Information Technology Cybersecurity Specialist (Security / Systems Analysis) Job

Vacancy No. DAKB-26-13020933-CES Department U.S. Army Cyber Command
Salary $63,797.00 to $156,753.00 Grade 7 to 12
Perm/Temp Permanent FT/PT Full-time
Open Date 7/26/2026 Close Date 8/5/2026
Job Link Apply Online Who may apply Public
Locations:
Fort Gordon, GAFort Meade, MD


Information Technology Cybersecurity Specialist (Security / Systems Analysis)

Department of the Army
U.S. Army Cyber Command
U.S. Army Cyber Protection Brigade

Summary

About the Position: This position is a DOD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 USC 1599f. Employees occupying CES positions are in the Excepted Service and must adhere to U.S. Code, Title 10, as well as Department of Defense Instruction 1400.25. This position is located at the U.S. Army Cyber Protection Brigade at Fort Meade, MD and Fort Gordon, GA.

This job is open to

The public

U.S. Citizens, Nationals or those who owe allegiance to the U.S.

Clarification from the agency

See "Who May Apply" in the "Qualifications" section for more information on who is eligible to apply for this position.

Duties

  • Enable cybersecurity operations by serving as a Host Analyst on a U.S. Army Cyber Protection Team, utilizing knowledge of Operating Systems security monitoring.
  • Monitor physical and logical devices, including hosts, servers, virtual machines, and Intrusion Detection System (IDS) and Intrusion Prevention System (IPS), by applying knowledge of multiple operating systems.
  • Provide written and oral reports to leadership and stakeholders, detailing recommendations for security hardening and clearing best practices.
  • Develop countermeasures and threat/vulnerability analyses for Army and partner systems to enhance security posture.
  • Hunt for adversary presence on assigned host infrastructure to identify and mitigate active threats.

Requirements

Conditions of employment

  • Appointment may be subject to a suitability or fitness determination, as determined by a completed background investigation.
  • This position is designated Tier 5, Special Sensitive, High Risk and the incumbent is required to obtain and maintain a Top Secret Security Clearance Level with Sensitive Compartmented Information (SCI) access.
  • May be required to successfully complete an initial and periodic Counter Intelligence-scope Polygraph (CI Poly) examination with No Deception Indicated (NDI).
  • Incumbent may be assigned to work in a National Security Agency (NSA) facility and must be able to obtain and maintain access to NSA facilities and networks.
  • Incumbent must successfully pass urinalysis screening for illegal drug use prior to appointment and periodically thereafter according to Army Regulation 600-85, Alcohol and Drug Abuse Prevention and Control Program.
  • Duties of this position may entail alternative work schedules (AWS) such as variable or MAXIFLEX, including extended shifts; 24/7 rotating shifts, nights, weekends, and/or holidays as required.
  • Incumbent may be subject to recall for urgent situations and/or working extended overtime in response to surge situations.
  • Temporary duty travel (TDY) may be required up to 30% annually and be within the Contiguous United States (CONUS) or Outside the Contiguous United States (OCONUS).
  • Incumbent is subject to extended TDY during crisis situations to perform mission essential functions as determined by management, which may include deployment, immunizations, passport, and related requirements.
  • Temporary duty travel may occur at austere or hazardous locations mission dependent.
  • Incumbent may be required to carry a cellular telephone/Portable Electronic Device (PED) and maintain a working personal telephone at all times.
  • Position is subject to situational or ad hoc telework. Telework agreement required.
  • This position has been designated mission essential.
  • Incumbent may be required to remain on duty or report for duty during severe weather or other installation closings.
  • Incumbent may be required to work overtime and other than normal duty hours which may include evenings, weekends, and/or holidays. Call back and emergency duty are regular requirements of this position.
  • Incumbent must obtain and maintain the Cyberspace Workforce Qualifications requirements in accordance with DoDM 8140.03 and supplemental Army guidance.
  • Appointment to this position is subject to a three year probationary period unless the appointee has previously met the requirements as described in DoDI 1400.25 V3005, Cyber Excepted Service, Employment and Placement.
  • This is a DoD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 USC 1599f. Appointment to this position does not confer competitive status.
  • See Additional Information Section for additional conditions of employment.

Qualifications

CYBER EXCEPTED SERVICE POSITIONS ARE NOT SUBJECT TO THE TWO-PAGE RESUME LIMIT. YOUR FULL RESUME WILL NEED TO BE UPLOADED TO YOUR USAJOBS PROFILE USING THE DOCUMENT TYPE "OTHER DOCUMENTS".

Who May Apply: U.S. Citizens


Army CES positions apply Veteran's Preference to preference eligible candidates, as defined by Section 2108 of Title 5 U.S.C., in accordance with the procedures provided in DoD Instruction 1400.25, Volume 3005, "CES Employment and Placement". If you are a veteran claiming veterans' preference, as defined by Section 2108 of Title 5 U.S.C., you must submit documents verifying your eligibility with your application package.

GG-11 / GG-12: This position is in the Professional Work Category at the Full Performance Work Level within the CES Occupational Structure.

GG-07 / GG-09: This position is in the Professional Work Category at the Entry/Developmental Work Level within the CES Occupational Structure.

In order to qualify, you must meet the education and/or experience requirements described below. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). You will receive credit for all qualifying experience, including volunteer experience. Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application. Additional information about transcripts is in this document.


To qualify based on your experience, your resume must describe one-year of specialized experience that demonstrates the possession of knowledge, skills, abilities, and competencies necessary for immediate success in the position. Such experience is typically in or directly related to the work of the position to be filled. Specialized experience would be demonstrated by

GG-07: Participating in operating system security to establish security baselines; reviewing operating systems to identify trends, anomalies, or potential malicious cyberspace activities; and contributing to the incident response process, such as supporting threat mitigation or the development of countermeasures.

GG-09: Implementing approved security patches or system configuration updates to comply with cybersecurity policies and regulations; analyzing technical information collected from customers to diagnose the root cause of service disruptions; and restoring disrupted network or system services by executing established technical recovery procedures.

GG-11: Detecting anomalies or suspicious activities within host data to identify potential security compromises; monitoring enterprise security tools or alert dashboards to recognize indicators of potential system intrusions; and mitigating potential threats or system vulnerabilities by independently maintaining tools with the latest approved security releases.

GG-12: Managing hardware and software-based Operating System (OS) environments, such as Microsoft Windows or Linux, through installation, configuration, maintenance, or security testing to ensure system stability and compliance with cybersecurity standards; analyzing network and host data from various security devices to recognize anomalous behaviors or adversary artifacts; determining the stage of a cyber intrusion by using network and host artifacts to place a potential adversary within the cyber kill chain; and creating detailed threat reports or technical briefings for leadership based on the analysis of security data.

The specialized experience must include, or be supplemented by, information technology related experience (paid or unpaid experience and/or completion of specific, intensive training, as appropriate) which demonstrates each of the four competencies, as defined:

(1) Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Examples of IT-related experience demonstrating this competency include: completing thorough and accurate work independently, even in the most difficult or stressful situations; occasionally reviewing work completed by others.

(2) Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Examples of IT-related experience demonstrating this competency include: resolving routine and non-routine problems, questions, or complaints; developing and maintaining strong, mutually supportive working relationships with customers; conducting evaluation of support to determine quality of services and customer satisfaction, and recommending procedural changes based on customer need or changes in policy and/or regulation.

(3) Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Examples of IT-related experience demonstrating this competency include: convincingly conveying complex information to customers; presenting thoughts that are well-organized and demonstrating confidence in the facts and ideas; adjusting style when working with individuals with different levels of understanding; using various methods to explain and convey information.

(4) Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Examples of IT-related experience demonstrating this competency include: solving complex or sensitive problems by developing and proposing strategic alternatives; identifying possible conflicts and shared benefits; helping team anticipate problems and identifying and evaluating potential sources of information; providing feedback and coaching to others to help solve problems; engaging appropriate stakeholders when developing solutions in order to understand and incorporate multiple perspectives and needs; evaluating the effectiveness of decisions and adjusting future decisions as appropriate.

Education

GG-07
Substitution of Education for Experience:
One full year of graduate level education from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, graduate level education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

OR

Superior Academic Achievement: Successful completion of all the requirements for a bachelor's degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, bachelor's degree from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks. Superior Academic Achievement is based on: (1) Class Standing - You must be in the upper third of the graduating class in the college, university, or major subdivision, such as the College of Liberal Arts or the School of Business Administration, based on completed courses; OR (2) Grade-Point Average (G.P.A.) - You must have a grade-point average of either (a) 3.0 or higher out of a possible 4.0 ("B" or better) as recorded on your official transcript, or as computed based on 4 years of education, or as computed based on courses completed during the final 2 years of the curriculum; or (b) 3.5 or higher out of a possible 4.0 ("B+" or better) based on the average of the required courses completed in the major field or the required courses in the major field completed during the final 2 years of the curriculum.; OR (3) Honor Society Membership - You may be considered eligible based on membership in one of the approved national scholastic honor societies listed by the Association of College Honor Societies (https://www.achshonor.org/).

GG-09
Substitution of Education for Experience: Master's or equivalent graduate degree or 2 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, two full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GG-11
Substitution of Education for Experience: Ph.D. or equivalent doctoral degree or 3 full years of progressively higher level graduate education leading to such a degree from an accredited or pre-accredited institution in computer science, engineering, information science, information systems management, mathematics, operations research, statistics, or technology management; or, three full years of graduate education from an accredited or pre-accredited institution that provided a minimum of 24 semester hours in one or more of the fields identified above and required the development or adaptation of applications, systems, or networks.

GG-12
You must meet the qualification requirement using experience alone--no substitution of education for experience is permitted.

FOREIGN EDUCATION: If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in an accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. For further information, visit: https://sites.ed.gov/international/recognition-of-foreign-qualifications.

Additional information

  • If you are a current federal career/career-conditional employee, you will be placed on an excepted appointment.
  • Male applicants born after December 31, 1959, must complete a Pre-Employment Certification Statement for Selective Service Registration.
  • You will be required to provide proof of U.S. Citizenship.
  • This position requires a 3 year probationary period during which the agency evaluates your fitness and whether your continued employment advances the public interest. In making this determination, the agency may consider your performance and conduct; agency needs and interests; whether your continued employment supports organizational or Government goals; and whether it promotes the efficiency of the Federal service. Continued employment requires written certification that it advances the public interest.
  • Direct Deposit of Pay is required.
  • Must be able to obtain and maintain a Top Secret security clearance with with Sensitive Compartmented Information (SCI).
  • Incumbent (or Selectee) is required to satisfactorily complete the appropriate training and obtain the required certification/recertification for this position as outlined in DoDM 8140.03 Cyberspace Workforce Qualification and Management Program dated 15 February 2023.
  • Selection is subject to restrictions resulting from Department of Defense referral system for displaced employees.
  • If you have retired from federal service and you are interested in employment as a reemployed annuitant, see the information in the Reemployed Annuitant information sheet.
  • This is a Digital Technology Career Field position.
  • Multiple positions may be filled from this announcement.
  • Salary includes applicable locality pay or Local Market Supplement.
  • When you perform a Civilian Permanent Change of Station (PCS) with the government, the Internal Revenue Service (IRS) considers the majority of your entitlements to be taxable. Visit https://www.dfas.mil/civilianemployees/civrelo/Civilian-Moving-Expenses-Tax-Deduction/ for more information.
  • Permanent Change of Station (PCS) allowances may be authorized, subject to the provisions of the Joint Travel Regulations and an agency determination that a PCS move is in the Government Interest.
  • Relocation incentive may be authorized.
  • Recruitment incentive may be authorized.
  • In accordance with DoDM 8140.03 and supplemental Army guidance, the employee must obtain and maintain the following requirements for each Cyber work role (except Data, AI, and/or Software Engineering) at the assigned proficiency level: 1) Foundational qualification requirements within 9 months, 2) Resident qualification requirements within 12 months, 3) 20 hours of Continuous Professional Development (CPD) per work role code (which can overlap).
  • Employee is required to successfully complete all applicable preparation courses (i.e. Cyber Core Prep (CCP)), USCYBERCOM Cyber Mission Forces (CMF) Training Pipeline and comply with the CMF training certification policy to obtain and maintain Army Job Qualification Record (JQR) Validation and Certification.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Once the announcement has closed, a review of your application package (resume, supporting documents, and responses to the questionnaire) will be used to determine whether you meet the qualification requirements listed on this announcement. Please follow all instructions carefully when applying, errors or omissions may affect your eligibility.

If, after reviewing your resume and/or supporting documentation, a determination is made that you have inflated your qualifications and/or experience, you may lose consideration for this position.

Required Documents

WARNING: DO NOT INCLUDE CLASSIFIED INFORMATION IN YOUR APPLICATION PACKET! Application packages that contain Classified information WILL NOT receive consideration for this position. Should you submit a resume or any other document as part of your application package and it is confirmed that any of the information is Classified, in addition to being found ineligible for consideration for this position, your Security Office will be notified to determine if any further action is warranted.

The documents you are required to submit vary based on the authority you are using to apply (i.e., applying as a veteran, applying as a current permanent Federal employee, applying as a reinstatement, etc). Please review the following links to see which documents you need to provide to prove your eligibility to apply: Applicant Checklist for Internal/Merit Promotion Announcements.

As described above, your complete application includes your resume, your responses to the online questionnaire, and documents which prove your eligibility to apply. If you fail to provide these documents, you will be marked as having an incomplete application package and you will not be considered any further.

1. Your resume:

  • Cyber Excepted Service positions are not subject to the two-page resume limit. Your full resume will need to be uploaded to your USAJOBS profile using the document type 'Other Documents'.
  • Your resume may be submitted in any format and must support the specialized experience described in this announcement.
  • For each relevant work experience, make sure you include the employer's name, job title, start and end dates (include month and year), for qualifications purposes, the number of hours worked per week, and a brief description that show you can perform the tasks at the required level listed in the job announcement. If your resume does not contain this information, your application may be marked as incomplete, and you may not receive consideration for this position.
  • Use plain language. Avoid using acronyms and terms that are not easily understood. The hiring agency will not make assumptions about what's in your resume.
  • If your resume includes a photograph or other inappropriate material or content, it will not be used to make eligibility and qualification determinations, and you may not be considered for this vacancy.
  • For additional information, to include formatting tips, see: What to include in your resume.

2. Other supporting documents:
  • Cover Letter, optional
  • Most recent Performance Appraisal, if applicable
  • Proof of Eligibility to Apply: Your application must include the documents which prove you are eligible to apply for the vacancy. The Proof of Eligibility document describes authorities commonly used in merit promotion recruitment and what document(s) are required to prove you meet the requirements of the authority. You must meet the requirements of at least one of the authorities listed in the Who May Apply section above to receive further consideration.
  • This position has an individual occupational requirement and/or allows for substitution of education for experience. If you meet this requirement based on education you MUST submit a copy of your transcript with your application package or you will be rated ineligible. See: Transcripts and Licenses

NOTE: Documents submitted as part of the application package, to include supplemental documents, may be shared beyond the Human Resources Office. Some supplemental documents such as military orders and marriage certificates may contain personal information for someone other than you. You may sanitize these documents to remove another person's personal information before you submit your application. You may be asked to provide an un-sanitized version of the documents if you are selected to confirm your eligibility.

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education.

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.

How to Apply

To apply for this position, you must complete the online questionnaire and submit the documentation specified in the Required Documents section above.

The complete application package must be submitted by 11:59 PM (EST) on 08/05/2026 to receive consideration.

  • To begin, click Apply to access the online application. You will need to be logged into your USAJOBS account to apply. If you do not have a USAJOBS account, you will need to create one before beginning the application (https://apply.usastaffing.gov/ViewQuestionnaire/13020933).
  • Follow the prompts to select your resume and/or other supporting documents to be included with your application package. As a reminder, your resume must be two pages or less and must support the specialized experience described in this announcement. Resumes exceeding two pages will be removed from consideration. For additional information, refer to the 'Required Documents' section.
  • You will have the opportunity to upload additional documents to include in your application before it is submitted. Your uploaded documents may take several hours to clear the virus scan process.
  • After acknowledging you have reviewed your application package, complete the Include Personal Information section as you deem appropriate and click to continue with the application process.
  • You will be taken to the online application which you must complete in order to apply for the position. Complete the online application, verify the required documentation is included with your application package, and submit the application. Your resume selected in USAJOBS will be included, but you must re-select other documents from your USAJOBS account or your application may be incomplete.
  • It is your responsibility to verify that your application package (resume, supporting documents, and responses to the questionnaire) is complete, accurate, and submitted by the closing date. Uploaded documents may take up to one hour to clear the virus scan.
  • Additional information on how to complete the online application process and submit your online application may be found on the USA Staffing Applicant Resource Center.
To verify the status of your application, log into your USAJOBS account (https://www.usajobs.gov/applicant/profile/dashboard/), all of your applications will appear on the Welcome screen. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: https://help.usajobs.gov/how-to/application/status.

Agency contact information

Army Applicant Help Desk
Website
https://portal.chra.army.mil/hr_public?id=app_inq
Address
KB-W0FKAA US ARMY CYBER PROTECTION BDE
DO NOT MAIL
Fort Gordon, GA 30905
US

Next steps

If you provided an email address, you will receive an email message acknowledging receipt of your application. Your application package will be used to determine your eligibility, qualifications, and quality ranking for this position. If you are determined to be ineligible or not qualified, your application will receive no further consideration.

U.S. Army Cyber Command

Civilian employees serve a vital role in supporting the Army mission. They provide the skills that are not readily available in the military, but crucial to support military operations. The Army integrates the talents and skills of its military and civilian members to form a Total Army.

The U.S. Army Cyber Protection Brigade (CPB) -- the "Hunter" brigade -- hunts advanced adversaries to enable information advantage in multi-domain operations.

Agency contact information

Army Applicant Help Desk
Website
https://portal.chra.army.mil/hr_public?id=app_inq
Address
KB-W0FKAA US ARMY CYBER PROTECTION BDE
DO NOT MAIL
Fort Gordon, GA 30905
US

Visit our careers page

Learn more about what it's like to work at U.S. Army Cyber Command, what the agency does, and about the types of careers this agency offers.

https://www.arcyber.army.mil/