Logo
National Reconnaissance Office (NRO)

Cybersecurity & Defensive Cyber Analyst

National Reconnaissance Office (NRO), Chantilly, Virginia, United States, 22021

Save Job

We Are The NRO For over sixty years, the NRO has developed, acquired, launched, and operated the satellites that are the foundation for America's advantage and strength in space. Using a diversified architecture of spacecraft, NRO collects and delivers the best space-based intelligence, surveillance, and reconnaissance content on the planet.

Learn more at

nro.gov .

Basic Eligibility For A Position With NRO

U.S. Citizenship

Ability to obtain and maintain a TS/SCI security clearance

Subject to preemployment and periodic drug testing

Subject to preemployment and periodic polygraph examinations

Where You Will Work Do you have experience in cybersecurity, threat analysis, and incident response? Are you passionate about protecting critical intelligence systems from cyber threats? The National Reconnaissance Office (NRO) is looking for you! The NRO Cadre is collecting resumes via a continuous announcement for consideration against current and future opportunities for full performance level (GG 11–13) Cybersecurity & Defensive Cyber Analysts, occupational series 2210.

Who May Apply

The position is open to the public.

Federal government employees must currently be at the grade level or higher indicated in this announcement. This is not a promotion opportunity for current Federal employees; selected employees will transition laterally at their current grade level and step.

Federal applicants exceeding the advertised grade may voluntarily request acceptance at the lower grade in accordance with DoD 1400.25 Volume 2006.

The NRO is only accepting external applicants for this job announcement. Current NRO Cadre employees should apply internally.

This position does not qualify for the appointment of a Reemployed Federal Annuitant in accordance with DoDI 1400.25 Volume 300.

What You Will Be Doing

Analyzing and developing the integration, testing, operations, and maintenance of systems security.

Using data from a variety of cyber defense tools to analyze events for the purpose of mitigating threats.

Investigating, analyzing, and responding to cyber incidents within the network environment.

Developing, creating, maintaining, and coding new or modifying existing computer applications.

Analyzing the security of new or existing computer applications and providing actionable results.

Designing enterprise and systems security throughout the development lifecycle.

Translating technology and environmental conditions into security designs and processes.

Providing expert technical advice on cybersecurity matters.

Developing and interpreting policies and procedures for cyber defense.

Making decisions or recommendations that significantly influence important agency cybersecurity policies.

What You Need (Qualifications)

Highly desired: Bachelor’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET accredited or CAE designated institution.

Minimum of 3 years of specialized experience in systems security analysis, cyber defense, incident response, software development, or security architecture.

Experience with the interrelationships of multiple IT specialties.

Understanding of an organization’s IT architecture.

Knowledge of new IT developments and applications.

Strong knowledge of IT security concepts, standards, and methods.

Experience with project management principles, methods, and practices.

DoD 8140 Work Role Alignment

Systems Security Analyst (461)

Defense Cyber Analyst (511)

Cyber Defense Incident Responder (531)

Software Developer (621)

Secure Software Assessor (622)

Security Architect (652)

DoD 8140 Qualification Requirements Systems Security Analyst (461)

Education: Associate degree or higher from an accredited college or university.

Training: Offerings listed in DoD 8140 Training Repository.

Certification: CCSP, Cloud+, CySA+, or GICSP.

Defense Cyber Analyst (511)

Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET accredited or CAE designated institution.

Training: Intermediate level M03385G; M10395B; M223854 or A1501980 or A1501202 or A1501203 or A1501250 or A5310451 or A5314421 or A5311900 or WSS 011 or DISAUS1377.

Certification: GFACT, GISF, Cloud+, GCED, PenTest+, Security+, or GSEC.

Cyber Defense Incident Responder (531)

Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET accredited or CAE designated institution.

Training: Intermediate-level A1501980 or A1501202 or A1501203 or A1501250 or WSS 011 or WSS 012.

Certification: CBROPS, FITSPO, GISF, CCSP, CEH, Cloud+, GCED, PenTest+, Security+, or GSEC.

Software Developer (621)

Education: Bachelor degree or higher from an accredited college or university.

Training: Offerings listed in DoD 8140 Training Repository.

Certification: GSEC.

Secure Software Assessor (622)

Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET accredited or CAE designated institution.

Certification: CSSLP or Security+ or GSEC.

Security Architect (652)

Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET accredited or CAE designated institution.

Training: Intermediate level WSS 011 or WSS 012.

Certification: CASP+, CCSP, Cloud+, CSSLP, or GSEC.

Other Information

Cyberspace Workforce and Qualification Management Program: In accordance with DoDM8140.03, employees are required to achieve and maintain the appropriate foundational and residential qualification requirements within their associated work role qualification matrix. Foundational qualification requirements must be met within 9 months of assignment. Resident qualification requirements must be met within 12 months of assignment.

Professional Development: In accordance with DoDM8140.03, employees are required to complete 20 hours of continuous professional development or education annually to maintain qualification in their cyber work role.

Financial Management Certification: May be required to obtain the appropriate Financial Management certification level for the position within two years of assignment.

Overtime Statement: May be required to work other than normal duty hours, which may include evenings, weekends, and/or holidays.

Travel Statement: May be required to travel in military or commercial aircraft to perform temporary duty assignments.

Financial Disclosure: May be required to file an OGE Form 450, Confidential Financial Disclosure Report, upon appointment and will be required to file annually.

Defense Acquisition Workforce Improvement Act (DAWIA) coded positions: If selected for a DAWIA coded position, the incumbent must meet appropriate certification requirements IAW the Defense Acquisition Workforce Improvement Act (DAWIA) no later than 36–60 months after accepting this position. DAWIA requirements may be located at the Defense Acquisition University website.

DAWIA Functional Area/Tier Required:

GG 11 - 12: Engineering and Technical Management/Foundational

GG 13: Engineering and Technical Management/Practitioner

Geographic Mobility Agreement: May be subject to directed reassignment as required to address mission effectiveness, and/or career development.

Emergency Essential: Certain positions are deemed emergency essential and incumbents must be willing to meet all position requirements.

Location Washington D.C. area

Salary This position meets the qualifications for Defense Civilian Intelligence Personnel System (DCIPS) Targeted Local Market Supplement (TLMS) STEM pay for NRO Cadre employees and candidates as authorized by the office of the Under Secretary of War for Intelligence and Security’s (OUSW(I&S)). Cadre employees and candidates are eligible to receive STEM pay if they are currently serving in a STEM designated position.

2026 STEM Salary Ranges

GG 11: $105,262 - $136,848

GG 12: $117,753 - $153,082

GG 13: $132,751 - $172,578

This position is a full performance level DCIPS position. The NRO is accepting applications from U.S. Citizens and current Federal Government employees for this position.

Hiring Incentives The NRO may offer hiring incentives and other entitlements at management's discretion.

Trial Period All new DCIPS employees will be required to serve a 2-year trial period.

Veterans' Preference DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Vol 2005, DCIPS Employment and Placement. If you are a veteran claiming veterans' preference, as defined by section 2108 of Title 5 USC, you must submit documents verifying your eligibility upon request.

Equal Employment Opportunity Policy The United States government does not discriminate in employment on the basis of race, color, religion, sex, pregnancy, national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service or other non‑merit factor.

Reasonable Accommodation Policy Federal agencies must provide reasonable accommodation to applicants with disabilities where appropriate. Applicants requiring reasonable accommodation for any part of the application process should follow the instructions in the job opportunity announcement. For any part of the remaining hiring process, applicants should contact the hiring agency directly. Determinations on requests for reasonable accommodation will be made on a case‑by‑case basis.

A reasonable accommodation is any change to a job, the work environment, or the way things are usually done that enables an individual with a disability to apply for a job, perform job duties or receive equal access to job benefits.

Under the Rehabilitation Act of 1973, federal agencies must provide reasonable accommodations when:

An applicant with a disability needs an accommodation to have an equal opportunity to apply for a job.

An employee with a disability needs an accommodation to perform the essential job duties or to gain access to the workplace.

An employee with a disability needs an accommodation to receive equal access to benefits, such as details, training, and office-sponsored events.

You can request a reasonable accommodation at any time during the application or hiring process or while on the job. Requests are considered on a case‑by‑case basis. Please send your request to

hr@nro.gov .

Privacy Act Notice Privacy Act Notice (PL 93579): We use this information to determine qualifications for employment. This is authorized under Title 5 U.S.C. 3302 and 3361.

Read more about the Privacy Act of 1974.

#J-18808-Ljbffr