IT Specialist (INFOSEC)

Major duties include but not limited to:

• Analyze technical and intelligence information to provide cyber threat indicators/indications warnings and trends.
• Synthesize and place intelligence information into context; draws insights about the possible implications.
• Conduct all-source research to determine adversary capability and intent.
• Prepare assessments and cyber threat profiles of current events based on collection and research using classified and open source information sources and understanding of the attackers motivation language organization and social behaviors thereby helping organizations become more proactive in their security posture and defense.
• Perform all-source intelligence analyses of cyber activities to identify attributes of interest (their tactics techniques and procedures motives and capabilities).
• Perform post-event analysis and produce technical intelligence reports for users senior officials and other customers and as representative cases.
• Support all aspects of the intelligence lifecycle (e.g. plan collect evaluate assess report).
• Brief threat and/or target current situations
• Identify threat vulnerabilities
• Identify threat tactics and methodologies
• Identify and evaluate threat critical capabilities requirements and vulnerabilities
• Monitor and report changes in threat dispositions activities tactics capabilities objectives etc. as related to designated cyber operations warning problem sets
• Produce timely fused all-source cyber operations intelligence and/or indications and warnings intelligence products (e.g. threat assessments briefings intelligence studies country studies)
• Performs other duties as assigned.

Work Schedule: Monday thru Friday 8:00am to 4:30pm
Compressed/Flexible: Compressed/flexible schedule available at the managers discretion
Telework: This position may be authorized for telework.
Virtual: This is not a virtual position.
Position Description/PD#: IT Specialist (INFOSEC)/PD17363A
Relocation/Recruitment Incentives: Not Authorized
Permanent Change of Station (PCS): Not Authorized

• You must be a U.S. Citizen to apply for this job
• To be considered for this position you must complete all required steps in the process. In addition to the application and questionnaire this position requires an online assessment. The online assessment measures critical general competencies required to perform the job.
• You may be required to serve a probationary period
• Subject to background/security investigation
• Selected applicants will be required to complete an online onboarding process. Acceptable form(s) of identification will be required to complete pre-employment requirements ( Effective May 7 2025 drivers licenses or state-issued dentification cards that are not REAL ID compliant cannot be utilized as an acceptable form of identification for employment.

As a condition of employment for accepting this position you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public determining if your employment advances the public interest we may consider:

• your performance and conduct;
• the needs and interests of the agency;
• whether your continued employment would advance organizational goals of the agency or the Government; and
• whether your continued employment would advance the efficiency of the Federal service.

Upon completion of your probationary period your employment will be terminated unless you receive certification in writing that your continued employment advances the public interest.

To qualify for this position applicants must meet all requirements by the closing date of this announcement 07/29/2026.

Applicants must have IT-related experience demonstrating each of the four competencies listed below at a proficiency level equivalent to the next lower grade level in federal service

You must meet both the Basic Requirement and the Specialized Experience to qualify for this series as described below.

1. Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
2. Customer Service - Works with clients and customers (that is any individuals who use or receive the services or products that your work unit produces including the general public individuals who work in the agency other agencies or organizations outside the Government) to assess their needs provide information or assistance resolve their problems or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication - Expresses information (for example ideas or facts) to individuals or groups effectively taking into account the audience and nature of the information (for example technical sensitive controversial); makes clear and convincing oral presentations; listens to others attends to nonverbal cues and responds appropriately.
4. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives and to make recommendations.

AND

• Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade GS-13 in the normal line of progression for the occupation in the organization: Extensive practical and applied experience producing and orating accurate founded and useful written cyber intelligence assessments threat reports or briefings for senior leadership or operational stakeholders; Extensive practical and applied experience identifying and isolating indicators of compromise (IOCs) at an enterprise level; Experience monitoring cyber threat conditions using defense tools such as intrusion detection systems (IDS)firewalls threat intelligence platforms and feeds or network traffic logs to identify risks to enterprise systems focusing on known indicators of compromise (IOCs).

AND-

Selective Placement Factor:

• Extensive practical and applied experience identifying and analyzing credible cyber threat intelligence from multiple sources both automated and manual (e.g. open source classified technical feeds - ALL-SOURCE) to correctly identify threat actor tactics techniques and procedures (TTPs) motives and capabilities.

For more information on these qualification standards please visit the United States Office of Personnel Managements website at

Education

There is no educational substitution at this grade level.

Required Experience:

IC