Cybersecurity Specialist (Cyber Operations & Incident Responder)

United States Consumer Product Safety Commission; Washington (District of Columbia); On-site; USD 95,000 - 135,000; Full time

Job summary

The Cybersecurity Specialist (Cyber Operations & Incident Responder) position is located in the Office of Information and Technology Services (EXIT), U.S. Consumer Product Safety Commission (CPSC). EXIT manages and secures the agency's IT resources.

The incumbent leads the cybersecurity program and is a recognized authority within CPSC. Specialized experience is required, including applying cyber security and privacy principles, Azure Cloud security, incident response, and knowledge of NIST SPs.

Qualifications

• Experience applying cyber security and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.
• Experience in Azure Cloud security.
• Experience in incident response and handling methodologies.
• Knowledge of NIST Special Publications (e.g., SP 800-53, SP 800-37, etc.).
• Experience in vulnerability identification, scanning, management and remediation.
• Ability to communicate complex information, concepts, or ideas clearly through verbal, written, and/or visual means.

Skills

Cybersecurity principles

Azure Cloud security

Incident response

Communication skills

Job description

The Cybersecurity Specialist (Cyber Operations & Incident Responder) position is located in the Office of Information and Technology Services (EXIT), U.S. Consumer Product Safety Commission (CPSC). EXIT is responsible for managing and securing the information technology resources for the CPSC. The incumbent is a recognized authority responsible for leading the CPSC cybersecurity program.

All applicants must have 52 weeks of specialized experience equivalent to at least the next lower grade level in the Federal Service. Specialized experience is experience that has equipped the candidate with the particular knowledge, skills, and abilities to perform successfully the duties of the position.

Qualifying specialized experience must demonstrate the following:
1) Experience applying cyber security and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data; 2) experience in Azure Cloud security; 3) experience in incident response and handling methodologies; 4) knowledge of NIST Special Publications (e.g., SP 800-53, SP 800-37, etc.); 5) experience in vulnerability identification, scanning, management and remediation; and 6) ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.

Evidence of the above specialized experience must be supported by detailed documentation of duties performed in positions held. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience. We will not make assumptions regarding your experience or based on job titles alone. If your resume does not support your questionnaire answers, we will not allow credit for your response(s).

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Applicants must meet the qualifications for this position by the closing date of this announcement.