully informed while facilitating, executing and directing efforts in GRC, SOC operations, FedRAMP activities, and promotion of varying degrees of role-based enterprise level guidance, in concert with adversarial (blue/red/purple team) exercises.
  </li>
  <li>
   Oversees federal security compliance by interpreting information security (INFOSEC) laws and FISMA regulations; managing POA&amp;Ms and vulnerability remediation; developing or assessing ATO documentation (SSPs, RAs, CPs); and evaluating controls, baselines, cybersecurity-supply chain risk management (C-SCRM) and compliance across systems to strengthen EEOC's INFOSEC posture.
   <br/>
   <br/>
  </li>
 </ul>
 Applicants must meet all eligibility requirements (e.g., time-in-grade and qualification requirements) within 30 days of the closing date specified in the vacancy announcement.
 <br/>
 <br/>
 Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
 <br/>
 <br/>
 Education
 <br/>
 <br/>
 This position does not have an education qualification requirement.
 <br/>
 <br/>
 Additional information
 <br/>
 <br/>
 Relocation expenses will not be paid.
 <br/>
 <br/>
 You will be expected to report to the duty station listed on this announcement.
 <br/>
 <br/>
 This job opportunity announcement may be used to fill additional similar vacancies across the EEOC.
 <br/>
 <br/>
 If you are unable to apply online or need to fax a document that you do not have in electronic form, please refer to the agency contact information.
 <br/>
 <br/>
 Males born after 12-31-59 must be registered or exempt from Selective Service (see: https://www.sss.gov/Home/Registration)
 <br/>
 <br/>
 All employees of the federal government are subject to the conflict of interest statutes and regulations including the Standards of Ethical Conduct that govern activities with outside organizations and reporting financial holdings. This position may require the incumbent to complete a confidential financial disclosure report within 30 days of appointment.
 <br/>
 <br/>
 <strong>
  Reasonable Accommodation (RA) Requests:
 </strong>
 If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. TTY users may contact us via the Federal Relay Service, 1-800-877-8339.
 <br/>
 <br/>
 Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.
 <br/>
 <br/>
 Help
 <br/>
 <br/>
 Review our benefits
</div>


IT Specialist (INFOSEC)

U.S. Equal Employment Opportunity Commission

<div><div><h2 class="jobSectionHeader"><b>Summary</b></h2>
<p>As an IT Specialist (INFOSEC) at the GS-2210-14, you will be part of the Cybersecurity and Risk Management Division (CRMD), Office of the Chief Information Officer, U.S. Equal Employment Opportunity Commission (EEOC). If selected, you will serve as an Information Technology (IT) Specialist, Information Security Officer (ISO), in support of the agency's information security (INFOSEC) programs.</p>
<p>Learn more about this agency</p></div></div>
<br><div><div><h2 class="jobSectionHeader"><b>This job is open to</b></h2>
</div><div><div><div><h3 class="jobSectionHeader"><b>The public</b></h3>
</div><div>U.S. Citizens, Nationals or those who owe allegiance to the U.S.
</div></div></div><h3 class="jobSectionHeader"><b>Clarification from the agency</b></h3>
<p>This announcement uses the OPM Federal Wide Direct Hire Authority to recruit and appoint qualified candidates to certain positions in the competitive service where a critical hiring need has been identified.</p></div>
<br><div><div><h2 class="jobSectionHeader"><b>Duties</b></h2>
</div><ul><li>Advises leadership on federal information security (INFOSEC) laws, regulations, standards, and emerging requirements, and contributes to the development and implementation of agency-level IT security policies and directives.</li>
<li>Monitors and reports on cybersecurity threats, vulnerabilities, and mitigation efforts, including reviewing and updating Plans of Action and Milestones (POA and M) and briefing the Chief Information Security Officer (CISO) on risk status.</li>
<li>Develops, reviews, and maintains key security authorization documentation, including System Security Plans (SSP), Contingency Plans (CP), Risk Assessments (RA), and other materials required to obtain or maintain an Authorization to Operate (ATO).</li>
<li>Conducts technology assessments, trend analyses, feasibility studies, and acquisition support activities, including drafting specifications, reviewing contract deliverables, and recommending courses of action to support cybersecurity objectives.</li>
<li>Provides operational support by resolving assigned incidents, responding to staff inquiries, tracking fulfillment requests, coordinating with technical teams, and ensuring all activities are documented in agency management tools.</li></ul></div>
<br><div><div><h2 class="jobSectionHeader"><b>Requirements</b></h2>
</div><h3 class="jobSectionHeader"><b>Conditions of employment</b></h3>
<ul><li>Must be a U.S. Citizen or National</li>
<li>Males born after 12-31-59 must be registered for Selective Service</li>
<li>Suitable for federal employment, determined by a background investigation</li>
<li>May be required to successfully complete a probationary period</li>
</ul><h3 class="jobSectionHeader"><b>Qualifications</b></h3>
<p></p><p>IT-related experience; experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. Experience must have demonstrated each of the four competencies listed below.</p>
<div><ul><li><b>Attention to Detail</b> - Is thorough when performing work and conscientious about attending to detail.</li></ul>
<ul><li><b>Customer Service </b>- Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.</li></ul>
<ul><li><b>Oral Communication</b> - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.</li></ul>
<ul><li><b>Problem Solving</b> - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.</li></ul>
</div>For the GS-14: You must have one year of specialized experience equivalent to the GS-13 level in federal service.<br>
<br>
Specialized experience must include demonstrable experience:
<ul><li><b>Guides secure cloud operations</b> and sustainment by ensuring consistent approaches for cloud services, identifying and mitigating technical threat vectors and APT activity, and implementing practical remediation to reduce attack surface.</li>
<li><b>Enhances cybersecurity operations</b> through improved SOC, SIEM, and SOAR processes, strengthening continuous monitoring (CONMON), maturing operational procedures, and sustaining a hardened security posture.</li>
<li><b>Advances DEVSECOPS maturity</b> by implementing automated and manual AppSec testing (SAST, DAST, IAST, SCA, container scanning), implementing and enforcing secure coding including hardened deployment standards, and continuously monitoring environments for cybersecurity events.</li>
<li><b>Applies deep technical expertise</b> in major cloud platforms, scripting/automation (Python, Bash, Golang), and cybersecurity frameworks (NIST, OWASP, CIS), including hands-on execution of Zero Trust pillars and secure AI practices.</li>
<li><b>Leads major INFOSEC initiatives</b>-balancing workload across projects and incidents, keeping leadership dutifully informed while facilitating, executing and directing efforts in GRC, SOC operations, FedRAMP activities, and promotion of varying degrees of role-based enterprise level guidance, in concert with adversarial (blue/red/purple team) exercises.</li>
<li><b>Oversees federal security compliance</b> by interpreting information security (INFOSEC) laws and FISMA regulations; managing POA&amp;Ms and vulnerability remediation; developing or assessing ATO documentation (SSPs, RAs, CPs); and evaluating controls, baselines, cybersecurity-supply chain risk management (C-SCRM) and compliance across systems to strengthen EEOC's INFOSEC posture.</li>
</ul>Applicants must meet all eligibility requirements (e.g., time-in-grade and qualification requirements) within 30 days of the closing date specified in the vacancy announcement.<br>
<br>
Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
<p></p><div><h3 class="jobSectionHeader"><b>Education</b></h3>
<p>This position does not have an education qualification requirement.
</p></div><div><h3 class="jobSectionHeader"><b>Additional information</b></h3>
<div><div><p>Relocation expenses will not be paid.<br>
<br>
You will be expected to report to the duty station listed on this announcement.<br>
<br>
This job opportunity announcement may be used to fill additional similar vacancies across the EEOC.<br>
<br>
If you are unable to apply online or need to fax a document that you do not have in electronic form, please refer to the agency contact information.<br>
<br>
Males born after 12-31-59 must be registered or exempt from Selective Service (see: https://www.sss.gov/Home/Registration)<br>
<br>
All employees of the federal government are subject to the conflict of interest statutes and regulations including the Standards of Ethical Conduct that govern activities with outside organizations and reporting financial holdings. This position may require the incumbent to complete a confidential financial disclosure report within 30 days of appointment.<br>
<br>
<b>Reasonable Accommodation (RA) Requests: </b>If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. TTY users may contact us via the Federal Relay Service, 1-800-877-8339.</p></div></div><br>
<p></p>
<p>Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.</p>
</div><div><div><div><div><div><h1 class="jobSectionHeader"><p>Benefits</p></h1></div></div><div>
<p></p><p>Review our benefits</p></div></div></div></div></div>
<br><div><h2 class="jobSectionHeader"><b>How you will be evaluated</b></h2>
<p>You will be evaluated for this job based on how well you meet the qualifications above.</p>
<p>This position will be filled through the Direct Hire Authority. Under this authority, competitive rating, ranking, and veterans' preference procedures do not apply.<br>
<br>
You will be evaluated based on how well you meet the qualifications listed in this vacancy announcement. Your qualifications will be evaluated based on your application materials (e.g., resume, supporting documents), your responses on the application questionnaire, and your responses to all assessments required for this position.<br>
<br>
Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities and other characteristics):<br>
</p><ul><li>Accountability</li><li>
Attention to Detail</li><li>
Customer Service</li><li>
Decision Making</li><li>
Flexibility</li><li>
Influencing/Negotiating</li><li>
Information Systems/Network Security</li><li>
Information Technology Program Management</li><li>
Integrity/Honesty</li><li>
Interpersonal Skills</li><li>
Learning</li><li>
Problem Solving</li><li>
Project Management</li><li>
Reading Comprehension</li><li>
Reasoning</li><li>
Self-Management</li><li>
Stress Tolerance</li><li>
Teamwork</li><li>
Technical Credibility</li></ul><br>
<br>
<b>Career Transition Assistance Programs: </b>These programs apply to employees who have been involuntarily separated from a federal service position within the competitive service or federal service employees whose positions have been deemed surplus or no longer needed. To receive selection priority for this position, you must: 1) meet CTAP or ICTAP eligibility criteria; 2) be rated well-qualified for the position with a score of 85 or above based on the competencies listed above; and 3) submit the appropriate documentation to support your CTAP or ICTAP eligibility. For more information visit: https://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/<br>
<br>
<b>Equal Employment Opportunity</b><br>
The United States government does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service or other non-merit factor.</div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>Required Documents</b></h2>
</div><p>To apply for this position, you must provide a complete Application Package which includes:
</p><div>
<ul><li>Your <b>Resume</b> (<b>NOT TO EXCEED 2 PAGES) </b>showing work schedule, hours worked per week, dates of employment and duties performed. <b>Resumes over the 2-page limit, will not be reviewed beyond page 2 or may be disqualified.</b> If your resume does not reflect demonstrated evidence of your qualifications, you will not receive consideration for the position.</li></ul>
<ul><li><b>Other supporting documents:</b>
<ul><li><b>Career Transition Assistance Program/Interagency Career Transition Assistance Program documentation, if applicable</b> (e.g. Certification of Expected Separation, Reduction-In-Force Separation Notice, or Notice of Proposed Removal; SF-50 that documents the RIF separation action; and most recent performance appraisal.
<ul><li><b>Worker's Compensation Separation:</b> Agency certification of inability to place employee AND Notification of Separation OR Separation SF-50.</li>
<li><b>Disability Annuity Termination</b>: Notification from OPM of disability annuity termination AND Separation SF-50 of the last position held.</li>
<li><b>Military Reserve or National Guard Technician Special Disability Retirement Annuity under 5 U.S.C. 8337(h) or 8456: </b>Certification of special disability retirement annuity from a military department or National Guard Bureau AND Separation SF-50 of the last position held.</li>
</ul></li><li><b>Current or Former Political Appointees </b>(if applicable) - The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently or have been a political Schedule A, Schedule C or Non-Career SES employee in the Executive Branch within the last 5 years, you must disclose this in your application package.</li>
</ul></li></ul></div><br>
<b>Failure to submit documents required may result in loss of consideration.</b></div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>How to Apply</b></h2>
</div><div><div><p>To apply for this position, you must complete the online application and submit the documentation specified in the Required Documents section.<br>
<br>
The complete application package must be submitted by 11:59 PM (EST) on 04/21/2026 to receive consideration.<br>
<br>
To view the Assessment Questionnaire before applying online, click on this link: https://apply.usastaffing.gov/ViewQuestionnaire/12925443<br>
To begin, click <b>Apply Online</b> to access an online application. Follow the prompts to select your USAJOBS resume and/or other supporting documents. You will need to be logged into your USAJOBS account or you may need to create a new account.
</p><ul>
<li>You will be taken to an online application. Complete the online application, verify the required documentation, and submit the application.</li>
<li>You will receive an email notification when your application has been received for the announcement.</li>
<li>To verify the status of your application, log into https://login.usajobs.gov/Access/Transition select the <b>Application Status</b> link and then select the <b>More Information</b> link for this position. The Application Status page will display the status of your application, the documentation received and processed, and your responses submitted to the online application. Your uploaded documents may take several hours to clear the virus scan process.</li>
</ul><b>ADDITIONAL INFORMATION:</b><br>
The EEOC provides reasonable accommodations to applicants with disabilities. If you need a reasonable accommodation for any part of the application and hiring process, please contact the HR Specialist listed in this vacancy. The decision on granting reasonable accommodation will be made on a case-by-case basis. TTY users may contact us via the Federal Relay Service, 1-800-877-8339.</div><p></p><p><br>
</p></div>
<div><h3 class="jobSectionHeader"><b>Agency contact information</b></h3>
 <div>EEOC Jobs
</div><div><div><div>Email</div>
<div>jobs@eeoc.gov
</div></div><div><div>Address</div>
<div><div><i>Equal Employment Opportunity Commission</i><br>
<i>131 M Street, NE</i><br>
<i>Washington, DC 20507</i><br>
<i>US
</i></div></div></div></div></div><h3 class="jobSectionHeader"><b>Next steps</b></h3>
<div><div><p>Once your online application is submitted you will receive a confirmation notification by email. Your application will be evaluated. You will receive another notification about the status of your application.<br>
<br>
Your responses are subject to verification through the documentation you submit and through subsequent assessment steps. Deliberate attempts to provide false or misleading information may result in disqualification or removal from the position or agency if discovered during or after appointment.<br>
<br>
We expect to make a job offer within 40 days after the closing date of the announcement. After making a tentative job offer, we will conduct a suitability/security background investigation.</p></div></div></div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>Overview</b></h2>
</div><div><div>Accepting applications</div>
<div><div>Open &amp; closing dates</div>
 <div>04/17/2026 to 04/21/2026
</div></div><div><div>Salary</div>
<div>$143,913 - $187,093 per year
</div></div><div><div>Pay scale &amp; grade</div>
<div>GS 14</div>
</div><div><div>Location</div>
<div>1 vacancy in the following location:</div>
 <div><div><div><div>Washington, DC
</div></div></div></div></div><div></div><div><div>Remote job</div>
<div>No</div>
</div><div><div>Telework eligible</div>
<div>Yes&mdash;Limited situational telework in accordance with agency policy.</div>
</div><div><div>Travel Required</div>
<div>Occasional travel - You may be expected to travel for this position.</div>
</div><div><div>Relocation expenses reimbursed</div>
<div>No
</div></div><div><div>Appointment type</div>
<div>Permanent</div>
</div><div><div>Work schedule</div>
<div>Full-time</div>
</div><div><div>Service</div>
<div>Competitive</div>
</div><div><div>Promotion potential</div>
<div>14
</div></div><div><div>Job family (Series)</div>
<ul><li>2210 Information Technology Management
</li></ul></div><div><div>Supervisory status</div>
<div>No</div>
</div><div><div>Security clearance</div>
<div>Not Required</div>
</div><div><div>Drug test</div>
<div>No</div>
</div><div><div>Position sensitivity and risk</div>
<div>Special-Sensitive (SS)/High Risk</div>
</div><div><div>Trust determination process</div>
<ul><li>Credentialing
</li><li>Suitability/Fitness
</li></ul></div><div><div>Financial disclosure</div>
<div>No</div>
</div><div><div>Bargaining unit status</div>
<div>No</div>
</div><div></div><div><div>Announcement number</div>
<div>DH-12925443-26-MG</div>
</div><div><div>Control number</div>
<div>865749000</div></div></div></div>

Booz Allen Hamilton

<div>Information Assurance Specialist<p><b>
The Opportunity:</b></p><p>
Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to the United States Air Force. In all of this &ldquo;cyber noise,&rdquo; how can these organizations understand their risks and how to mitigate them? The answer is you&mdash;an information security risk specialist who will break down complex threats into manageable plans of action.</p><p></p><p>
As an information security risk specialist on our team, you&rsquo;ll use your experience to work with U.S. Air Force mission systems administrators to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll review technical and personnel details from engineers and subject matter experts to assess the entire threat landscape. Then, you&rsquo;ll guide your client through a plan of action with presentations, white papers, and milestones.</p><p></p><p>
You&rsquo;ll work with your client to translate security concepts, so they can make the best decisions to secure their critical infrastructure and mission-critical systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in risk management framework, data science, and data visualization.</p><p></p><p>
Work with us as we protect our military&rsquo;s command and control systems and our nation&rsquo;s cyber infrastructure.</p><p></p><p>
Join us. The world can&rsquo;t wait.</p><p></p><p><b>
You Have:</b></p><ul><li>
Experience in designing or implementing Zero Trust Architecture security models</li><li>
Experience with Security Information and Event Management tools like Splunk, firewalls, intrusion or prevention, and vulnerability scanning tools</li><li>
Knowledge of risk management principles, including threat modeling, risk assessment, and incident response methodologies</li><li>
Knowledge of data protection and privacy regulations and best practices for identity and access management</li><li>
Ability to perform comprehensive security assessments, analyze and respond to security incidents, and conduct forensics investigations</li><li>
Secret clearance</li><li>
Associate&rsquo;s degree in a Science, Technology, Engineering, or Mathematics field and 2+ years of experience in a cybersecurity role, or 4+ years of experience in a cybersecurity role in lieu of a degree</li><li>
GIAC certifications such as CISSP, CISM, or CISA</li></ul><p></p><p><b>
Nice If You Have:</b></p><ul><li>
Experience with securing cloud environments and services in platforms like AWS, Azure, or Google Cloud</li><li>
Experience with implementing and auditing control frameworks like NIST or ISO 27001, and using scripting languages such as Python or PowerShell to automate security tasks</li><li>
Knowledge of how to integrate security practices and automated tools in CI/CD pipeline</li></ul><p></p><p><b>
Clearance:</b></p><p>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Candidate AI Usage Policy</b></p><p>
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on <b>your </b>own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited <b>unless permission is explicitly provided</b>.
</p><p></p><p><b>Work Model</b><br>
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.</p><ul><li><p><b>
Remote</b>: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</p></li><li><p><b>
Hybrid</b>: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</p></li><li><p><b>
Onsite</b>: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</p></li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Information Assurance Specialist

Fannie Mae

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.
<br><br>
Job Description
<br><br>
As a valued contributor to our team, you will apply your extensive and diversified knowledge of principles, advanced techniques, and theories to create unprecedented solutions related to monitoring and evaluating threats to Fannie Mae's cybersecurity. In this role, you will set up checks and warnings to alert management when suspicious activity is detected.
<br>THE IMPACT YOU WILL MAKE
<br>The Threat Detection Principal Engineer role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:
<br>Stay current on Fannie Mae's information security activities and systems.
<br>Create cyber indicators to maintain awareness of systems and alert when abnormal behavior is detected.
<br>Improve existing indicators to detect more advanced threats.
<br>Monitor cyber threats in real-time.
<br>Work with Incident Response to investigate threats and attacks.
<br><br>
There is 1 opening/s for this position which can be based remotely.
<br><br>
THE EXPERIENCE YOU BRING TO THE TEAM
<br><br>
Minimum Required Experiences
<br>8 years of experience
<br><br>
Desired Experiences
<br>Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent combination of education and relevant work experience. Advanced degree is a plus.
<br>Demonstrated experience in threat detection and response, security operations, incident handling, and detection engineering within complex enterprise environments.
<br>Experience designing, maturing, or leading capabilities related to SIEM, EDR, UEBA, insider threat detection, security analytics, and response automation is strongly preferred.
<br>Experience applying AI/ML or advanced analytics to cybersecurity use cases, particularly in support of threat detection, alert triage, investigation, response, or workflow automation.
<br>Practical experience evaluating the effectiveness, limitations, and operational risks of AI-assisted security capabilities is highly desirable.
<br>Proven ability to lead cross-functional efforts involving cybersecurity, engineering, data, and operations teams to implement scalable, measurable, and business-aligned security solutions.
<br>Experience establishing governance, validation, and performance measures for automated or AI-assisted security controls is also preferred.
<br>Background in modern threat landscapes, including external threats, insider risk, adversary behaviors, and emerging AI-enabled attack techniques, with the ability to translate those risks into effective detection and response strategies.
<br><br>
Defense & Response - Threat Detection - Principal
<br>200,000.00 - 269,000.00
<br>JR2448
<br><br>
Qualifications Active Directory (AD), Active Directory (AD), Amazon Web Services (AWS), Artificial Intelligence (AI), Atlassian JIRA, Authentication Management, Backup and Recovery (Software), Business Insight Skills, Business Process Management Skills, Calendar and Scheduling Tools, Cleaning and Transforming Data, Cloud Technology, Collaborating Cross-Functionally, Communicating in Technical Writing, Communicating Technical Information, Communication, Configuration Management (CM), Conflict Resolution, Coordination, Customer and Market Insights, Customer Relationship Management (CRM), CyberArk, Cybersecurity Analysis, Data Analysis, Data Analysis Interpretation {+ 60 more}
<br><br>
<b>Education:</b> Bachelor's Level Degree (Required)
<br><br>
The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.
<br><br>
For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.
<br><br>
Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form .
<br><br>
The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here .
<br><br>
<b>Requisition compensation:</b> 200000
<br>to 269000

Threat Detection Principal Engineer

Abacus Technology

<div>Overview:
<div>
Abacus Technology is seeking a Cyber Security Engineering SME to provide security and test and evaluation support for the RDT&amp;E Engineering and Technical Support (RETS) program. This is a full-time position.</div>
Responsibilities:
<ul><li>Serve as the Information System Security Manager (ISSM) and act as technical advisors to AOs, primarily responsible for maintaining the overall security posture of the systems within their organization and are accountable for the implementation of DoDI 8510.01.</li><li>
Support implementation of the RMF.</li><li>
Develop and maintain a formal Information Systems security program and policies for their assigned area of responsibility.</li><li>
Supporting the system/application A&amp;A effort, to include assessing and guiding the quality and completeness of A&amp;A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., RMF).</li><li>
Maintain and report IS and Platform Information Technology systems assessment and authorization status and issues in accordance with DoD Component guidance.</li><li>
Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.</li><li>
Ensure implementation of Information System security measures and procedures including reporting incidents to the AO and appropriate reporting chains, and coordinating system-level responses to unauthorized disclosures.</li><li>
Ensure handling of possible or actual data spills of classified information resident in ISs, are conducted in accordance with DoD regulations.</li><li>
Act as the primary cybersecurity technical advisor to the AO for DoD Information Systems and Platform Information Technology systems under their purview.</li><li>
Ensure that cybersecurity-related events or configuration changes that may impact DoD Information Systems and Platform Information Technology systems authorization or security posture are formally reported to the AO and other affected parties.</li><li>
Ensure the secure configuration and approval of IT below the system level (i.e., products and IT services) in accordance with applicable guidance prior to acceptance into or connection to a DoD Information System or Platform Information Technology system.</li><li>
Author, review, certify, and/or maintain IA and security management plans to include RMF Implementation Plans, System Security Management Plans, Information Support Plans, PPPs, Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Security Concepts of Operations, OPSEC Plans, and other system/network security related documents.</li></ul>
Qualifications:
<div>
15 years of technical expertise related to cyber engineering and cyberspace test and evaluation with 10 years&rsquo; experience in project management. 10 years experience supporting the analysis, assessment, demonstration, testing, and/or experimentation of cyber capabilities. Bachelor&rsquo;s degree from an accredited college or university in computer science, Information Technology, cybersecurity, or related science or engineering field. Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); Certified Information Systems Auditor (CISA); CompTIA Advanced Security Practitioner (CASP+); Offensive Security Certified Professional (OSCP); Global Information Assurance Certifications (GIAC); and/or Certified Cloud Security Professional (CCSP). Demonstrated participation in the research, development, integration, and testing of innovative technologies for both offensive and defensive cyber. 10 years experience evaluating and validating sensor system performance, effectiveness, and operational feasibility. Demonstrated experience in recommending assessments to determine system performance to risks. Military or DoW experience preferred. Strong communication skills that can be adapted to both the technical and administrator level. Able to demonstrate strong attention to detail. Must be a US citizen and hold a current Top Secret clearance with SCI access (TS/SCI) and SAP eligibility.</div><div></div><div><b><i><br>
Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.</i></b></div><div></div><div><b><br>
EOE/M/F/Vet/Disabled</b></div></div>

Cyber Security Engineering SME

Kearney & Company

<div>Overview:
<div>
Exclusively focused on the Government, Kearney &amp; Company provides financial services, including auditing, consulting, and technology services. Our commitment to our employees and clients as well as to dedication and trust, critical values to our Firm, have led to Kearney&rsquo;s recognition as one of the leading accounting firms in the country. Based on our employees&rsquo; feedback, we are also consistently rated a Best Place to Work. Employment at Kearney means a flexible, collaborative, and open-minded work environment. We hope it is your &ldquo;first easy decision.&rdquo; Learn more at www.kearneyco.com/careers.&quot; ,&quot;</div><div><br>
The expected salary range for this position is between $80,000 and $140,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses. Actual compensation (meeting or exceeding the range) will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).<br>
<br>
We also offer a competitive benefits package that includes:</div><br>
<ul><li>
Medical, Dental, Vision, Life, AD&amp;D, and Disability Insurance</li><li>
401(k) Retirement Plan and 529 Education Savings Plan</li><li>
Flexible Spending &amp; Health Savings Account</li><li>
Accident, Critical Illness, Hospital Indemnity Insurances</li><li>
Legal Insurance and Pet Insurance</li><li>
Employee Assistance Program, fitness and wellness benefits, and other firm benefits</li><li>
Paid holidays, vacation, and sick time</li></ul><br>
<div></div>
Responsibilities:
<div>
Kearney &amp; Company is seeking a SIEM/SOAR Support Specialist to join our growing team! This Consultant role supports the SIEM/SOAR Program Leadership team in executing security logging, monitoring, orchestration/automation, and audit/compliance activities for enterprise financial systems. The Support Specialist assists with system log onboarding to SIEM/SOAR, continuous monitoring, documentation development, evidence preparation for audits, and operational improvements to alerting and incident workflows.</div><div><br>
</div><div><b>Key Responsibilities:</b></div><div><ul><li><br>
Support SIEM/SOAR onboarding of enterprise system logs and track integration progress, dependencies, and issues under direction from the Program Lead.</li><li>Assist in validating logging, monitoring, and audit requirements; document design constraints and gaps and help with remediation recommendations.</li><li>Contribute to day-to-day SIEM/SOAR operations, including log ingestion, detection tuning, analytics, automation playbooks, and performance checks</li><li>Help develop and maintain documentation (SDDs, playbooks, CONOPS, architectures) and dashboards/evidence repositories for audits.</li><li>Support audit compliance activities by preparing evidence, addressing findings, and aligning monitoring capabilities to FISCAM/NIST control requirements.</li><li>Assist with incident monitoring, alert triage, escalation documentation, and response coordination across stakeholders.</li><li>Help integrate cloud-native logging and visualization tools and support AI/ML enhancements to improve alert fidelity and automated response.</li></ul></div>
Qualifications:
<div>
Required Qualifications:</div><div></div><ul><li><br>
Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Engineering, or related discipline.</li><li>Minimum 4 years of experience in cybersecurity operations, security monitoring, SIEM/SOAR engineering, or a closely related support function.</li><li>At least two (2) years federal or DoW experience.</li><li>Hands-on familiarity with SIEM platforms (e.g., Splunk, Elastic, Azure Sentinel, IBM QRadar) and SOAR technologies.</li><li>Working understanding of logging/monitoring, audit controls, correlation rules, and compliance frameworks (NIST, FISCAM, SOC, RMF).</li><li>Strong communication and documentation skills; ability to support cross-functional teams and coordinate tasks under senior guidance.</li><li>Active U.S. Secret clearance.</li><li>Ability to travel up to 25%</li></ul><div><br>
</div><div>Preferred Qualifications:</div><div></div><ul><li><br>
Experience with cloud-native SIEM/SOAR solutions (AWS, Azure, GCP) and basic automation/orchestration tooling.</li><li>Experience contributing to audit support activities or IT control testing</li><li>Familiarity with DoW or federal cybersecurity governance processes and audit methodologies (GAO FISCAM).</li><li>Exposure to creating architecture diagrams, technical documentation, and operational playbooks.</li><li>Certifications relevant to SIEM/SOAR or cybersecurity operations (e.g., Splunk Certified, GIAC Detection Analyst, Security+, CISSP, CISA, CISM)</li></ul>
EEO Notice:
<div><b>
</b><b>Applicants have rights under Federal Employment Laws</b><b>
</b></div><h2 class="jobSectionHeader"><b>EEO Notice</b></h2><div>
Work location is subject to change based on client requirements.
<br>
<br>
Kearney &amp; Company is an Equal Opportunity Employer and will consider all qualified applicants without regard to race, color, national origin, ethnicity, ancestry, genetic information, religion, sex, gender, gender identity, sexual orientation, marital status, pregnancy, childbirth, any medical condition related to pregnancy or childbirth, age, disability, protected veteran status, relationship or association to a protected veteran, or any other characteristic protected by local, state or federal laws, rules or regulation. Click here for more information on Kearney&rsquo;s EEO Policy.<br>
<br>
If you would like to request a reasonable accommodation, regarding accessibility of our website, a modification or adjustment of the job application or interview process due to a disability, please call 703-236-2391 or email accommodations@kearneyco.com. Please be advised that this contact information is for accommodation requests only and cannot be used to inquire about the status of an application.</div><div><br>
</div><div><b>Family and Medical Leave Act (FMLA)</b></div><div><b><br>
</b></div><div>FMLA is designed to help employees balance their work and family responsibilities by allowing them to take reasonable unpaid leave for certain family and medical reasons. Kearney &amp; Company provides eligible employees with up to 12 weeks of unpaid, job-protected leave per year. Military family leave is available for up to 26 weeks under FMLA. Click here to learn more.</div><div></div><div><b><br>
</b><b>Employee Polygraph Protection Act (EPPA)</b></div><div><b><br>
</b></div><div>The EPPA prohibits most private employers from using lie detector tests either for pre-employment screening or during the course of employment. Kearney &amp; Company adheres all provisions of the EPPA. Click here to learn more.</div></div>

SIEM/SOAR Support Specialist

Quzara LLC

<div><p><b>Job Title: </b>IT Project Manager (Cybersecurity &amp; Compliance Focus)</p><p><b>
Pay Type</b>: SALARIED EXEMPT</p><p><b>
Location: </b>Hybrid, Washington, DC (Must Work East Coast Hours)</p><p><b>
Citizenship: </b>U.S. Citizenship (Required)</p><p><b>
Summary of Position Role/Responsibilities</b></p><p>
The IT Project Manager (Cybersecurity &amp; Compliance Focus) is responsible for overseeing cybersecurity and compliance initiatives aligned with Risk Management Framework (RMF), FISMA, and system authorization activities. This role manages the planning, tracking, and execution of ATO-related efforts, coordinates compliance documentation and evidence collection, and facilitates reporting among stakeholders. Acting as a liaison between technical teams, compliance personnel, and leadership, the position supports governance processes and audit readiness, requiring strong project management skills and a solid understanding of federal cybersecurity frameworks and authorization procedures.</p><p><b>
Essential Functions of the Job</b></p><div><ul><li>
Manage cybersecurity authorization and compliance projects, ensuring alignment with RMF, FISMA, and ATO requirements.</li><li>
Track and manage ATO milestones, including control implementation, assessment activities, and remediation efforts.</li><li>
Maintain and organize compliance-related project documentation, including artifacts, evidence repositories, and tracking logs.</li><li>
Coordinate closely with Cybersecurity Solutions Architects (CSA) and Systems Security Engineers (SSE) to align technical execution with compliance requirements.</li><li>
Prepare and deliver security posture reports and compliance status updates to internal leadership and external stakeholders.</li><li>
Support audit activities and security governance reviews, including preparation of documentation and coordination of responses.</li><li>
Monitor project risks, issues, and dependencies related to compliance and authorization efforts, escalating as necessary.</li><li>
Ensure consistent communication and alignment across technical, compliance, and program management teams.</li></ul></div><p><b>
Marginal Functions of the Job</b></p><div><ul><li>
Other duties as assigned</li></ul></div><p><b>
Normal Work Schedule</b>:</p><p>
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.</p><p><b>
Education, Training, and Experience</b></p><div><ul><li>
Bachelor&rsquo;s degree in Information Technology, Cybersecurity, Business Administration, or a related field.</li><li>
5&ndash;8+ years of experience in IT project management, with a focus on cybersecurity, compliance, or federal programs.</li><li>
Working knowledge of RMF (NIST 800-37), FISMA, and ATO processes.</li><li>
Experience managing compliance-driven projects, including documentation tracking and audit preparation.</li><li>
Familiarity with cybersecurity roles and functions, including coordination with CSA, SSE, and compliance teams.</li><li>
Strong organizational and documentation management skills, with attention to detail.</li><li>
Ability to manage multiple projects, timelines, and stakeholders in a fast-paced environment.</li><li>
Excellent written and verbal communication skills for reporting and stakeholder engagement.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div><p><b>
Preferred Certifications</b></p><div><ul><li>
Project Management Professional (PMP)</li><li>
Certified Scrum Master (CSM) or Agile certification</li><li>
Security or compliance-related certifications (e.g., Security+, CISA)</li></ul></div><p><b>
EEO Statement</b></p><p>
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</p></div>

IT Project Manager (Cybersecurity & Compliance Focus)

Explore 96+ Cybersecurity specialist in Washington this April. Find roles across top companies and apply now to boost your career.

96 cybersecurity specialist jobs In Washington

IT Specialist (INFOSEC)

IT Specialist (INFOSEC)

Information Assurance Specialist

Threat Detection Principal Engineer

Cyber Security Engineering SME

SIEM/SOAR Support Specialist

IT Project Manager (Cybersecurity & Compliance Focus)