This position is no longer accepting applications
Closed on September 5, 2026.
This role is filled — get an email when new Information Security roles open on CybersecurityJobs.io:
IT Cybersecurity Specialist
Cyber Forensics
Cybersecurity Tools
Forensics
Host Based Forensics
Incident Response
Information Security
InfoSec
Raw Data Analysis
View similar jobs
Get alerted when similar jobs are posted — set up a New Information Security jobs on CybersecurityJobs.io alert.
See other roles at US Bonneville Power Administration.
Job Description
The IT Cybersecurity Specialist role at US Bonneville Power Administration focuses on computer forensics and incident investigations, including evidence preservation, analysis, and documentation.
- Use host-based forensic tools such as Encase or FTK to search for, prepare, and support digital evidence
- Obtain and image digital devices; document device information to support investigations and inquiries
- Search and examine a range of digital devices and computers across Windows, Linux, and Unix operating environments
- Examine and analyze evidence from magnetic media storage, including floppy disks, hard disks, magnetic tapes, optical disks, memory cards, magnetic strip cards, and similar media
- Analyze raw data (for example, malware and network packets), log information, and other sources during incident response
- Produce accurate, clear, comprehensive reports of findings that non-technical personnel can understand
- Support conclusions with a documented chain of facts and evidence, and ensure proper protection of evidence used in investigations
Requirements
- Must be a United States Citizen
- Employer participates in E-Verify
- Males must meet Selective Service registration requirements
- Required to report in person to the official duty location
- Suitable for federal employment based on a background investigation
- May be required to complete a probationary period
- Position is designated Critical-Sensitive, High Risk, Tier 5 and requires a DOE “Q” level security clearance
- Incumbent must access, process, use, and safeguard classified information
- Must obtain and maintain the required clearance level; failure may result in separation from federal service
- Initial drug test required prior to appointment; random drug or drug and alcohol testing thereafter
- May be required to participate in scheduled or ad hoc on-call duties, including after hours, weekends, and holidays at management discretion
- Exposure to extremely sensitive unclassified information (SUI) and extremely high level network access requires confidentiality, discretion, professionalism, and skill
- Must qualify for (and continue to hold) security clearance for top secret (Q) to maintain the position
- Experience must be IT related; may be shown via paid or unpaid experience and/or completion of specific intensive training (for example, IT certification)
- Must have at least 1 year of specialized experience equivalent to the next lower grade level (GS-11) in the Federal service
- Specialized experience includes (as stated):
- Using forensic tools to acquire and analyze digital evidence from computer hard drives and servers in support of cyber investigations
- Analyzing system logs and network traffic to identify potential security incidents and indicators of compromise
- Preparing technical reports documenting findings from forensic or security analyses
- Attention to Detail
- Customer Service
- Oral Communication
- Problem Solving
- No specific education requirements and no substitution of education for experience for this position
- All qualifications and eligibility requirements must be met by 08/13/2026
Technologies
- Encase
- FTK
- Windows
- Linux
- Unix
Job Information
- Location: Portland, OR (onsite)
- Salary: USD 96,443 - 125,378 per year
- Experience: 1+ years
- Open to: U.S. Citizens, Nationals, or those who owe allegiance to the U.S.
- Hiring: Direct Hire Public Notice
Conditions of Employment
- Applicants are encouraged to respond to four short, free-response essay questions
- You will be asked eligibility and qualification questions during the application process; must answer completely and truthfully
- May be required to complete a probationary period
- Security clearance at the DOE Q level required; must access, process, use, and safeguard classified information
- Initial drug test prior to appointment; random drug or drug and alcohol testing thereafter
- May require scheduled or ad hoc on-call duties, including after hours, weekends, and holidays
How You Will Be Evaluated
- Evaluation based on how well you meet the qualifications above
- Position announced under a government-wide Direct-Hire Authority (DHA) for IT Cybersecurity Specialist positions in the 2210 series
- Veteran’s Preference, category rating, and traditional rating and ranking do not apply under the DHA process
- HR/SME will review a two-page resume and supporting documentation to determine whether you meet minimum qualifications
- Incomplete resumes, missing documentation, or failure to submit required materials by the vacancy close may result in “ineligible” or “not qualified”
- Competencies used for evaluation (as listed): Accountability; Attention to Detail; Customer Service; Decision Making; Flexibility; Influencing/Negotiating; Integrity/Honesty; Interpersonal Skills; Learning; Reading Comprehension; Reasoning; Self-Management; Stress Tolerance; Teamwork
- Must complete all required steps, including an online assessment with a cut score
- Must meet or exceed the cut score to be considered
Required Documents
- Two (2) page RESUME including relevant work experience (paid and unpaid) with:
- Duties performed
- Full name and address of each employer
- Start and end dates (month/day/year)
- Work schedule (part-time, full-time, number of hours if intermittent)
- Salary
- Education and training details (program title, subject area, number of hours completed, and completion date)
- Cover Letter: optional
- Transcripts, if specific educational requirements are indicated
- CTAP/ICTAP documentation, if applicable
How to Apply
- Complete the initial online application on USAJOBS and submit required documentation
- Submit a complete application package by 11:59 PM (EST) on the closing date to receive consideration
- Must have a login.gov account to sign into USAJOBS
- Click Apply Online, answer questionnaire items, and attach required/supporting documents
- Click Submit Application before 11:59 pm (ET) on the announcement closing date
- After submission, you may be notified whether additional assessments are required through the USA Hire Competency Based Assessment system