Cybersecurity Specialist (Cyber Operations & Incident Responder)

The U.S. Consumer Product Safety Commission (CPSC) is establishing and strengthening its cybersecurity program framework, and this role sits at the center of cyber operations and incident response. Working onsite in Washington, DC, the Cybersecurity Specialist will help shape long-range cybersecurity plans, coordinate response activities, and support executive decision-making with timely analysis of cyber events across the agency’s network environment.

Key responsibilities

• Assess the impact of forecasted technology and business requirement changes on CPSC long-range Information Technology (IT) cybersecurity plans, then recommend updates to goals and strategies.
• Develop, implement, and maintain IT cybersecurity plans and policies, including ensuring compliance.
• Act as incident response coordinator for cyber security operations by analyzing cyber events occurring in the agency’s network environment.
• Monitor network activity and review evidence of suspicious behavior to identify and report events that occur or may occur within the network, helping protect information, systems, and networks.
• Implement and manage cyber defense tools, and review outputs to analyze events in the operating environment.
• Conduct threat and vulnerability assessments, and test and implement new technologies.
• Determine deviations from acceptable network configurations and policies, assess risk levels, and recommend mitigation countermeasures to senior leadership.
• Assess and anticipate the effects of emerging technologies, and develop policies to prevent cybersecurity violations and govern related activities.
• Develop and maintain strategic cybersecurity plans, including metrics to measure and evaluate systems performance.
• Analyze cyber events and network environment data to identify trends, patterns, or anomaly correlations that may indicate more serious attacks or future threats.
• Develop policies, procedures, standards, methods, techniques, and solutions for complex technical issues, evaluate technological change impact, and recommend proactive containment measures for identified incidents.
• Respond to security alerts indicating possible cyber events.
• Perform real-time incident handling tasks for CSIRT support, including forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation.
• Conduct malware and system forensic analysis, capture and analyze malicious-activity network traffic, and correlate incident data to produce cyber defense reports for top-level management review.
• Evaluate and recommend acquisition of IT security tools, and install and configure new hardware, software, and peripherals in line with agency standards.
• Represent CPSC on interagency committees and participate in high-level collaboration, coordination, decision-making meetings, and conferences regarding classified and unclassified cybersecurity programs and projects, including briefing senior agency management on committee status and decisions.

Required background and experience

• Must be a U.S. Citizen.
• Public Trust Position: employment requires a background investigation.
• This is a Public Trust role with conditions tied to pre-employment waiver and suitability determination; offers may be withdrawn if criteria cannot be met within a reasonable period due to background issues.
• Male applicants born after December 31, 1959 must certify Selective Service registration or exemption.
• Applicants must have 52 weeks of specialized experience equivalent to at least the next lower grade level in the Federal Service, supported by detailed documentation of duties performed.
• Specialized experience includes applying cyber security and privacy principles to manage risks related to the use, processing, storage, and transmission of information or data.
• Experience in Azure Cloud security.
• Experience in incident response and handling methodologies.
• Knowledge of NIST Special Publications (e.g., SP 800-53, SP 800-37).
• Experience in vulnerability identification, scanning, management, and remediation.
• Ability to communicate complex information confidently and in an organized manner via verbal, written, and/or visual methods.
• No mandatory education requirement; there is no substitution for specialized experience at this grade level.
• Reasonable accommodations are provided on a case-by-case basis.

Technologies and standards

• Azure Cloud
• Intrusion Detection System (IDS)
• Firewalls
• Network traffic logs
• Network monitoring tools
• NIST Special Publications (SP 800-53, SP 800-37)

Compensation and location

• Location: Washington, DC (onsite)
• Salary: USD 143,913 - 187,093 per year
• Minimum experience: 1 year

Benefits

• Paid vacation
• Sick leave
• 11 paid holidays per year
• Life and health insurance
• Long Term Care insurance
• Dental and vision insurance
• Flexible spending account program
• Retirement savings and investment plan similar to 401(k) (Thrift Savings Plan)
• Flexible work schedules
• Transit subsidies
• Fitness center
• Employee assistance and wellness programs

Additional employment conditions and notes

• UNITED STATES CITIZENS may apply (no prior federal experience required).
• Filled through the Office of Personnel Management’s delegated Direct Hire Authority (DHA).
• Relocation expenses are not authorized.
• As a condition of employment, the selectee must reside in the local commuting area of the duty station.
• A Personal Identity Verification (PIV) process is required, and selectees must complete the “Declaration of Federal Employment” (OF-306) and relevant background investigation forms.
• This position requires a 1-year probationary period; employment may terminate unless certification is received in writing that continued employment advances the public interest.
• All information provided will be verified through review of work experience/education, references, and interview process as applicable.
• Additional selections may be made through the vacancy announcement.
• CPSC headquarters employees (Bethesda, MD) will be relocating to 441 G Street NW, Washington, DC, with transition expected after the move completes by the end of 2026.

How you will be evaluated

• Qualifications are evaluated based on application materials (resume and supporting documents), responses to the application questionnaire, and any required assessments.
• Competencies assessed include: Accountability; Attention to Detail; Customer Service; Decision Making; Flexibility; Influencing/Negotiating; Integrity/Honesty; Interpersonal Skills; Learning; Reading Comprehension; Reasoning; Self-Management; Stress Tolerance; Teamwork.
• USA Hire Assessments includes a cut score; applicants must meet or exceed it to be considered.
• You will not be considered if you score below the cut score or fail to complete the assessment.

Required documents to submit

• A complete application includes: 1) Resume, 2) Completed USA Hire Assessment(s), and 3) Submission of any required documents.
• Resume must clearly show how skills and experiences align with the “Qualifications” section and support questionnaire responses, within two pages or less. If longer, only the first two pages will be reviewed.

Job opening details: This position is open to U.S. Citizens, Nationals, or individuals who owe allegiance to the U.S., and eligible federal employees from an eliminated job/agency/department who qualify for priority consideration. Veteran’s Preference does not apply to this announcement.