Consumer Product Safety Commission
Cybersecurity Specialist (Cyber Operations & Incident Responder)
Apply on USAJOBSThis announcement is sourced from the official USAJOBS API. Federal Job Alerts is not affiliated with OPM, USAJOBS, or any U.S. government agency.
Summary
All applicants must have 52 weeks of specialized experience equivalent to at least the next lower grade level in the Federal Service. Specialized experience is experience that has equipped the candidate with the particular knowledge, skills, and abilities to perform successfully the duties of the position. Qualifying specialized experience must demonstrate the following: 1) Experience applying cyber security and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data; 2) experience in Azure Cloud security; 3) experience in incident response and handling methodologies; 4) knowledge of NIST Special Publications (e.g., SP 800-53, SP 800-37, etc.); 5) experience in vulnerability identification, scanning, management and remediation; and 6) ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means. Evidence of the above specialized experience must be supported by detailed documentation of duties performed in positions held. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience. We will not make assumptions regarding your experience or based on job titles alone. If your resume does not support your questionnaire answers, we will not allow credit for your response(s). Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Applicants must meet the qualifications for this position by the closing date of this announcement.
Major Duties
The primary purpose of the position is to assess the impact of forecasted changes in technology and business requirements on the agency's long-range Information Technology (IT) cybersecurity plans and recommend appropriate changes to goals and strategies. The work involves developing, implementing, and ensuring compliance with IT cybersecurity plans and policies; serving as the incident response coordinator for cyber security operations, analyzing cyber events occurring in the agency's network environment; monitoring network activity; analyzing evidence of suspicious behavior; implementing and managing cyber defense tools; conducting assessments of threats and vulnerabilities; testing and implementing new technologies; and determining deviations from acceptable network configurations and policies assessing the level of risk, and recommending appropriate mitigation countermeasures to top-level management. The Cybersecurity Specialist (Cyber Operations & Incident Responder) serves as a recognized authority in leading and establishing the framework for CPSC Cybersecurity Information Security IT programs. Assesses and anticipates the effects of new emerging technology and develops policies to prevent cybersecurity violations and govern activities. Develops and maintains strategic plans to define current and future cybersecurity requirements and establish metrics to measure and evaluate systems performance. Represents the agency on interagency committees and participates in high- level collaboration, coordination, decision-making meetings, and conferences regarding classified and unclassified cybersecurity programs and projects. Briefs senior agency management on the status of committee activities and decisions made. The duties of this position include: Monitoring agency network activities and cyber incident response activities. Analyzing evidence of suspicious behavior to identify and report events that occur or may occur within the network to protect the information, systems, and networks from threats. Advising top- level management on immediate and long-term measures that must be taken in accordance with the level of risk involved, including exploring new concepts and technologies. Analyzing cyber events and the network environment to find trends, patterns, or anomaly correlations that indicate more serious attacks or future threats. Developing new policies, procedures, standards, methods, techniques, and solutions to highly complex technical issues; evaluating the impact of technological change; and recommending proactive measures to contain identified incidents. Reviewing data collected from various cyber defense tools (e.g., Intrusion Detection System (IDS) alerts, firewalls, network traffic logs) to analyze events within the operating environment and identify and mitigate threats and deter future security attacks. Responds to security alerts indicating possible cyber events. Performing real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support the agency's Cyber Security Incident Response Team (CSIRT). Performing malware and system forensic analysis. Capturing and analyzing network traffic associated with malicious activities using network monitoring tools. Correlating incident data and develops cyber defense reports for top-level management review. Evaluating and recommending the acquisition of IT security tools. Installing and configuring new hardware, software, and peripheral equipment to support IT security tools in accordance with agency standards.
Requirements
Must be a U.S. Citizen. This is a Public Trust Position. Employment in this position requires a background investigation. If you are selected and cannot meet the criteria requirement for the pre-employment waiver and/or a favorable suitability determination within a reasonable period of time due to disclosed or undisclosed background issues, the employment offer may be withdrawn. If you are a male born after December 31, 1959, you must certify that you have registered with the Selective Service System or are exempt from having to do so under the Selective Service Law. Please see http://www.sss.gov for more information. Selectees will be required to complete a "Declaration of Federal Employment", (OF-306), prior to appointment and the appropriate background investigation forms to determine suitability for Federal employment. False statements or responses on these forms can jeopardize your employment opportunity and subject you to disciplinary action, including removal from Federal service. The selectee will be required to complete a Personal Identity Verification (PIV) process that requires two forms of identification from the I-9 Form. We will compare information provided on the I-9 Form to records available from the U.S. Department of Homeland Security. The system confirms employee's identity and eligibility to work in the United States. Learn more about E-Verify, including your rights and responsibilities. Depending on your status, this position may require serving a 1-year probationary period. As a condition of employment for accepting this position, you will be required to serve a 1-year probationary period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider: your performance and conduct; the needs and interests of the CPSC; whether your continued employment would advance organizational goals of the CPSC or the Government; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest.
Required Documents
Your package must be complete and submitted in the manner specified in this section. Packages that are submitted in any other manner without prior approval from the agency point of contact will not be considered. A complete application includes: 1. Resume; 2. Completed USA Hire Assessment(s); and 3. Submission of any required documents. Please note that if you do not provide all required information, as specified in this announcement, you may not be considered for this position (or may not receive the special consideration for which you may be eligible). Your resume must clearly demonstrate, in two pages or less, how your skills and experiences align with the "Qualifications" section and support your questionnaire responses. We cannot assume required experience based on your work or academic history. If your resume exceeds two pages, only the first two will be reviewed. You may use the USAJOBS Resume Builder or upload your own resume. If uploading, ensure it includes all required information and is organized so we can match the following to each position: Job title Employer name Employment dates (MM/DD/YYYY) Hours worked per week (full-time assumed; part-time prorated) Detailed duties, accomplishments, skills, responsibilities, and supervisory details (if applicable) Series and grade or equivalent (for federal positions, if applicable) Do not include a photograph or video of yourself, or any sensitive information (age, date of birth, marital status, social security number, etc.) on your resume or cover letter. We will not access web pages linked on your resume or cover letter to determine your qualifications. CTAP/ICTAP eligibles must annotate your questionnaire to reflect that you are applying as a CTAP/ICTAP eligible and you must submit appropriate documentation (such as: a copy of the agency notice, your most recent performance rating, and your most recent SF-50 noting current position, grade level, and duty location). Other documents identified in this announcement. All supplemental documents must be submitted electronically before the closing date of this vacancy announcement. You have two choices for submitting your supplemental documents: Download from your USAJOBS account; or Upload your file(s) Failure to submit required documents, based upon how you apply, may result in loss of consideration due to an incomplete application package. It is your responsibility to ensure all required documents have been submitted. Official documents are not required at the time of application, copies are sufficient. If selected, official documentation must be submitted prior to appointment.
How to Apply
Please read the entire announcement and all the instructions before you begin an application. To apply and be considered for this position, you must complete all required questionnaires, assessments and submit all required documentation as specified in the How to Apply and Required Documents section. The complete application package must be submitted by 11:59 PM (ET) on the closing date of the announcement to receive consideration. The application process is as follows: Click the Apply Online button. Answer the questions presented in the application and attach all necessary supporting documentation. Click the Submit Application button prior to 11:59 PM (ET) on the announcement closing date. If you are required to complete any USA Hire Assessments, you will be notified after submitting your application. The notification will be provided in your application submission screen and via email. The notification will include your unique assessment access link to the USA Hire system and the completion deadline. Additionally, in USAJOBS you can click "Track this application" to return to your assessment completion notice. Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. Set aside about two (2) hours to take the USA Hire Assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. Visit the USA Hire Applicant Resource Center for practice assessments and assessment preparation resources at https://support-usahire.opm.gov/hc/en-us. To update your application, including supporting documentation: During the announcement open period, return to your USAJOBS account, find your application record, and click Edit my application. This option will no longer be available once the announcement has closed. To view the announcement status or your application status: Visit https://help.usajobs.gov/how-to/application/status. Your application status page is where you can view your application status, USA Hire assessment completion status, and review your notifications sent by the hiring agency regarding your application. If you are having trouble with USAJOBS (searching for jobs, account password/profile issues, or Resume Builder): please visit the USAJOBS Help Center. If experiencing any difficulties with the online application process (anything after you have clicked the 'Continue to Agency Site' button): please email [email protected] between normal business hours (8:00 a.m. - 4:00 p.m. ET; except federal holidays). If receiving any kind of error message, please provide a screenshot or at a minimum, the error message text number.