Regulatory Cybersecurity Specialist

FDA; Silver Spring (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

FDA in Silver Spring, MD seeks a Regulatory Cybersecurity Specialist under a streamlined Title 21 authority. The position is for a career or career-conditional appointment and is paid according to this authority, based on Title 21 Pay Table 2, Band D.

Role involves applying cybersecurity vulnerability analysis across IT/OT, information management, and regulatory support for digital health technology and medical devices within the FDA framework.

Qualifications

• Bachelor's degree or higher in science, technology, engineering, mathematics, computer science, statistics, or software engineering from an accredited program.
• OR One year of full-time equivalent experience in cybersecurity or related regulatory fields as described in the requirements.

Responsibilities

• Work under streamlined authority under Title 21 Pay Table 2, Band D for career or career-conditional appointment.
• Contribute to cybersecurity vulnerability analysis, IT/OT, information management, and regulatory support related to digital health technologies and medical devices.

Skills

Cybersecurity

Regulatory compliance

Information technology

Vulnerability analysis

OT/IT integration

Education

Bachelor's degree in science/engineering/CS

Master's degree in cybersecurity or related field

Doctorate/JD in related field

Job description

Summary

This position is being filled under a stream‑lined hiring authority, Title 21 of the United States Code (21 US Code 379d-3a) as amended by the 21st Century Cures Act of 2016, section 3072 and the Consolidated Appropriations Act of 2023, Section 3624. The candidate selected for this position will serve under a career or career‑conditional appointment and be paid under the provisions of this authority. This position is being recruited based on the Title 21 Pay Table 2, Band D.

Duties

This position is being filled under a stream‑lined hiring authority, Title 21 of the United States Code (21 US Code 379d-3a) as amended by the 21st Century Cures Act of 2016, section 3072 and the Consolidated Appropriations Act of 2023, Section 3624. The candidate selected for this position will serve under a career or career‑conditional appointment and be paid under the provisions of this authority. This position is being recruited based on the Title 21 Pay Table 2, Band D.

Requirements

Qualifications

In order to qualify for the Regulatory Cybersecurity Specialist position which falls under the 0301 occupational Series, you must meet the following requirements by 11:59 pm EST on 09/01/2026: Basic Qualification Requirements: Education: A bachelor's degree or higher in a science, technology, engineering, mathematics, computer science, statistics, or software engineering. The degree must be from an accredited program or institution. OR Experience: Comparable work in digital health policy, digital health technology support, digital health training, medical device cybersecurity, artificial intelligence/machine learning, regulatory science advancement, regulatory review support and coordination, advanced manufacturing, real world evidence and advanced clinical studies, regulatory innovation, or digital health strategic partnership Minimum Qualifications: Comparable experience is experience that equipped the applicant with the knowledge, skills, and abilities to perform successfully the duties of the position, and that is typically in or related to the work of the position to be filled. The relevant experience must demonstrate one year of full-time work experience, or the equivalent if part‑time (for example, an employee working 20 hours per week for a 12-month period should be credited with 6 months of experience). Experience may have been obtained in either the federal service or its equivalent with state or local government, the private sector, or nongovernmental organizations. IN ADDITION TO MEETING THE BASIC REQUIREMENTS OUTLINED ABOVE, APPLICANTS MUST ALSO MEET ONE OF THE FOLLOWING MINIMUM YEARS OF EXPERIENCE REQUIREMENTS. Have a bachelor's degree and 5 years of comparable experience demonstrating understanding in cybersecurity vulnerability analysis, operational technology, information technology, information management, or a related field. OR Have a master's degree and 4 years of comparable experience demonstrating understanding in cybersecurity vulnerability analysis, operational technology, information technology, information management, or a related field. OR Have a Doctorate and/or J.D. degree and 2 years of comparable experience demonstrating understanding in cybersecurity vulnerability analysis, operational technology, information technology, information management, or a related field. OR Have a MD/DO/DDS/DPM/DVM degree and 2 years of comparable experience demonstrating understanding in cybersecurity vulnerability analysis, operational technology, information technology, information management, or a related field. OR Have 7 years of comparable experience demonstrating understanding in cybersecurity vulnerability analysis, operational technology, information technology, information management, or a related field. NOTE: Applicants must submit all relevant transcripts that demonstrate you possess the required education to meet the Basic Qualifications.

Become a part of the Department that touches the lives of every American. At the Department of Health and Human Services (HHS) you can give back to your community, state, and country, by making a difference in the lives of Americans everywhere! HHS is the principal agency for protecting the health of citizens. Join HHS and help to make our world healthier, safer, and better for all Americans. The Food and Drug Administration is the regulatory, scientific, public health, and consumer protection agency responsible for ensuring that all human and animal drugs, and medical devices are safe and effective, that cosmetics, foods, food additives, drugs and medicated feeds for food producing animals, and radiation emitting devices are safe, and that all such products marketed in the United States are adequately, truthfully and informatively labeled and safely and properly stored, transported, manufactured packaged and regulated. The position is located in the Department of Health and Human Services (DHHS), Food and Drug Administration (FDA), Center for Devices and Radiological Health (CDRH).The Center for Devices and Radiological Health (CDRH) promotes and protects public health. CDRH assures that patients and providers have timely and continued access to safe, effective, and high-quality medical devices and safe radiation-emitting products.