Summary See QUALIFICATIONS for information about this position.
Supports the day-to-day functionality and protection of Social Security Administration information technology systems by developing and implementing cybersecurity programs, policies, procedures and digital tools.
See DUTIES for responsibilities.
Duties Ensure the security and integrity of systems, networks and data. | Test and deploy cybersecurity capabilities and software solutions, ensuring their effectiveness in threat detection, incident response, data protection and compliance. | Apply the Risk Management Framework (RMF) to identify, assess and mitigate risks to the confidentiality, integrity and availability of SSA data and systems. | Work with stakeholders to develop and implement risk mitigation strategies in accordance with federal standards. | Perform risk analysis, access management, security application development and testing, audit support, technology research and implementation. | Consult with customers and stakeholders to evaluate functional requirements, translate them into technical solutions and deliver actionable results to support the agencyâs cybersecurity mission. | Communicate the agencyâs cybersecurity program, policies and initiatives to internal and external stakeholders, ensuring awareness and understanding of security requirements and best practices.
Qualifications
To meet Minimum Qualifications for this IT Cybersecurity Specialist position you must demonstrate (1) the IT Competencies for the federal 2210 series AND (2) Specialized Experience (or optional education). Your resume must describe your IT-related experience to demonstrate these qualifications. Consideration will be given to paid or unpaid work, as well as relevant assignments or tasks completed as part of your education or training. Your resume must clearly describe the duties you perform(ed) that provide experience in these areas..
IT Competencies relevant to this position:
.Attention to Detail: Is thorough when performing work and conscientious about attending to detail.
Customer Service: Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
Decision Making: Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change.
Information Management: Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems.
Interpersonal Skills: Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations.
Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
Problem Solving: Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
Teamwork: Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals.
Technical Competence: Uses knowledge that is acquired through formal training or on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.
***********************************************
SPECIALIZED EXPERIENCE for GS-09 must have been gained in a federal position at or above GS-07 OR (if your experience is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-07. Credit will be given for relevant work or assignments / tasks performed as part of your education or training. Your resume must clearly identify the duties and responsibilities for each position held.
Specialized Experience is work that involves following established procedures to support the planning, development, implementation of and/or maintenance of information security programs or policies.
If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it.
Reviewers cannot assume you perform duties you don't describe.
Your experience should include:
Participating in the development of IT security policies and procedures.
Participating with risks assessments and helping develop disaster recovery or contingency plans.
Participating with collecting, analyzing, and documenting security-related information and recommendations
Participating with explaining technical security information and recommendations to different audiences.
In lieu of specialized experience, you can meet requirements with a master's degree or at least 2 full academic years of progressively higher graduate-level education leading to a master's (or equivalent) degree. (See EDUCATION)
***********************************************
SPECIALIZED EXPERIENCE for GS-11 must have been gained in a federal position at or above GS-09 OR (if your experience is on another federal pay scale OR outside of federal service) by performing duties at a level of responsibility and difficulty equivalent to GS-09. Credit will be given for relevant unpaid and/or part-time work. Your resume must clearly identify the duties and responsibilities for each position held.
Specialized Experience is work that involves assisting with supporting the planning, development, implementation of and/or maintenance of information security programs or policies.
If you have this experience, your resume must describe, in your own words, the specific duties you perform that demonstrate it.
Reviewers cannot assume you perform duties you don't describe.
Your experience should include:
Assisting with the development of IT security policies and procedures.
Assisting with risks assessments and helping develop disaster recovery or contingency plans.
Assisting with collecting, analyzing, and documenting security-related information and recommendations
Assisting with explaining technical security information and recommendations to different audiences.
In lieu of specialized experience, you can meet requirements with a Ph.D. or at least 3 full academic years of progressively higher graduate-level education leading to a Ph.D.(or equivalent degree). (See EDUCATION)
MINIMUM QUALIFICATIONS (Specialized Experience or optional education and IT Competencies) must be met by the closing date of this announcement.
Selectees must have (or be able to obtain) and maintain a Top Secret Security Clearance (TS-SCI).
NOTES ABOUT THIS CAREER-LADDER POSITION
This is a mid-level position leading to the GS-12 full performance level.
Assignments are developmental in nature and designed to provide experience and technical competence in the methods, procedures, principles and techniques of the full performance level.
The supervisor defines objectives, priorities and deadlines, is available for consultation and assists with unusual situations, problems or studies that do not have clear precedents.
Employees consult with higher graded analysts to identify problems and methods of approach, but are expected to perform standard, routine duties independently.
The supervisor evaluates reports and other completed work for technical soundness, appropriateness of conclusions or recommendations, consistency and relevance.
During this period of training, management broadens assignments to enable the incumbent to eventually perform all the duties of the next higher grade.
Consideration for promotion is at the discretion of management and is based on the existence of higher-level work your ability to perform that work, administrative requirements and current agency and/or organizational restrictions.
Information on this job series can be found at https://www.opm.gov/policy-data-oversight/classification-qualifications/competency-based-policy/general-schedule/2200/2210-competency-based-policy/competency-based-qualification-standard/ Education This position does not have an educational requirement but specific education can be used in lieu of Specialized Experience.
DO NOT SUBMIT A DIPLOMA IN LIEU OF A FULL TRANSCRIPT THAT SHOWS THE REQUIRED INFORMATION.
TRANSCRIPTS TO SUPPORT EDUCATION IN LIEU OF SPECIALIZED EXPERIENCE: To support education in lieu of Specialized Experience, your transcript must show your name, the name of the school, the program in which you were enrolled and the date your degree was conferred. Transcripts without a confer date cannot be considered to have resulted in a degree and may not be usable to demonstrate your "in lieu of Specialized Experience qualifications."
FOR GS-09: If you claim a master's degree in lieu of Specialized Experience submit your full transcript showing your name, the name of the school, the program in which you were enrolled and the date your degree was conferred. Transcripts without a confer date cannot be considered to have resulted in a degree and may not be usable to demonstrate your "in lieu of Specialized Experience qualifications."
Your degree must be from an accredited institution in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) or include at least 24 semester hours of coursework in those areas.
If you claim a bachelor's degree followed by 2 academic years of progressively higher-level graduate education leading to a master's degree in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) submit the full transcript for your bachelor's degree as well as the transcript that supports your 2 academic years of progressively higher-level graduate education leading to a master's degree.
FOR GS-11: If you claim a Ph.D. in lieu of Specialized Experience submit your full transcript showing your name, the name of the school, the program in which you were enrolled and the date your degree was conferred. Transcripts without a confer date cannot be considered to have resulted in a degree and may not be usable to demonstrate your "in lieu of Specialized Experience qualifications."
Your degree must be from an accredited institution in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) or include at least 24 semester hours of coursework in those areas.
If you claim 3 academic years of progressively higher-level graduate education leading to a Ph.D. in a relevant technology field (such as cybersecurity, computer science, information systems management, engineering, mathematics or operations research) submit the full transcript for your bachelor's degree as well as the transcript that supports your 3 academic years of progressively higher-level graduate education leading to a master's degree.
Unofficial transcripts or screenshots of electronic/web transcripts with the required information will be accepted at the time of application. CHECK YOUR UNOFFICIAL TRANSCRIPT TO CONFIRM IT SHOWS THE REQUIRED INFORMATION. You must upload your transcripts as part of your application. Documents will not be accepted via email or regular mail.
Foreign Education: Education completed in colleges or universities outside the United States may be used to meet the education requirement, but you must also provide documentation that the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in a conventional/accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university.
NOTE: It is your responsibility to acquire and provide Certification of US equivalency as part of your application. For a list of Credential Evaluation Services see: Credential Evaluation Services.
If selected, you will be required to provide your official college transcripts prior to the effective date of your appointment.
How you will be evaluated (1) Eligible applicants will receive a score based on your responses to the experience questions in the online questionnaire.
Preview questions here:https://apply.usastaffing.gov/ViewQuestionnaire/13104378
(2) Using that score, you will be placed into one of three Category Rating groups.
Best Qualified: candidates who demonstrate a high level of knowledge, skills and abilities
Well Qualified: candidates who demonstrate a satisfactory level of knowledge, skills and abilities
Qualified: candidates who demonstrate a minimum level of knowledge, skills and abilities.
Veterans' Preference is considered during this part of the evaluation.
(3) If you are among the highest-ranking applicants based on your score, your resume (and transcript, if applicable) will be reviewed by HR to determine if you demonstrate the Specialized Experience required for this position.
To qualify based on Specialized Experience, your resume must describe duties you perform that meet the specific requirements for this position (see QUALIFICATIONS and REQUIRED DOCUMENTS), as well as duties that demonstrate the following as they relate those requirements. It must be evident that the duties you describe are at the required level. . Duties not clearly described cannot be credited.
-- Knowledge of cybersecurity principles
-- Ability to apply information system security principles
-- Ability to collaborate with stakeholders
-- Ability to communicate security standards
It is not sufficient to make claims in the questionnaire that are not supported in your resume.
Information not specifically stated in your resume cannot be assumed. Information copied or restated from the announcement or rating criteria will not be considered. If this occurs, you may be found ineligible.
Affirmative responses to the eligibility questions and experience in the online questionnaire are subject to verification.
To qualify based on Optional Education, your resume must provide information about your education and you must provide documentation to support that claim (e.g., transcript or certificate, as appropriate). (See QUALIFICATIONS, EDUCATION and REQUIRED DOCUMENTS.)
(4) The highest-ranked applicants who demonstrate the required Specialized Experience will be referred to the hiring manager following Priority Selection procedures and applicable documents will be forwarded for further review. (See Priority Selection below)
Your description of your knowledge, skills and abilities is subject to verification by the selecting official. You may be asked to provide specific examples or documentation or to verify a response by a practical demonstration of your claimed ability.
PRIORITY SELECTION:
Well-Qualified ICTAP/CTAP eligibles will receive the first consideration ONLY IF appropriate supporting documents are provided (see Career Transition AND Required Documents).
Qualified Veterans' Preference eligibles will be placed ahead of others in the category for which they are ranked.
Qualified preference-eligibles who demonstrate a compensable service-connected disability of at least 10 percent will be placed in the Best Qualified category.
See REQUIRED DOCUMENTS for information on how to support these claims. How to apply (1) Click APPLY to create a USAJobs Account or log into your existing account.
(2) Confirm that your USAJobs Biographic Information is correct.
(3) Confirm that your application documents show all information required for this vacancy
(4) Follow prompts to complete the questionnaire and upload required documents.
(5) Click Submit My Answers at the end of the process.
(6) "View/Print My Answers" to confirm you have answered every question as intended
(7) Print a copy of the announcement for your reference if you are called for an interview (optional)
READ "NEXT STEPS" FOR IMPORTANT INFORMATION.
Applications must be received by 11:59 pm (EST) November 6, 2026 must include:
(1) responses to questionnaire
(2) uploaded resume
(3) uploaded transcript or certification, if applicable
(4) uploaded eligibility documents, if applicable (SF-50, DD-214, VA letter, RIF letter, Military Spouse documents)
The questionnaire takes about 15 minutes. Answer all questions and follow instructions. Your score will be based on your responses. Errors or omissions may affect your overall evaluation.
We cannot accept documents submitted via email, fax or standard mail, but you may email inquiries about the position or How to Apply PRIOR TO the closing of the announcement.
Individuals with hearing or speech disabilities may use the listed email or 7-1-1 for TTY-based Telecommunications Relay Services to call the listed phone number. Additional Telecommunications Relay Services options are available in each state: https://www.fcc.gov/general/trs-state-and-territories
Notice Concerning Materially False, Fictitious or Fraudulent Statements -- Anything you claim in the occupational questionnaire, or your resume is subject to verification. By submitting your application, you are certifying that any statements you make are true, complete, and correct to the best of your knowledge and belief and are made in good faith. Materially false, fictitious, or fraudulent statements or representations are subject to disciplinary action.If you experience difficulties while applying, use the links on the USA Jobs website to seek help.
If you're still unable to complete your application, submit a USA Jobs Help Desk ticket to resolve the issue. You must also email HR Staffing - Team Seven@ssa.gov with the SUBJECT LINE: APPLICATION ISSUE 1310 4378 JH" and provide details of the difficulties you're experiencing (with screenshots if applicable). This email must be received before the announcement closes. Technical difficulties reported after the announcement closes cannot be addressed. Other information Additional selections may be made for this vacancy up to six months from the closing date of this announcement.
If you are a male born after December 31, 1959, you must certify that you have registered with the Selective Service System or are exempt under the Selective Service Law. See www.sss.gov .
If you are a federal contractor, do not identify yourself as a federal employee.
See QUALIFICATIONS and EDUCATION for information on qualifying for position.
See REQUIRED DOCUMENTS and HOW YOU WILL BE EVALUATED for information on applying for this position.
This is a non-bargaining unit position.
This is a career-ladder position leading to the GS-12 Full Performance Level (FPL).
This position is not authorized to be filled virtually or through outstationing. One or more vacancies may be filled at any of the listed Official Duty Stations (ODS).
This position is on a full-time, flex-time schedule.
Telework may be approved after all conditions for telework have been met. To participate in telework, when authorized, you must reside within a 2-hour commute to the assigned ODS by the time of your appointment.
Relocation expenses will not be paid; salary will be set in accordance with locality pay provisions. (See Salaries & Wages)
Successful performance of work in this position and adherence to conditions of this position will be assessed during the 1-year probationary period that may be served by new appointees (e.g., new to SSA and/or new to this series).
You must have (or be able to obtain) and maintain a Top-Secret Security Clearance (TS-SCI).
This is a special sensitive position. You may be required to complete Standard Form 86, Questionnaire for Sensitive Positions, to have the appropriate investigation conducted.
Location of position:
Chief of Security and Resiliency (SR) / Cybersecurity