IT Cybersecurity Specialist (CYBERMGT)

Department of Energy Headquarters•Washington, DC

About The Position

This position is part of the Office of Cybersecurity, Energy Security and Emergency Response (CESER) at the Department of Energy. The IT Cybersecurity Specialist serves as a recognized expert and IT Cybersecurity Program Manager, providing independent cybersecurity guidance, management services, advice, and recommendations to DOE leadership, officials of other federal agencies, and DOE stakeholders. CESER works to enhance the security and resilience of U.S. critical energy infrastructure, mitigate impacts of disruptive events and risks to the energy sector, and respond to and facilitate recovery from energy disruptions in collaboration with federal, private-sector, and state, local, tribal, and territorial partners. The position directs the planning, implementation, and long-term sustainment of department-wide cybersecurity programs, projects, and strategic initiatives. It provides authoritative technical expertise on complex cybersecurity policies, emerging technologies, and risk management; interprets federal and commercial directives to evaluate compliance and address cyber risk; and oversees cyber defense tools and enterprise security assessments. The role also supports program requirements, resource and staffing plans, and technical training needs to align cybersecurity capabilities with mission objectives and protect classified information. The position is designated Special-Sensitive (High Risk) and requires the incumbent to obtain and maintain a Top Secret security clearance. It is also a Testing Designated Position subject to applicant and random drug testing, and requires a financial disclosure report within 30 days of entry and annually. A one-year probationary period may be required. No specific education requirement or substitution of education for experience is provided. The position is not included in a bargaining unit.

Requirements

Be a U.S. Citizen or National.
Demonstrate IT-related education and experience at the required proficiency level in attention to detail, customer service, oral communication, and problem solving.
Have at least one year of specialized experience equivalent to the next lower grade level, GS-14, in the Federal service.
Meet at least two of the four specialized experience areas: managing cybersecurity or IT security projects; overseeing enterprise cyber defense tools, hardware, and software; leading vulnerability assessments, system scans, and cyber risk analyses; or evaluating IT systems against cybersecurity standards and compliance mandates.
Obtain and maintain a Top Secret security clearance.
Submit an OGE-450 financial disclosure report within 30 days of entering the position and annually.
Complete applicant testing and submit to random drug testing as a Testing Designated Position.
Meet applicable Selective Service registration requirements if a male applicant born after December 31, 1959.
Complete a suitability or fitness determination and preliminary background check if selected.
A one-year probationary period may be required.

Nice To Haves

Hiring incentives may be authorized for highly qualified candidates, subject to budget availability and federal regulations.

Responsibilities

Direct the planning, implementation, and long-term sustainment of department-wide cybersecurity programs, projects, and strategic initiatives to safeguard enterprise networks and mission systems.
Advise DOE executives, interagency working groups, and external partners on complex cybersecurity policies, emerging technologies, and risk management.
Interpret and implement federal and commercial cybersecurity directives, including NIST, CISA, and OMB guidance, to evaluate system compliance, mitigate cyber risk, and resolve difficult IT security issues.
Oversee the design, installation, configuration, testing, and administration of cyber defense hardware, software, and tools to support system resilience and operational performance.
Lead vulnerability scans, security assessments, and audit reviews to identify deviations from established baselines and recommend remediation strategies across enterprise platforms.
Justify program requirements, develop resource and staffing plans, and determine technical training needs to align cybersecurity capabilities with mission objectives and protect classified information.