Skip to main content
U.S. flag
 

IT Specialist (Security)

Department of Veterans Affairs
Deputy Assistant Secretary for Information and Technology
Office of Information and Technology (OIT)

Summary

This IT Specialist (Security) position is located in the Office and Information and Technology (OI&T), Office of Information Security (OIS), Information Security Office (ISO), Cyber Security Operations Center (CSOC). The Office of Information and Technology (OI&T) provides adaptable, secure, and cost- effective technology services across the Department of Veterans Affairs (VA).

Overview

Help
Accepting applications
Location
1 vacancy in the following locations:
Work site options
Telework eligible
Yes—as determined by the agency policy.
Remote job
No
Relocation expenses reimbursed
No
Salary
$106,437 - $138,370 per year

The salary listed is the base salary. Once a selection has been made and the location known, the salary with locality will be determined.

Pay scale & grade
GS 13
Promotion potential
13
Pay scale and grade determines the salary of the job.
Work schedule
Full-time
Travel Required
Occasional travel - You may be expected to travel for this position.
Appointment type
Permanent
Occupations and job series
Supervisory status
No
Federal service type
This job is in the Competitive Service
Represented by a union
No
Drug test
No
Security clearance
Other
Position sensitivity and risk
High Risk (HR)
Jobs require a background check and some require a security clearance. The type depends on the job.
Background check type
Financial disclosure required
No
Some jobs require financial disclosure to identify conflicts of interests.
Announcement number
OIS-26-DE-AL-13069299-BU
Control number
886698200

This job is open to

Help

Clarification from the agency

ALL US CITIZENS DIRECT HIRE AUTHORITY: This position is being filled using Direct-Hire Authority (5 CFR 337.201) for this occupation.

Videos

Duties

Help

Major Duties:

  • Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
  • Knowledge of defense-in-depth principles and network security architecture.
  • Knowledge of cyber defense and information security policies, procedures, and regulations.
  • Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
  • Ability to interpret the information collected by network tools (e.g. Ns lookup, Ping, and Traceroute).
  • Determine tactics, techniques, and procedures (TTPs) for intrusion sets.
  • Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
  • Knowledge of adversarial tactics, techniques, and procedures.
  • Skill in collecting data from a variety of cyber defense resources.
  • Skill in performing packet-level analysis.
  • Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
  • Coordinate with enterprise-wide cyber defense staff to validate network alerts.
  • Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
  • Knowledge of the common attack vectors on the network layer.
  • Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
  • Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
  • Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
  • Reconstruct a malicious attack or activity based off network traffic.
  • Knowledge of incident response and handling methodologies.
  • Skill in using incident handling methodologies.
  • Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.
  • Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
  • Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
  • Skill in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.).
  • Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
Work Schedule: Monday - Friday, 8:00am to 4:30pm
Compressed/Flexible: Compressed/flexible schedule available at the manager's discretion
Telework: This position may be authorized for telework.
Virtual: This is not a virtual position.
Position Description/PD#: IT Specialist (Security)/PD17400A
Relocation/Recruitment Incentives: Not Authorized
Permanent Change of Station (PCS): Not Authorized
PCS Appraised Value Offer (AVO): Not Authorized

Requirements

Help

Conditions of employment

  • You must be a U.S. Citizen to apply for this job
  • To be considered for this position, you must complete all required steps in the process. In addition to the application and questionnaire, this position requires an online assessment. The online assessment measures critical general competencies required to perform the job.
  • Physical Requirements: The work required does not inherently include any physical requirements essential for successful job performance that could not otherwise be performed with accommodation or workplace adjustment. A pre-placement physical examination is not required.
  • You may be required to serve a probationary period
  • Subject to background/security investigation
  • Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements (https://www.uscis.gov/i-9-central/form-i-9-acceptable-documents). Effective May 7, 2025, driver's licenses or state-issued dentification cards that are not REAL ID compliant cannot be utilized as an acceptable form of identification for employment.
  • As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider:
  • your performance and conduct;
  • the needs and interests of the agency;
  • whether your continued employment would advance organizational goals of the agency or the Government; and
  • whether your continued employment would advance the efficiency of the Federal service.
Upon completion of your probationary period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.

Qualifications

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 10/07/2026.

Applicants must have IT-related experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service

You must meet both the Basic Requirement and the Specialized Experience and the Selective Placement Factor to qualify for this series as described below

  1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
  2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
  3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
  4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
AND
  • Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-13 in the normal line of progression for the occupation in the organization. Experience characterizing and analyzing network traffic to identify anomalous activity and potential threats to network resources; performing event correlation using information gathered from a variety of enterprise sources to determine the effectiveness of an observed attack; analyzing malicious activity to determine weaknesses exploited, exploitation methods, and effects on systems and information; and providing risk mitigation recommendations based on Federal laws, regulations, and organizational policies.
AND-

Selective Placement Factor: Developing, tuning, and validating detection analytics and correlation rules within Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) platforms to support proactive threat hunting and cybersecurity incident response operations, to include applying a structured adversary behavior framework (e.g., MITRE ATT&CK) to identify tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) not detected through automated alerting; and experience providing technical direction and quality review of work performed by contract staff supporting these functions, in a non-supervisory capacity.

Physical Demands:
The work is primarily sedentary during the planning/preparation phase. The work may require walking and standing for prolong periods in conjunction with travel and at the onsite assessment location. The incumbent may carry light items such as papers, books or computers, or drive a motor
vehicle. The work does not require any special physical effort.

Work Environment:
The work area is adequately lighted, heated, and ventilated. The work environment involves everyday risks or discomforts that require normal safety precautions. The responsibilities of the position require frequent travel and may subject the incumbent to various resultant environmental changes; incumbent must be amenable to such period of travel and to working in unfamiliar surroundings. This position requires occasional travel using both air and ground transportation.

For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/.

Education

There is no educational substitution at this grade level.

Additional information

Under the Fair Chance to Compete Act, the Department of Veterans Affairs prohibits requesting an applicant's criminal history prior to accepting a tentative job offer. For more information about the Act and the complaint process, visit Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP) at The Fair Chance Act.

Receiving Service Credit or Earning Annual (Vacation) Leave: Federal Employees earn annual leave at a rate (4, 6 or 8 hours per pay period) which is based on the number of years they have served as a Federal employee. VA may offer newly-appointed Federal employee's credit for their job-related non-federal experience or active duty uniformed military service. This credited service can be used in determining the rate at which they earn annual leave. Such credit must be requested and approved prior to the appointment date and is not guaranteed.

This job opportunity announcement may be used to fill additional vacancies.

If you are unable to apply online or need an alternate method to submit documents, please reach out to the Agency Contact listed in this Job Opportunity Announcement.

The Interagency Career Transition Assistance Plan (ICTAP) and Career Transition Assistance Plan (CTAP) provide eligible displaced VA competitive service employees with selection priority over other candidates for competitive service vacancies. To be qualified you must submit appropriate documentation (a copy of the agency notice, your most recent performance rating, and your most recent SF-50 noting current position, grade level, and duty location) and be found well-qualified for this vacancy. To be well-qualified: applicants must possess experience that exceeds the minimum qualifications of the position including all selective factors, and who are proficient in most of the required competencies of the job. Information about ICTAP and CTAP eligibility is on OPM's Career Transition Resources website at http://www.opm.gov/policy-data-oversight/workforce-restructuring/employee-guide-to-career-transition/.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your qualifications will be evaluated based on your application materials (e.g., resume, supporting documents), your responses on the application questionnaire, and your responses to all assessments required for this position. You will be assessed on the following Competencies for this position:

  • Accountability
  • Attention to Detail
  • Customer Service
  • Decision Making
  • Flexibility
  • Influencing/Negotiating
  • Integrity/Honesty
  • Interpersonal Skills
  • Learning
  • Reading Comprehension
  • Reasoning
  • Self-Management
  • Stress Tolerance
  • Teamwork


USA Hire Assessments include a cut score based on the minimum level of required proficiency in these critical general competencies. You must meet or exceed the cut score to be considered. You will not be considered for the position if you score below the cut score or fail to complete the assessment.

Your experience must be fully documented on your resume and must include job title, duties, month and year start/end dates AND hours worked per week. A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment. IN DESCRIBING YOUR EXPERIENCE, PLEASE BE CLEAR AND SPECIFIC. WE WILL NOT MAKE ASSUMPTIONS REGARDING YOUR EXPERIENCE. Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration. Cheating on the online assessment may also result in your removal from consideration.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religions; spiritual; community; student; social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

During the application process you may have an option to opt-in to make your resume available to hiring managers in the agency who have similar positions. Opting in does not impact your application for this announcement, nor does it guarantee further consideration for additional positions.

Veterans and Transitioning Service Members: Please visit the VA for Vets site for career-search tools for Veterans seeking employment at VA, career development services for our existing Veterans, and coaching and reintegration support for military service members.

Deputy Assistant Secretary for Information and Technology

OUR MISSION: To fulfill President Lincoln's promise "To care for those who have served in our nation's military and for their families, caregivers, and survivors" - by serving and honoring the men and women who are America's Veterans. How would you like to become a part of a team providing compassionate whole health care to Veterans?

DIRECT HIRE AUTHORITY: This position is being filled using Direct-Hire Authority (5 CFR 337.201) for this occupation.

Agency contact information

Recruitment Team One A
Email
VAOITOPSHRRPTeam1A@va.gov
Address
DAS for Information Technology - 103
810 Vermont Ave. NW
Washington, DC 20240
US

Visit our careers page

Learn more about what it's like to work at Deputy Assistant Secretary for Information and Technology, what the agency does, and about the types of careers this agency offers.

https://digital.va.gov/careers/

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.