Anecdotally, nobody I saw doing cybersecurity work for the government had to wear a suit, unless they had a performance review that day, or had to give a presentation to senior management. It was mostly jeans and t-shirts from what I saw, maybe a polo if they were a junior manager.