IT Specialist (INFOSEC)

Equal Employment Opportunity Commission•Washington, DC

About The Position

The IT Specialist (INFOSEC) serves as an Information Security Officer in the Cybersecurity and Risk Management Division, Office of the Chief Information Officer, at the U.S. Equal Employment Opportunity Commission. The role supports the agency’s information security programs and provides technical and policy expertise to strengthen the agency’s cybersecurity posture. The position advises leadership on federal information security laws, regulations, standards, and emerging requirements; contributes to agency IT security policies and directives; and monitors cybersecurity threats, vulnerabilities, and mitigation efforts. It develops and maintains security authorization documentation, including System Security Plans, Contingency Plans, and Risk Assessments, to support obtaining or maintaining an Authorization to Operate. The role also conducts technology assessments and acquisition support, and provides operational support for incidents, staff inquiries, and service requests. At the GS-14 level, the position requires one year of specialized experience equivalent to GS-13. This includes guiding secure cloud operations; strengthening SOC, SIEM, SOAR, and continuous monitoring; advancing DevSecOps and application security testing; applying expertise in cloud platforms, automation, and cybersecurity frameworks; leading information security initiatives; and overseeing federal security compliance, authorization documentation, vulnerability remediation, controls, and supply-chain risk management. The position has no education qualification requirement. Relevant academic education and industry-recognized certifications are preferred but not required. Relocation expenses will not be paid, and the employee is expected to report to the duty station listed in the announcement. The appointment requires personnel vetting, including a background investigation and enrollment in Continuous Vetting and the FBI’s Rap Back service. A confidential financial disclosure report may be required within 30 days of appointment.

Requirements

IT-related experience demonstrating attention to detail, customer service, oral communication, and problem solving; qualifying experience may be paid or unpaid and may include appropriate intensive training.
For GS-14, one year of specialized experience equivalent to the GS-13 level in federal service.
Experience guiding secure cloud operations and sustainment, mitigating technical threat vectors and APT activity, and implementing remediation.
Experience improving SOC, SIEM, SOAR, and continuous monitoring processes and sustaining hardened security operations.
Experience implementing automated and manual application security testing, including SAST, DAST, IAST, SCA, and container scanning; enforcing secure coding and hardened deployment standards; and monitoring cybersecurity events.
Expertise in major cloud platforms, scripting or automation using Python, Bash, or Golang, and cybersecurity frameworks such as NIST, OWASP, and CIS; hands-on experience with Zero Trust pillars and secure AI practices.
Experience leading major information security initiatives, balancing work across projects and incidents, informing leadership, and facilitating or directing GRC, SOC operations, FedRAMP activities, enterprise guidance, and blue/red/purple team exercises.
Experience interpreting information security laws and FISMA regulations; managing POA&Ms and vulnerability remediation; developing or assessing SSPs, risk assessments, and contingency plans; and evaluating controls, baselines, cybersecurity supply-chain risk, and compliance.
Meet applicable eligibility, time-in-grade, and qualification requirements within 30 days of the vacancy announcement closing date.
U.S. Citizen or National.
Males born after December 31, 1959, must be registered for Selective Service or exempt.
Suitable for federal employment, as determined by a background investigation.
May be required to successfully complete a probationary period.
Successful candidate must undergo personnel vetting, including a background investigation and enrollment in Continuous Vetting and the FBI Rap Back service.

Nice To Haves

A combination of academic education and industry-recognized certifications, such as CISSP, CCSP, and/or SANS certification or higher, is preferred but not required.

Responsibilities

Advise leadership on federal information security laws, regulations, standards, and emerging requirements.
Contribute to development and implementation of agency-level IT security policies and directives.
Monitor and report cybersecurity threats, vulnerabilities, and mitigation efforts; review and update POA&Ms and brief the CISO on risk status.
Develop, review, and maintain security authorization documentation, including SSPs, contingency plans, and risk assessments, to obtain or maintain an ATO.
Conduct technology assessments, trend analyses, feasibility studies, and acquisition support activities, including drafting specifications and reviewing contract deliverables.
Resolve assigned incidents, respond to staff inquiries, track fulfillment requests, coordinate with technical teams, and document activities in agency management tools.
Guide secure cloud operations and sustainment, identify and mitigate threat vectors and APT activity, and implement remediation to reduce attack surface.
Improve SOC, SIEM, SOAR, and continuous monitoring processes; mature operational procedures and sustain a hardened security posture.
Advance DevSecOps through application security testing, secure coding, hardened deployment standards, and cybersecurity event monitoring.
Lead information security initiatives across GRC, SOC operations, FedRAMP activities, role-based enterprise guidance, and adversarial team exercises.
Oversee federal security compliance, vulnerability remediation, authorization documentation, controls, baselines, cybersecurity supply-chain risk management, and compliance evaluations.