Cybersecurity Specialist (Cyber Operations & Incident Responder)

Consumer Product Safety Commission•Washington, DC

14h•Onsite

About The Position

The Cybersecurity Specialist (Cyber Operations & Incident Responder) is located in the Office of Information and Technology Services (EXIT) at the U.S. Consumer Product Safety Commission (CPSC), which manages and secures the agency’s IT resources. The incumbent is a recognized authority responsible for leading the CPSC cybersecurity program and establishing its cybersecurity information security IT program framework. The position assesses how forecasted technology and business changes affect long-range cybersecurity plans, recommends changes to goals and strategies, and develops, implements, and ensures compliance with cybersecurity plans and policies. It serves as the incident response coordinator for cyber operations, monitoring agency network activity, investigating suspicious behavior, analyzing cyber events, managing cyber defense tools, assessing threats and vulnerabilities, and recommending mitigation measures to senior management. The role develops and maintains strategic plans and performance metrics, anticipates emerging technology impacts, and creates policies to prevent cybersecurity violations. It represents the agency on interagency committees and in high-level meetings concerning classified and unclassified cybersecurity programs, and briefs senior management on committee activities and decisions. It also supports the agency’s Cyber Security Incident Response Team (CSIRT) through incident handling, forensic analysis, threat analysis, system remediation, and cyber defense reporting. The position evaluates and recommends IT security tools and installs and configures supporting hardware, software, and peripheral equipment in accordance with agency standards.

Requirements

Must be a U.S. citizen.
Must have 52 weeks of specialized experience equivalent to at least the next lower grade level in the Federal Service.
Experience applying cybersecurity and privacy principles to manage risks associated with the use, processing, storage, and transmission of information or data.
Experience in Azure Cloud security.
Experience in incident response and handling methodologies.
Knowledge of NIST Special Publications, such as SP 800-53 and SP 800-37.
Experience in vulnerability identification, scanning, management, and remediation.
Ability to communicate complex information, concepts, or ideas clearly and confidently through verbal, written, and/or visual means.
Must meet applicable background investigation and suitability requirements for this Public Trust position.
If male and born after December 31, 1959, must certify Selective Service registration or exemption.
Selectee must complete required federal employment forms and a Personal Identity Verification process.
Depending on status, may be required to serve a one-year probationary period.
Must reside in the local commuting area of the duty station; proof of residence may be required.
Must report to the new Washington, DC location after the headquarters relocation is finalized.

Responsibilities

Assess the effects of forecasted technology and business changes on long-range agency IT cybersecurity plans and recommend changes to goals and strategies.
Develop, implement, and ensure compliance with IT cybersecurity plans and policies.
Lead and establish the framework for CPSC cybersecurity information security IT programs.
Monitor agency network activity and cyber incident response activities; analyze evidence of suspicious behavior and identify or report actual or potential events.
Advise top-level management on immediate and long-term measures based on risk, including potential concepts and technologies.
Analyze cyber events and network environments for trends, patterns, and anomalies that may indicate serious attacks or future threats.
Develop policies, procedures, standards, methods, techniques, and solutions for complex technical issues; evaluate technological changes and recommend proactive incident-containment measures.
Review data from cyber defense tools, including IDS alerts, firewalls, and network traffic logs, to identify and mitigate threats and deter future attacks.
Respond to security alerts indicating possible cyber events.
Perform real-time cyber defense incident handling, including forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation, in support of the agency CSIRT.
Perform malware and system forensic analysis.
Capture and analyze network traffic associated with malicious activity using network monitoring tools.
Correlate incident data and develop cyber defense reports for senior management.
Evaluate and recommend the acquisition of IT security tools.
Install and configure hardware, software, and peripheral equipment supporting IT security tools in accordance with agency standards.
Develop and maintain strategic cybersecurity plans and metrics to evaluate systems performance.
Represent the agency on interagency committees and participate in high-level cybersecurity meetings and conferences; brief senior management on committee activities and decisions.