IT Cybersecurity Specialist (CYBERMGT)

Department of Energy Headquarters•Cincinnati, OH

30d

About The Position

This position is part of the Office of Environmental Management - Consolidated Business Center (EMCBC), Department of Energy. The role provides technical leadership and guidance for implementing established IT security requirements across the organization. The EMCBC delivers integrated core business and technical services to support safe, cost-efficient, and timely completion of the Office of Environmental Management’s mission. The specialist serves as a technical authority on cybersecurity matters, oversees risk and vulnerability assessments, advises on federal and DOE cybersecurity regulations, and manages cybersecurity programs and projects in support of agency priorities. The position also evaluates emerging technologies and cyber threats, and represents DOE in committees and working groups. The position requires a valid driver's license, occasional travel, and the ability to obtain and maintain a Q-level security clearance. It is a Testing Designated Position subject to applicant and random drug testing. A financial disclosure report is required within 30 days of entering the position and annually. A one-year probationary period may apply.

Requirements

U.S. citizenship or nationality.
Meet the IT-related education and experience basic requirement, demonstrating attention to detail, customer service, oral communication, and problem solving at the required proficiency level.
At least one year of specialized experience equivalent to GS-13 in the Federal service.
Specialized experience must include at least two of the following: conducting risk and vulnerability assessments of planned and installed information systems; implementing security measures to protect classified or sensitive/controlled unclassified information; applying cybersecurity frameworks such as NIST, FISMA, ISO/IEC 27001, or Zero Trust.
Obtain and maintain a Q-level security clearance.
Valid driver's license.
Submit an OGE-450 financial disclosure report within 30 days of entering the position and annually.
Meet applicable Selective Service registration requirements, if applicable.
Complete a preliminary background check and any required suitability or fitness determination.
Submit to applicant testing and random drug testing thereafter.
Occasional travel is required.
There are no specific education requirements or substitution of education for experience.

Responsibilities

Advise DOE leadership, federal agencies, and external stakeholders on critical cybersecurity issues and strategic solutions.
Oversee risk and vulnerability assessments for planned and operational systems, networks, and hardware, ensuring compliant assessment methodologies and protection of classified and sensitive data.
Evaluate emerging technologies, zero-trust frameworks, and modern cyber threats, and recommend advanced security solutions for DOE infrastructure.
Serve as the Information System Security Manager (ISSM) and advise leadership on implementing federal and DOE cybersecurity regulations, including NIST, OMB, and FISMA requirements.
Manage cybersecurity program project lifecycles to ensure programs support agency mission priorities.
Represent DOE on standing committees and working groups, align strategy, deliver technical briefings, and coordinate cross-functional cybersecurity efforts.