GRC Careers: AI Governance, Risk and Compliance JobsConnecting Talent and Trust.

Jobs › Virginia › Fort Belvoir › IT CYBERSECURITY SPECIALIST (SECURITY)

IT CYBERSECURITY SPECIALIST (SECURITY)

Defense Threat Reduction Agency
CybersecurityOn-siteFull-timeFort Belvoir, Virginia$143913 - $187093 Per Year

Defense Threat Reduction Agency is hiring for the job of IT CYBERSECURITY SPECIALIST (SECURITY), Fort Belvoir, Virginia (On-site). This is a Cybersecurity job in the governance, risk, and compliance field, with a posted range of $143913 - $187093 Per Year. Review the full details below and apply directly with Defense Threat Reduction Agency.

Organization: Defense Threat Reduction AgencyLocation: Fort Belvoir, VirginiaWorkplace: On-siteFocus: CybersecuritySalary: $143913 - $187093 Per YearPosted: Oct 1, 2026
Defense Threat Reduction Agency is hiring for this Cybersecurity job in Fort Belvoir, one of the metros GRC Careers tracks for governance, risk, and compliance hiring. See other GRC jobs in Fort Belvoir →

This position may be filled using Direct Hire Authority: Z5CAV/Direct-Hire Authority (Certain DoD Personnel) PL 118-31, Sec 125OB (i)(2), 12/22/2023. This position is being filled under the memorandum from the Under Secretary of Defense for Personnel and Readiness (USD(P&R)) "Expansion of Direct Hire Authority for Certain Personnel of the Department of War," dated December 19,2025. This position is part of the Defense Threat Reduction Agency.

Qualifications: You may qualify at the GS-14, if you fulfill the following qualifications: A. One year of specialized experience equivalent to the GS-13 grade level in the Federal service as listed below: Managed the Risk Management Framework lifecycle including Assessment and Authorization activities, continuous monitoring, and providing risk-based recommendations. Directed cybersecurity incident response operations, threat hunting initiatives, and enterprise vulnerability management programs to mitigate advance persistent threats. Designed and evaluated zero-trust architectures, cloud environments and advanced cryptograhic solutions for enterprise IT architectures. Act as the senior technical authority for the cybersecurity of enterprise level programs covering infrastructure and network, while also advising leadership on cyber risk posture, security impact of new technologies, and remediation strategies. Managed the full lifecycle of cybersecurity programs, defining technical road maps, and ensuring team members maintain certifications. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. In addition to meeting qualifications, your application package must reflect the applicable experience to meet the Individual Occupational Requirements for the 2210, series as listed below: Experience must be IT related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate GS-5 through GS-15 (or equivalent): For all positions individuals must have IT-related experience demonstrating each of the four competencies listed below. The employing agency is responsible for identifying the specific level of proficiency required for each competency at each grade level based on the requirements of the position being filled. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. and Specialized Experience for GS-7 (or equivalent) and Above: Positions at GS-7 (or equivalent) and above require one year of specialized experience at the next lower GS-grade (or equivalent). Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. The employing agency is responsible for defining the specialized experience based on the requirements of the position being filled.

Location and market context

This job is based in Fort Belvoir on-site. Local candidates benefit from being close to Defense Threat Reduction Agency's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Defense Threat Reduction Agency would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

More GRC jobs in Fort Belvoir

Hiring for Cybersecurity?

Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.

Post a job  Pricing from $99 · About GRC Careers · Hiring toolkit

Want to be next in a job like this?

Jobs like IT CYBERSECURITY SPECIALIST (SECURITY) in Fort Belvoir, Virginia open regularly. Be first to know, privately. No current employer ever sees you looking.

New Cybersecurity jobs, the moment they post.

One click unsubscribe.
Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

Employer, or see something wrong with this posting? Report this posting and we will review it promptly.