Supervisory IT Specialist (Information Security)

Provides supervisory oversight and guidance to the Cybersecurity Operations Center (CSOC) staff that are responsible for monitoring the security and operational status of the agency's applications and performing a centralized capability to detect and respond to all cyber security incidents and threats involving the organization's systems and networks.

Serves as the supervisor over a team of Cyber Defense Analysts responsible for ensuring the confidentially, integrity, and availability of systems, networks, and data through the detection of cyber security threats and vulnerabilities.

Planning, analysis, development, implementation, and enhancement of information technology security programs, procedures, and tools for the Department. Demonstrate and maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.

Provide subject matter expertise to the development of cyber operations specific indicators. Oversee personnel responsible for the identification, detection, protection of security events to determine impact and implementing corrective actions.

Assure implementation of higher level security requirements such as those resulting from laws, regulations, or Presidential directives. Identify need for changes based on new security technologies or threats.

NICE Code: 752 - Cyber Policy and Strategy Planner: Develops and maintains cybersecurity plans, strategy, and policy to support and align with organizational cybersecurity initiatives and regulatory compliance.

For more information about these work roles, where they fit within the larger Cyber Workforce, and how they can support your unique career journey, please visit the Cyber Career Pathways tool on the National Initiative for Cybersecurity Careers and Studies website: https://niccs.us-cert.gov/workforce-development/cyber-career-pathways Position Description/PD#: Supervisory IT Specialist (Information Security)/PD05451A Relocation/Recruitment Incentives: Not Authorized Permanent Change of Station (PCS): Not Authorized Financial Disclosure Report: Not required Travel Required: Occasional travel may be required as needed for this position.

Work Schedule: Monday - Friday; 7:00AM-3:30PM Compressed/Flexible: As determined by the Agency Policy Virtual: This is not a virtual position. Remote: This is not a remote position.

Telework: This position may be authorized for ADHOC telework Promotion Potential: The position is at Full Performance Level This position is non-bargaining unit eligible.

To qualify for this position, applicants must meet all requirements by the closing date of this announcement, 08/04/2026. You must meet the Minimum Qualification Requirements, Specialized Experience and Selective Placement Factors to qualify for this series as described below.

Minimum Qualifications Requirements: To qualify for this position, you must have information technology-related experience demonstrating all of the four competencies listed below. Ensure that this experience is clearly described in your resume: Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. -AND- Specialized Experience: You must have one year of specialized experience equivalent to at least the next lower grade in the normal line of progression for the occupation in the organization.

Specialized experience is experience that has equipped the applicant with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled.

Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT.

Specialized experience for this position is defined as experience with forensic analysis, including overseeing an established forensics team responsible for an enterprise of over 650,000 endpoints; application of laws, regulations, policies, and ethics related to cybersecurity and privacy; overseeing cybersecurity threats, vulnerabilities, cyber threat hunting, forensics, and analytic development; experience in cybersecurity incident response processes and lifecycle; operational impacts of cybersecurity lapses and skill in administrative planning activities, including preparing support plans, managing correspondence, and coordinating staffing procedures; developing policy, plans, and strategy to ensure compliance with laws, regulations, policies, and standards in support of organizational cybersecurity activities. -AND- Selective Placement Factors: This position includes a skill, knowledge, ability or other worker characteristic basic to, and essential for, satisfactory performance of the job.

Selective Placement Factors are a prerequisite to appointment and represent minimum requirements for a position. Applicants who do not meet it are ineligible for further consideration. Evidence of the Selective Placement Factor must be reflected in your resume.

Selective Placement Factors for this position: A successful candidate must provide clearly documented direct experience conducting threat hunting operations across large-scale enterprise environments, including direct oversight of an established and geographically dispersed threat hunting team; and experience working with and directly overseeing an established cybersecurity defense analytics team.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social).

Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

For more information on these qualification standards, please visit the United States Office of Personnel Management's website at https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/. Note: A full year of work is considered to be 35-40 hours of work per week.

Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment.

It is the policy of the VA to not deny employment to those who have faced financial hardships or periods of unemployment.