Skip to main content
U.S. flag
 

IT Cybersecurity Specialist (Security)

Department of Health and Human Services
Centers for Medicare & Medicaid Services
Office of Information Technology (OIT)

Summary

This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology (OIT), Information Security and Privacy Group (ISPG), Division of Security and Privacy Compliance (DSPC).

As a IT Cybersecurity Specialist (Security), GS-2210-13, you will secure Software-as-a-Service (SaaS) platforms and cloud-hosted business applications utilized throughout CMS.

Overview

Help
Accepting applications
Location
1 vacancy in the following locations:
Work site options
Telework eligible
Yes—as determined by the agency policy.
Remote job
No
Relocation expenses reimbursed
No
Salary
$115,711 - $158,322 per year

Please see the Additional Information section for further salary details.

Pay scale & grade
GS 13
Promotion potential
13
Pay scale and grade determines the salary of the job.
Work schedule
Full-time
Travel Required
Occasional travel - You may be expected to travel up to 5% for this position.
Appointment type
Permanent
Occupations and job series
Supervisory status
No
Federal service type
This job is in the Competitive Service
Represented by a union
Yes
Drug test
No
Security clearance
Not Required
Position sensitivity and risk
Moderate Risk (MR)
Jobs require a background check and some require a security clearance. The type depends on the job.
Background check type
Financial disclosure required
No
Some jobs require financial disclosure to identify conflicts of interests.
Announcement number
CMS-OIT-26-13055850-DH
Control number
884003100

This job is open to

Help

Clarification from the agency

This announcement is advertised under Direct Hire Authority and is open to all United States Citizens or Nationals.

Videos

Duties

Help
  • Plan, develop, and implement enterprise-wide SaaS security governance frameworks, policies, standards, and baselines to ensure the secure acquisition, adoption, operation, and continuous monitoring of cloud-hosted applications across CMS.
  • Design and implement automated security workflows, scripts, and integration pipelines connecting SaaS security tools to enterprise monitoring and ticketing systems to streamline detection, tracking, remediation, and validation of security findings.
  • Provide technical consultation, recommendations, and briefings to CMS senior leadership, application owners, cybersecurity personnel, vendors, and Federal partners on SaaS security risks, compliance posture, and remediation strategies.
  • Conduct security posture, vulnerability, and configuration assessments of SaaS platforms, prioritize findings by risk; and coordinate remediation with application owners, security teams, and vendors.
  • Evaluate SaaS platforms, third-party providers, and application integrations against Federal cybersecurity requirements.

Requirements

Help

Conditions of employment

  • You must be a U.S. Citizen or National to apply for this position.
  • You will be subject to a background and suitability investigation.
  • Selective Service: Males born after December 31, 1959, must be registered or exempt from Selective Service-http//www.sss.gov
  • If you are selected for this position, the documentation that you present for purposes of completing the Department of Homeland Security (DHS) form I-9 will be verified through the DHS "E-Verify" System.
  • All Federal employees are required to have Federal salary payments made by direct deposit to a financial institution of their choice.
  • One-year probationary period may be required.

Qualifications

ALL QUALIFICATION REQUIREMENTS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT.

Your resume (limited to no more than 2 pages) must include detailed information as it relates to the responsibilities and specialized experience for this position. Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from being considered further.


There is a Basic Requirement and Minimum Qualification Requirement for this position. You must meet both requirements.

Basic Requirement:
You must have IT related experience, demonstrated by paid or unpaid experience obtained in either the private or public sector, and/or completion of specific, intensive training that demonstrates that I possess each of the following four competencies:
(1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
(2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
(3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
(4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

AND

In order to qualify for the GS-13, you must meet the following: You must demonstrate in your resume at least one year (52 weeks) of qualifying specialized experience equivalent to the GS-12 grade level in the Federal government, obtained in either the private or public sector, to include:
1) Securing SaaS platforms and cloud-hosted applications (e.g., Microsoft 365, Salesforce, ServiceNow) using SaaS Security Posture Management (SSPM) or Cloud Access Security Broker (CASB) technologies to identify issues - such as misconfigurations, policy violations, and security risks; AND
2) Applying federal cybersecurity frameworks - such as Federal Information Security Modernization Act (FISMA), Federal Risk and Authorization Management Program (FedRAMP), or National Institute of Standards and Technology Risk Management Framework (NIST RMF) - to assess and monitor the compliance posture of cloud environments; AND
3) Developing and integrating automated workflows, scripts, or security tools to manage security findings across a cloud or SaaS environment.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills, and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

This job does not have an education qualification requirement.

Additional information

Bargaining Unit Position: Yes-American Federation of Government Employees, Local 1923
Tour of Duty: Flexible
Recruitment Incentive: Not Authorized
Relocation Incentive: Not Authorized
Financial Disclosure: Not Required

Additional Salary Information:
Dallas, TX: $115,711 to $150,426
Woodlawn, MD: $121,785 to $158,322

Workplace Flexibility at CMS: This position has a regular and recurring reporting requirement to the CMS office listed in this announcement. CMS offers flexible working arrangements and allows employees the opportunity to participate in alternative work schedules at the manager's discretion.

The Interagency Career Transition Assistance Plan (ICTAP) and Career Transition Assistance Plan (CTAP) provide eligible displaced federal employees with selection priority over other candidates for competitive service vacancies. To be qualified you must submit the required documentation and be rated well-qualified for this vacancy. Click here for a detailed description of the required supporting documents. A well-qualified applicant is one whose knowledge, skills and abilities clearly exceed the minimum qualification requirements of the position. Additional information about ICTAP and CTAP eligibility is on OPM's Career Transition Resources website at www.opm.gov/rif/employee_guides/career_transition.asp.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated based on how well you meet the qualifications listed in this vacancy announcement. Your qualifications will be evaluated based on your application materials (e.g., resume, supporting documents), the responses you provide in the application questionnaire, and the results of the online assessment(s) required for this position. A Subject Matter Expert will assist in the resume review process to help determine whether you meet the minimum job qualifications. Please follow all instructions carefully. Errors or omissions may affect your rating.

You will be assessed on the following competencies (knowledge, skills, abilities, and other characteristics):

  • Accountability
  • Attention to Detail
  • Customer Service
  • Decision Making
  • Flexibility
  • Influencing/Negotiating
  • Integrity/Honesty
  • Interpersonal Skills
  • Learning
  • Reading Comprehension
  • Reasoning
  • Self-Management
  • Stress Tolerance
  • Teamwork


In order to be considered for this position, you must complete all required steps in the process. In addition to the application and application questionnaire, this position requires an online assessment. The online assessment measures critical general competencies required to perform the job.

The assessment includes a cut score based on the minimum level of required proficiency in these critical general competencies. You must meet or exceed the cut score to be considered. You will not be considered for the position if you score below the cut score or fail to complete the assessment.

Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration. Cheating on the online assessment may also result in your removal from consideration.

RPL Applicants
RPL applicants who are verified as registered for the same series, grade, and location as this vacancy announcement will be placed in one of the following categories based on category rating procedures:
  • Best Qualified - significantly exceeds the evaluation criteria
  • Well Qualified - excelsin the evaluation criteria
  • Qualified - meets the minimum qualification requirements

If you are found to be among the top-qualified candidates, you will be referred to the selecting official for employment consideration.

The category rating process does not add veterans' preference points but protects the rights of veterans by placing them ahead of non-preference eligibles within each category. Veterans' preference eligibles who meet the minimum qualification requirements and who have a compensable service-connected disability of at least 10 percent will be listed in the highest quality category (except in the case of professional or scientific positions at the GS-09 level or higher).

Centers for Medicare & Medicaid Services

The Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS) works in partnership with the entire health care community to improve quality and efficiency in an evolving health care system and provides leadership in the broader health care marketplace.

CMS' effectiveness depends on the capabilities of a dedicated, professional staff that is committed to supporting these objectives. A career with CMS offers the opportunity to get involved in important national health care issues and be part of a dynamic, fast-paced, and highly visible organization. For more information on CMS, please visit: http://www.cms.gov/.

HHS has a critical preparedness and response mission: HHS protects the American people from health threats, researches emerging diseases, and mobilizes public health programs with domestic and international partners. In support of this mission, HHS offers its employees the opportunity to contribute their unique skills through voluntary temporary assignments to humanitarian emergencies or Departmental priorities countering new and emerging health, safety, and security threats.

Agency contact information

CMS HR Inquiries
Email
hrinquiries@cms.hhs.gov
Address
Office of Information Technology
7500 Security Blvd
Woodlawn, MD 21244
US

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.