IT Cybersecurity Specialist

Small Business Administration•Washington, DC

2d•Onsite

About The Position

This position is located in the Small Business Administration, Office of the Chief Information Officer in Washington, DC. The incumbent serves as an IT Cybersecurity Specialist for the U.S. Small Business Administration (SBA) at the GS-2210-14 level. The vacancy is open to CTAP and ICTAP eligible candidates only; applicants who are not eligible for one of these programs will be ineligible for consideration. The specialist leads enterprise information-system risk and vulnerability assessments, provides technical oversight of cybersecurity requirements and implementations, develops long-range security plans, and designs enterprise security controls. The role evaluates enterprise security programs for compliance and gaps, recommends improvements, and investigates incidents to develop resolutions, implement remediation measures, and strengthen authentication and authorization controls. Applicants must be U.S. citizens and successfully complete a background investigation. A one-year probationary period may be required. This is a bargaining unit position with AFGE Local 228 and is not a drug-testing designated position. All qualification requirements must be met by 11/11/2026 at 11:59 p.m. Eastern Time.

Requirements

U.S. citizenship.
Successful completion of a background investigation.
Demonstrate the competencies required to perform the position's duties.
At least one year of specialized experience equivalent to the next lower grade level, or competencies obtained through other means. Experience may be paid or unpaid and must be validated through the assessment process.
Specialized experience leading risk and vulnerability assessments of enterprise systems, networks, and software to identify systemic weaknesses and inform mitigation strategies.
Specialized experience building cybersecurity architecture, including developing long-range system security strategies to ensure confidentiality, integrity, and availability of enterprise systems.
Specialized experience evaluating cybersecurity programs to identify gaps, ensure compliance with organizational requirements, and recommend improvements.
Clearly reference qualifying specialized experience in the resume.
Meet all qualification requirements by 11/11/2026 at 11:59 p.m. Eastern Time.
Applicants must be eligible for CTAP or ICTAP; otherwise they will be ineligible for consideration.

Responsibilities

Lead risk and vulnerability assessments of enterprise information systems to identify vulnerabilities, risks, and protection needs, and support remediation.
Provide technical oversight of cybersecurity requirements and implementations.
Develop long-range security plans and design enterprise security controls.
Evaluate enterprise security programs, assess compliance, identify gaps, and recommend improvements to minimize vulnerabilities and strengthen program effectiveness.
Investigate security incidents, develop security resolutions, implement remediation measures, and strengthen authentication and authorization controls.