The White House’s National Cyber Workforce and Education Strategy points out that the federal cyber workforce has a growing number of retirement-eligible employees and a shortage of women and young cohorts. The strategy thus has sought to fill federal roles in particular by green-lighting the use of skills-based hiring approaches—which may give those who learned cybersecurity skills from a nontraditional pathway, such as via a bootcamp or certification program, a greater chance at landing a top job.

“Cybersecurity is national security, and we need the best talent, and we need to cultivate that talent in order to make sure that our nation has the best and brightest ready to work in this particular area,” Dave Luber, now director of cybersecurity for the National Security Agency, previously told Fortune.

He noted that different federal agencies and military branches must coordinate their efforts to be effective against cyber risks. “It really is a team sport where we’re all working together to make sure that we make it difficult for China and Russia to exploit our critical systems in the U.S. and our allied systems.”

If you’re interested in working in cybersecurity for the federal government, how do you get hired? Fortune spoke with experts to learn how to break into one of these roles.  

What cybersecurity jobs exist within the federal government?

When it comes to federal jobs in cybersecurity, the sky is essentially the limit. From system engineers and software developers to cyber defense forensics analysts and ethical hackers, there is a wide range of jobs to be filled.

Learn more: The highest-paying cybersecurity jobs

“There’s cybersecurity involved in every federal department and agency, and there’s cybersecurity roles both here in the beltway as well as outside of the beltway,” says Nitin Natarajan, deputy director for CISA, which is part of the U.S. Department of Homeland Security. “In order to execute CISA’s cybersecurity mission, it takes a very, very broad swath of experiences and expertise.”

Because federal cybersecurity workers tackle a wide range of tasks, potential recruits with non-cybersecurity backgrounds—such as in communications, legislative affairs, and budget and finance—are still viable candidates. “We want to have a very strong, diverse workforce that brings different experiences to the table,” Natarajan says. “It allows us to tackle the complex challenges that we are facing and will continue to face in the future.”

While some people who work in this field for the federal government have a master’s degree in cybersecurity or a similar discipline like computer science, Luber and Natarajan agree a graduate degree isn’t necessary.

“It’s not required to join the National Security Agency, but certainly a master’s in cybersecurity will help an individual who’s seeking a career” with the agency, Luber said.

He added that many people who work in federal cybersecurity jobs were drawn to these roles out of a sense of duty. “Most of the folks that join the National Security Agency, or the federal government writ large, that are interested in cybersecurity [have] that sense of mission to make sure that our national security systems and our government systems are safe from exploitation,” Luber said.

How can I get hired to work in cybersecurity for the federal government?

Just as the work of cybersecurity professionals in the federal government is varied, so too are the routes for landing a job.

“There’s a lot of different pathways to get here,” Natarajan says. “There is no road map.”

For some people, the entry point is attending a school affiliated with the National Centers of Academic Excellence in Cybersecurity (NCAE-C) program. Managed by the NSA’s National Cryptologic University, the collaborative educational program establishes cybersecurity and academic curriculum standards to reduce vulnerabilities in critical national infrastructure.

There are currently 461 colleges and universities partnered with the NCAE-C program. About a third of the designated programs offer associate degrees and certificates in cyber defense. The others mostly involve bachelor’s and master’s programs, but some programs include Ph.D. candidates, as well. These schools can be certified in three different programs of study: cyber defense, cyber research, and cyber operations.

Obtaining a degree from one of these institutions can be a great way to ensure you are learning the skills needed to succeed at a job in the federal government. 

Not only do federal agencies actively recruit from NCAE-C schools, but the NSA also offers more than 20 summer internships each year in a variety of fields and a Cooperative Education Program in which students work on NSA projects after being cleared to work for the federal government.

“For about 12 weeks they’ll join our team and we’ll give them [a project] that they can really sink their teeth into,” Luber said. “They go away with a better understanding of what a career in the National Security Agency might offer them.”

A large percentage of students who take part in a summer internship with the NSA eventually work for the agency full-time.

Private-sector cybersecurity professionals who are interested in working for the federal government can learn about job postings from websites like usajobs.gov, the federal government’s official employment site, and intelligencecareers.gov, which is the official website for careers within the U.S. Intelligence Community.

According to its website, the U.S. Intelligence Community is looking to hire:

• All-source analysts
• Capabilities defense specialists
• Computer network defense analysts
• Computer network operators
• Information assurance engineers
• Information systems security specialists
• Technical counterintelligence officers

DHS also has a special cyber talent page where candidates can find details about career tracks, salary ranges, and benefits. The department’s Cybersecurity Talent Management System (CTMS) aims to improve the federal government’s recruitment, development, and retention of cybersecurity professionals. Instead of the traditional hiring model of recruiting for specific roles, CTMS screens applicants based on their competencies, offers competitive salaries, and generally reduces the time it takes to be hired.

“It allows us to hire people a little bit differently than the traditional federal process,” Natarajan says. “Folks apply through a customized application pathway depending on what level you come in at.”

What skills are required to work in cybersecurity for the federal government?

Based on the job descriptions for many entry-level cybersecurity roles at agencies like the CIA, NSA, and FBI, individuals should have a combination of skills and knowledge, such as:

• Computer science fundamentals
• Software development best practices 
• Operating systems (including security models, file systems, process management and isolation, inter-process communication, networking, cryptography)
• Programming (C or C++)
• Risk identification and mitigation
• Incident response support
• Cybersecurity tools (SIEMs, IDS/IPS)
• Scripting and querying

Don’t forget that you will also have to pass a very intensive investigation process, which includes a background check, polygraph interview, and physical & psychological examination. Candidates generally need to be U.S. citizens. 

What other resources are available for people who want to work in cybersecurity for the federal government?

If you’re looking to get a degree in cybersecurity but don’t have the funds to pay for it, you may want to apply to the CyberCorps: Scholarship for Service Program (SFS). Through this scholarship program, the federal government pays for a person’s education in exchange for committing to work within the federal government for an equal length of time as their scholarship.

Learn more: Free online cybersecurity courses

The scholarship provides up to three years of support for a bachelor’s, master’s or Ph.D. candidate; academic year stipends for undergraduate students are $25,000 per year and $34,000 for graduate students. Nearly 100 higher learning institutions take part in the SFS program.

“It’s a great time to be working in cybersecurity,” Luber said. “Cybersecurity is national security, and we need the best talent, and we need to cultivate that talent in order to make sure that our nation has the best and brightest ready to work in this particular area.”

The takeaway: Working in federal cybersecurity can be rewarding but not easy

Those working in cybersecurity for the federal government are at the forefront of protecting the country from potentially debilitating cyber attacks that could threaten the economy, national security, or even democracy altogether. Roles are taken very seriously. As a result, the start-to-end hiring process can take many months—or even years to complete. 

The job can, however, be rewarding in many ways. Not only do federal jobs come with many benefits including job security, competitive salaries, and lucrative retirement perks—but you also get the satisfaction of working in public service.

---

Frequently asked questions

Will the government pay me to learn cybersecurity?

Yes, many government cybersecurity roles have upskilling opportunities built in. The CyberCorps program is one to check out. Because cybersecurity is constantly innovating, the need for experts to stay up-to-date with trends is paramount. 

Does the FBI hire cybersecurity?

Yes, the FBI is hiring cybersecurity experts. At the time of this article update, the agency is hiring cybersecurity specialists in Washington, D.C., Alabama, and West Virginia, as well as IT systems administrators at all 55 of its field offices.

How to get the federal government to pay for your cybersecurity degree?

Once you land a job in the federal government, you may be eligible to pursue further education on the government’s dime. There will likely be requirements for you to stay within federal service for a certain number of years following degree completion. In particular, check out the CyberCorps, a program that will provide support for a bachelor’s, master’s, or even PhD.