Cybersecurity Specialist (Cyber Operations & Incident Responder)

Summary

The Cybersecurity Specialist (Cyber Operations & Incident Responder) position is located in the Office of Information and Technology Services (EXIT), U.S. Consumer Product Safety Commission (CPSC). EXIT is responsible for managing and securing the information technology resources for the CPSC. The incumbent is a recognized authority responsible for leading the CPSC cybersecurity program.

Duties

Help

The primary purpose of the position is to assess the impact of forecasted changes in technology and business requirements on the agency's long-range Information Technology (IT) cybersecurity plans and recommend appropriate changes to goals and strategies. The work involves developing, implementing, and ensuring compliance with IT cybersecurity plans and policies; serving as the incident response coordinator for cyber security operations, analyzing cyber events occurring in the agency's network environment; monitoring network activity; analyzing evidence of suspicious behavior; implementing and managing cyber defense tools; conducting assessments of threats and vulnerabilities; testing and implementing new technologies; and determining deviations from acceptable network configurations and policies assessing the level of risk, and recommending appropriate mitigation countermeasures to top-level management.

The Cybersecurity Specialist (Cyber Operations & Incident Responder) serves as a recognized authority in leading and establishing the framework for CPSC Cybersecurity Information Security IT programs. Assesses and anticipates the effects of new emerging technology and develops policies to prevent cybersecurity violations and govern activities. Develops and maintains strategic plans to define current and future cybersecurity requirements and establish metrics to measure and evaluate systems performance. Represents the agency on interagency committees and participates in high- level collaboration, coordination, decision-making meetings, and conferences regarding classified and unclassified cybersecurity programs and projects. Briefs senior agency management on the status of committee activities and decisions made.

The duties of this position include:

• Monitoring agency network activities and cyber incident response activities. Analyzing evidence of suspicious behavior to identify and report events that occur or may occur within the network to protect the information, systems, and networks from threats. Advising top- level management on immediate and long-term measures that must be taken in accordance with the level of risk involved, including exploring new concepts and technologies.
• Analyzing cyber events and the network environment to find trends, patterns, or anomaly correlations that indicate more serious attacks or future threats. Developing new policies, procedures, standards, methods, techniques, and solutions to highly complex technical issues; evaluating the impact of technological change; and recommending proactive measures to contain identified incidents.
• Reviewing data collected from various cyber defense tools (e.g., Intrusion Detection System (IDS) alerts, firewalls, network traffic logs) to analyze events within the operating environment and identify and mitigate threats and deter future security attacks. Responds to security alerts indicating possible cyber events.
• Performing real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support the agency's Cyber Security Incident Response Team (CSIRT).
• Performing malware and system forensic analysis. Capturing and analyzing network traffic associated with malicious activities using network monitoring tools. Correlating incident data and develops cyber defense reports for top-level management review.
• Evaluating and recommending the acquisition of IT security tools. Installing and configuring new hardware, software, and peripheral equipment to support IT security tools in accordance with agency standards.

Requirements

Help

Conditions of employment

Must be a U.S. Citizen.

This is a Public Trust Position. Employment in this position requires a background investigation. If you are selected and cannot meet the criteria requirement for the pre-employment waiver and/or a favorable suitability determination within a reasonable period of time due to disclosed or undisclosed background issues, the employment offer may be withdrawn.

If you are a male born after December 31, 1959, you must certify that you have registered with the Selective Service System or are exempt from having to do so under the Selective Service Law. Please see http://www.sss.gov for more information.

Selectees will be required to complete a "Declaration of Federal Employment", (OF-306), prior to appointment and the appropriate background investigation forms to determine suitability for Federal employment. False statements or responses on these forms can jeopardize your employment opportunity and subject you to disciplinary action, including removal from Federal service.

The selectee will be required to complete a Personal Identity Verification (PIV) process that requires two forms of identification from the I-9 Form. We will compare information provided on the I-9 Form to records available from the U.S. Department of Homeland Security. The system confirms employee's identity and eligibility to work in the United States. Learn more about E-Verify, including your rights and responsibilities.

Depending on your status, this position may require serving a 1-year probationary period.

As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider:

• your performance and conduct;
• the needs and interests of the CPSC;
• whether your continued employment would advance organizational goals of the CPSC or the Government; and
• whether your continued employment would advance the efficiency of the Federal service.

Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.

Qualifications

All applicants must have 52 weeks of specialized experience equivalent to at least the next lower grade level in the Federal Service. Specialized experience is experience that has equipped the candidate with the particular knowledge, skills, and abilities to perform successfully the duties of the position.

Qualifying specialized experience must demonstrate the following:

1) Experience applying cyber security and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data; 2) experience in Azure Cloud security; 3) experience in incident response and handling methodologies; 4) knowledge of NIST Special Publications (e.g., SP 800-53, SP 800-37, etc.); 5) experience in vulnerability identification, scanning, management and remediation; and 6) ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.

Evidence of the above specialized experience must be supported by detailed documentation of duties performed in positions held. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience. We will not make assumptions regarding your experience or based on job titles alone. If your resume does not support your questionnaire answers, we will not allow credit for your response(s).

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Applicants must meet the qualifications for this position by the closing date of this announcement.

Education

This position does not have a mandatory education requirement.

There is no substitution for specialized experience at this grade level.

Additional information

CPSC provides reasonable accommodations to applicants with disabilities on a case-by-case basis. If you need a reasonable accommodation for any part of the application or hiring process, please contact the Human Resources Specialist listed in this vacancy announcement.

Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. (https://appsupport-usastaffing.opm.gov/hc/en-us/sections/[redacted]5-Reasonable-Accommodation-Information).

Payment of relocation expenses is NOT authorized.

All the information you provide will be verified by a review of the work experience and/or education as shown on your application, by checking references and through other means, such as the interview process. Any exaggeration of your experience, false statements, or attempts to conceal information may be grounds for not hiring you or for firing you after you begin work.

Additional selections may be made through this vacancy announcement.

A selectee receiving a first appointment to the Federal Government (Civil Service) is entitled only to the lowest step of the grade for which selected. The display of a salary range on this vacancy shall not be construed as granting an entitlement to a higher rate of pay.

As a condition of employment, the selectee must reside in the local commuting area of the duty station listed in this announcement. Proof of residence may be required.

Must meet the criteria requirement for the pre-employment waiver and/or a favorable suitability determination within a reasonable period of time, otherwise the employment offer may be withdrawn.

CPSC headquarters employees (Bethesda, MD) will be relocating to 441 G Street NW, Washington, DC. This position will transition to the new location upon completion of the move. The transition is expected to be completed by the end of 2026. Applicants should be aware that acceptance of this position includes the requirement to report to the new location once the relocation is finalized.

Expand Hide additional information

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

Benefits

Help

A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

CPSC offers a comprehensive benefits package that includes: paid vacation, sick leave, 11 paid holidays per year, life and health insurance, Long Term Care insurance, dental and vision insurance, flexible spending account program, and retirement savings and investment plan similar to 401(k) (Thrift Savings Plan).

CPSC also offers a broad array of work-life flexibilities and services to employees such as, flexible work schedules, transit subsidies, fitness center, and employee assistance and wellness programs.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.