Security

CareerStation maintains an information security program designed to protect the confidentiality, integrity, and availability of the information entrusted to it. This page summarizes that program and describes how to report a suspected vulnerability.

CareerStation collects a limited set of information submitted voluntarily through this site. Applications, resumes, and eligibility documentation are submitted through and maintained by USAJOBS, the federal system of record for federal employment, and are not received or retained by CareerStation. Refer to the Privacy notice for further detail.

CareerStation employs administrative, technical, and physical safeguards consistent with recognized federal standards. Connections to this site are encrypted in transit, and stored information is encrypted at rest. Access is limited to authorized personnel with a demonstrated need.

Changes to this site are subject to peer review and automated verification prior to release. Verification includes dependency and vulnerability scanning, static analysis, secret detection, and accessibility testing. Scanning is additionally performed on a recurring schedule.

CareerStation is developed and documented in accordance with applicable federal security standards, including the security and privacy control framework published by the National Institute of Standards and Technology for federal information systems. The system operates on FedRAMP-authorized cloud services, and its control set is fully documented.

To report a suspected security vulnerability, contact MetaPhase. Please do not disclose suspected vulnerabilities publicly. Reports are acknowledged and tracked through resolution.