IT Cybersecurity Specialist (CYBERMGT)

This position is part of the Office of Cybersecurity, Energy Security and Emergency Response, Department of Energy. As a IT Cybersecurity Specialist (CYBERMGT), you will be a recognized expert in IT Cybersecurity Program Manager, who provides independent cyber security guidance, management services, advice, and recommendations to DOE leadership, officials of other Federal Agencies and DOE stakeholders.

Qualifications: BASIC REQUIREMENT: Applicants must have IT-related education and experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidate's online application and resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level GS-14 in the Federal service. Specialized experience for this position is defined as meeting 2 of 4 of the following: Lead and manage cybersecurity or IT security projects from planning through execution, including developing project schedules, tracking milestones, allocating technical resources, and evaluating project performance using structured project management or Agile frameworks. Direct or oversee the design, implementation, and optimization of enterprise cyber defense tools, hardware, and software to protect complex network infrastructures and sensitive data systems. Lead technical vulnerability assessments, system scans, and cyber risk analyses across enterprise systems to identify security weaknesses and engineer remediation or mitigation strategies. Evaluate IT systems against formal cybersecurity standards, security control frameworks, and compliance mandates (such as NIST SP 800-53/RMF, ISO 27001, CMMC, or equivalent industry/federal standards) to maintain system authorizations, approve security plans, and remediate compliance deficiencies. "Experience" refers to paid and unpaid experience. Examples of qualifying unpaid experience may include: volunteer work done through National Service programs (such as Peace Corps and AmeriCorps); as well as work for other community-based philanthropic and social organizations. Volunteer work helps build critical competencies, knowledge, and skills; and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. CTAP/ICTAP candidates: To be considered "well qualified" you must meet all of the requirements as described in this section. You must meet all qualifications and eligibility requirements by the closing date of this announcement.