What are the responsibilities and job description for the INFORMATION TECHNOLOGY SPECIALIST (INFOSEC/SECURITY ENGINEER - LEVEL I, II, III, IV) position at NAVY EXCHANGE SERVICE COMMAND (NEXCOM)?
Must Be a US Citizen
Level I
Job Summary:
Formal training and on-the-job training assignments are made in accordance with an Individual Development Plan (IDP) designed for the incumbent's
current level of technical proficiency, formal education, certification requirements and job experience. Representative assignments include:
Performs other related duties as assigned.
Duration of training: Not less the six months and normally not longer than 12 months, dependent upon successful completion of the work assignments
defined in the IDP and certification requirements; upon completion of training, incumbent may progress noncompetitively to the position of Information
Technology Specialist (InfoSec/Security Engineer - Level II), NF-2210-04 (sc 405, JC# 9063).
Information Assurance Workforce Certifications (IAT2 Jobs):
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual requires incumbents of this position to possess, and maintain current, one of
The Following Certifications:
GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP), Cisco Certified Network Associate - Security (CCNA
Security), or Computing Technology Industry Association Security CE (CompTIA Security CE). NEXCOM preferred certification is: GSEC.
In addition to an IA certification, personnel assigned to IAT positions with privileged access must also obtain an:
IA technical training certificate, or commercial certification for the Operating System (OS)/Computer Environment (CE) or security related tools used
within the NEXCOM environment.
Candidates without the required certifications may be placed into this position, but must obtain the required certifications within 6 months of appointment;
failure to obtain this requirement will result in termination of employment.
This position is designated IT-1 (Critical - Sensitive) in accordance with SECNAV M-5510.30 and will require a favorable Single Scope Background
Investigation (SSBI).
Candidates must be eligible for and obtain a Top Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
Qualified candidates must be U.S. Citizens.
Level I
A four-year bachelor's degree in Computer Science, Information Technology or related field.
OR
3 years of experience performing work that allowed the applicant to gain general knowledge of information technology/computer systems comparable to formal education above the high school level that demonstrated the applicant's potential and ability to learn and succeed in performing the duties of the target position.
OR
Equivalent combination of formal IT education and experience
Information Assurance Workforce Certifications (IAT2 Jobs):
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual requires incumbents of this position to possess, and maintain current, one of the following Certifications:
GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP), Cisco Certified Network Associate - Security (CCNA Security), or Computing Technology Industry Association Security CE (CompTIA Security CE). NEXCOM preferred certification is: GSEC. In addition to an IA certification, personnel assigned to IAT positions with privileged access must also obtain an:
IA technical training certificate, or commercial certification for the Operating System (OS)/Computer Environment (CE) or security related tools used within the NEXCOM environment.
Candidates without the required certifications may be placed into this position, but must obtain the required certifications within 6 months of appointment; failure to obtain this requirement will result in termination of employment.
This position is designated IT-1 (Critical - Sensitive) in accordance with SECNAV M-5510.30 and will require a favorable Single Scope Background Investigation (SSBI).
Candidates must be eligible for and obtain a Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
Requirement for Level II, III, IV
Level II : A total of 5 years of experience, consisting of 3 years General Experience and 2 years Specialized Experience of the following:
Level III : A total of 6 years of experience consisting of 3 years General Experience and 3 years
Specialized Experience Of The Following:
Level IV : A total of 7 years of experience consisting of 3 years General Experience and 4 years Specialized Experience of the following:
GENERAL EXPERIENCE: Experience in administrative, technical or investigative work which demonstrated the ability and aptitudes required to perform technical, managerial or analytical work involving management information systems.
OR
SUBSTITUTION OF EXPERIENCE FOR EDUCATION: One year of related academic study above the high school level may be substituted for 9 months of experience up to a maximum of a 4 year bachelor's degree in software engineering or business information systems for 3 years of general experience.
AND
SPECIALIZED EXPERIENCE: Experience in at least two of the following:
Penetration testing; IT Audit and log analysis; IT security compliance and reporting; Technical risk analysis; PCI Compliance reporting and HBSS Administration; Or one year experience at the next lowest grade level of this position and completion of IDP requirements.
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual Requires Incumbents Of This Position To Possess, And Maintain Current, One Of The Following Certifications:
GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP), Cisco Certified Network Associate - Security (CCNA Security), or Computing Technology Industry Association Security CE (CompTIA Security CE). NEXCOM preferred certification is: GSEC.
In addition to an IA certification, personnel assigned to IAT positions with privileged access must also obtain an:
IA technical training certificate, or commercial certification for the Operating System (OS)/Computer
Environment (CE) or security related tools used within the NEXCOM environment.
Candidates without the required certifications may be placed into this position, but must obtain the required certifications within 6 months of appointment; failure to obtain this requirement will result in termination of employment.
This position is designated IT-1 (Critical - Sensitive) in accordance with SECNAV M-5510.30 and will require a favorable Single Scope Background Investigation (SSBI).
Candidates must be eligible for and obtain a Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
Primary Location
United States-Virginia-Virginia Beach
Organization
NEXCOMHQ
Job
Security
Schedule
Full-Time (35 hours)
Unposting Date
May 1, 2026, 10:59:00 PM
Level I
Job Summary:
Formal training and on-the-job training assignments are made in accordance with an Individual Development Plan (IDP) designed for the incumbent's
current level of technical proficiency, formal education, certification requirements and job experience. Representative assignments include:
- Certification preparation training
- DoD and Retail Compliance Auditing
- Disaster Recovery/Business Continuity Standards
- Information Assurance compliance
- Systems penetration testing
- Attends formal training courses in a classroom setting necessary to achieve InfoSec Engineering proficiency.
- Receives and performs on the job assignments encompassing both problem resolution and analysis related to the InfoSec Engineering challenges and
- Works with experienced InfoSec Engineers and system stakeholders during the training period to gain understanding of functional business processes
Performs other related duties as assigned.
Duration of training: Not less the six months and normally not longer than 12 months, dependent upon successful completion of the work assignments
defined in the IDP and certification requirements; upon completion of training, incumbent may progress noncompetitively to the position of Information
Technology Specialist (InfoSec/Security Engineer - Level II), NF-2210-04 (sc 405, JC# 9063).
Information Assurance Workforce Certifications (IAT2 Jobs):
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual requires incumbents of this position to possess, and maintain current, one of
The Following Certifications:
GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP), Cisco Certified Network Associate - Security (CCNA
Security), or Computing Technology Industry Association Security CE (CompTIA Security CE). NEXCOM preferred certification is: GSEC.
In addition to an IA certification, personnel assigned to IAT positions with privileged access must also obtain an:
IA technical training certificate, or commercial certification for the Operating System (OS)/Computer Environment (CE) or security related tools used
within the NEXCOM environment.
Candidates without the required certifications may be placed into this position, but must obtain the required certifications within 6 months of appointment;
failure to obtain this requirement will result in termination of employment.
This position is designated IT-1 (Critical - Sensitive) in accordance with SECNAV M-5510.30 and will require a favorable Single Scope Background
Investigation (SSBI).
Candidates must be eligible for and obtain a Top Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
Qualified candidates must be U.S. Citizens.
Level I
A four-year bachelor's degree in Computer Science, Information Technology or related field.
OR
3 years of experience performing work that allowed the applicant to gain general knowledge of information technology/computer systems comparable to formal education above the high school level that demonstrated the applicant's potential and ability to learn and succeed in performing the duties of the target position.
OR
Equivalent combination of formal IT education and experience
Information Assurance Workforce Certifications (IAT2 Jobs):
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual requires incumbents of this position to possess, and maintain current, one of the following Certifications:
GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP), Cisco Certified Network Associate - Security (CCNA Security), or Computing Technology Industry Association Security CE (CompTIA Security CE). NEXCOM preferred certification is: GSEC. In addition to an IA certification, personnel assigned to IAT positions with privileged access must also obtain an:
IA technical training certificate, or commercial certification for the Operating System (OS)/Computer Environment (CE) or security related tools used within the NEXCOM environment.
Candidates without the required certifications may be placed into this position, but must obtain the required certifications within 6 months of appointment; failure to obtain this requirement will result in termination of employment.
This position is designated IT-1 (Critical - Sensitive) in accordance with SECNAV M-5510.30 and will require a favorable Single Scope Background Investigation (SSBI).
Candidates must be eligible for and obtain a Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
Requirement for Level II, III, IV
Level II : A total of 5 years of experience, consisting of 3 years General Experience and 2 years Specialized Experience of the following:
Level III : A total of 6 years of experience consisting of 3 years General Experience and 3 years
Specialized Experience Of The Following:
Level IV : A total of 7 years of experience consisting of 3 years General Experience and 4 years Specialized Experience of the following:
GENERAL EXPERIENCE: Experience in administrative, technical or investigative work which demonstrated the ability and aptitudes required to perform technical, managerial or analytical work involving management information systems.
OR
SUBSTITUTION OF EXPERIENCE FOR EDUCATION: One year of related academic study above the high school level may be substituted for 9 months of experience up to a maximum of a 4 year bachelor's degree in software engineering or business information systems for 3 years of general experience.
AND
SPECIALIZED EXPERIENCE: Experience in at least two of the following:
Penetration testing; IT Audit and log analysis; IT security compliance and reporting; Technical risk analysis; PCI Compliance reporting and HBSS Administration; Or one year experience at the next lowest grade level of this position and completion of IDP requirements.
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual Requires Incumbents Of This Position To Possess, And Maintain Current, One Of The Following Certifications:
GIAC Security Essentials Certification (GSEC), Systems Security Certified Practitioner (SSCP), Cisco Certified Network Associate - Security (CCNA Security), or Computing Technology Industry Association Security CE (CompTIA Security CE). NEXCOM preferred certification is: GSEC.
In addition to an IA certification, personnel assigned to IAT positions with privileged access must also obtain an:
IA technical training certificate, or commercial certification for the Operating System (OS)/Computer
Environment (CE) or security related tools used within the NEXCOM environment.
Candidates without the required certifications may be placed into this position, but must obtain the required certifications within 6 months of appointment; failure to obtain this requirement will result in termination of employment.
This position is designated IT-1 (Critical - Sensitive) in accordance with SECNAV M-5510.30 and will require a favorable Single Scope Background Investigation (SSBI).
Candidates must be eligible for and obtain a Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
Primary Location
United States-Virginia-Virginia Beach
Organization
NEXCOMHQ
Job
Security
Schedule
Full-Time (35 hours)
Unposting Date
May 1, 2026, 10:59:00 PM