RMFInsider

Your USAJOBS resume is not screened by a hiring manager. It is read by an HR specialist against a written qualification standard, and since 27 September 2025 it has to do that job in two pages or fewer. OPM’s Merit Hiring Plan capped federal resume length, and the guidance is blunt about the consequence: if the only resume you submit runs past two pages, the applicant is ineligible for further consideration and receives a notice saying the application was not considered because it did not meet the resume page number requirement. That single change invalidated the five page federal resume that career advice had recommended for a decade. The rest of the screen-outs come from two places: required fields left off a job block, and specialized experience that does not visibly match the announcement’s own wording.

The Two Page Rule and What It Really Costs You

The limit applies to competitive and excepted service positions under Title 5. Narrow exceptions exist for roles that take a curriculum vitae, typically medical and research positions, and for agencies outside Title 5 that state otherwise in the announcement. For a GS-2210 cybersecurity announcement, assume two pages and no argument.

The practical cost is that you can no longer list every job you have held with equal weight. Two pages buys you roughly three positions described properly, or four described thinly. Describing four thinly is how qualified people get rated ineligible, because the HR specialist is looking for one year of specialized experience at the next lower grade and cannot find it in three lines of duties. Pick the jobs that carry the specialized experience, describe those in full, and compress everything else into a short earlier experience block with titles and dates only.

The Fields That Have to Appear on Every Job Block

USAJOBS names these explicitly, and a missing one is enough to get a job block disregarded during the rating:

• Employer name.
• Job title. Use the real one, and put a plain-language equivalent in parentheses if your company title is invented.
• Start and end dates, with month and year. Years alone are not sufficient, because the specialist is counting months toward the one year requirement.
• Hours worked per week. This is the field people omit and it is the one that decides whether your experience counts as full time. Part time experience is prorated.
• Series and grade, for federal positions only. Current federal employees who leave this off make the specialist guess at their competitive level.
• A description that shows you performed the work at the level the announcement requires.

Salary and supervisor name are not required. Older federal resume templates still include both and both are eating space you cannot afford at two pages.

Specialized Experience Is the Entire Screen

For GS-2210 at GS-9 and above, qualification runs through two gates. The first is the basic requirement: experience or education demonstrating four IT-related competencies, which OPM names as attention to detail, customer service, oral communication, and problem solving. The second gate is one year of specialized experience equivalent to the next lower grade, defined in the announcement itself.

The second gate is where cybersecurity applicants lose. Announcements write specialized experience in their own vocabulary, and applicants answer in theirs. An announcement asking for experience “applying risk management framework processes to authorize information systems” is asking about work you describe as “prepared eMASS packages.” The specialist rating you may not make that translation, and is not obliged to.

Mirror the announcement, then prove it

Read the specialized experience paragraph and rewrite your top two job blocks using its nouns. If it says authorization package, do not write ATO package. If it says continuous monitoring, do not write ConMon. Then, under each mirrored phrase, put the concrete proof: the system, the tool, the count, the outcome. Mirroring alone reads as keyword stuffing. Mirroring plus a specific accomplishment reads as qualified.

Spell out every acronym once

Write “Enterprise Mission Assurance Support Service (eMASS)” the first time and eMASS afterward. Write “Assured Compliance Assessment Solution (ACAS)” the same way. The HR specialist rating a cybersecurity announcement may be rating an accounting announcement the same afternoon, and unexplained acronyms cost you credit on a rating factor you actually meet. The same discipline pays off in the private sector, and the bullet mechanics in the ISSO resume guide transfer directly.

Get the Series, Grade and Work Role Right

Cybersecurity work in the federal system lives mainly in the 2210 information technology management series, usually announced as IT Cybersecurity Specialist with a parenthetical like INFOSEC. Related work appears in the 0080 security administration series and the 1550 computer science series, and applying to the wrong one wastes an application cycle.

DoD announcements add a second layer: the DoD Cyber Workforce Framework work role, cited by number. Systems Security Analyst is 461, Information Systems Security Manager is 722, Security Control Assessor is 612, and Authorizing Official or Designated Representative is 611. When an announcement names a work role code, DoDM 8140.03 qualification requirements attach to it, and the announcement will list which certifications satisfy the role. Naming the matching work role in your resume is a cheap signal that you understand the framework the job sits inside. Which certifications map to which role is laid out in DoD 8140 for ISSOs, and it is worth confirming before you claim a role you cannot yet qualify for.

Grade matters for a different reason. The 2026 base General Schedule rates put GS-12 step 1 at $76,463 and GS-13 step 1 at $90,925 before locality, and locality in a high-cost area adds a substantial percentage on top. That spread is why applying one grade too low is expensive and applying two grades too high is a wasted submission. If you are weighing the federal route against a cleared contractor role, the tradeoffs in cleared cybersecurity jobs are worth reading, and ISSO vs ISSM vs ISSE will tell you which title the announcement is actually describing before you target a grade.

The Four Short Essay Questions

Competitive service announcements graded at GS-05 and above that are open to the public now include four short essay questions, covering the Constitution, efficiency, executive orders, and work ethic. Each answer is capped at 200 words, and applicants certify that the responses are their own words, written without a consultant or an artificial intelligence tool such as a large language model. OPM’s guidance states that not answering them does not by itself disqualify an application, but leaving four scored-adjacent boxes blank while competing against people who filled them in is a choice with a predictable result. Draft them once, in your own words, and reuse the drafts with light edits per announcement.

A Two Page Structure That Survives the Screen

1. Contact block: name, city and state, phone, email, citizenship, clearance level with investigation date. Four lines, no objective statement.
2. A three line summary written in the announcement’s own vocabulary, naming the series and grade you are targeting.
3. Job block one, the position carrying your specialized experience, described in eight to ten lines with dates, hours per week, and two accomplishments that include numbers.
4. Job block two, same treatment, six to eight lines.
5. Earlier experience: titles, employers, dates and hours per week only. No descriptions.
6. Education and certifications with completion dates, degree and institution, and certification expiration dates.
7. A short skills line naming tools and frameworks: eMASS, ACAS, Nessus, STIGs, NIST SP 800-53, RMF.

Build it in the USAJOBS resume builder if you want the required fields enforced for you, or upload a document if you want control over the layout. The builder output runs long, so if you upload, check the page count in a PDF viewer before you submit rather than trusting a word processor’s estimate.

The federal resume is not a worse version of a private sector resume. It is a different document with a different reader, a hard length cap, and a rating standard you can read in advance. Treat the specialized experience paragraph as the actual job description, mirror its language, prove each mirrored phrase with something specific, and keep every job block carrying the six required fields. If you want help pointing all of that at a particular announcement and grade, that is the kind of thing one-on-one coaching is set up to work through.