About the position
The DHS Cybersecurity Service (DHS-CS) is seeking qualified applicants for the Cybersecurity Defensive Operations Talent Pool. This position is designed for individuals who have successfully completed a multi-phase assessment process and are looking to contribute to the ongoing cybersecurity efforts of the Department of Homeland Security (DHS). As a member of the Cybersecurity Defensive Operations team, you will engage in a variety of critical tasks that are essential for protecting DHS networks and systems from cyber threats. Your role will involve creating and implementing tactical and strategic cyber operations plans, supporting the development of action plans, and employing best practices for defensive and offensive cyber operations. In this position, you will be responsible for examining indicators of compromise, integrating digital forensics data, and engaging with a community of network defenders to enhance cybersecurity strategies. You will conduct reverse malware analysis, collect and disseminate information on cyber threats, and analyze all-source intelligence to evaluate the capabilities of cyber actors. Additionally, you will prepare intelligence products and serve as a technical mentor to other DHS employees, sharing your expertise in cybersecurity defensive operations. This role requires a strong understanding of national strategies and policies related to cybersecurity, as well as the ability to manage and execute all aspects of the cyberattack lifecycle. The position is part of a technical career track that offers opportunities for professional growth and development within the DHS Cybersecurity Service.
Responsibilities
- Creating and implementing end-to-end tactical and strategic level cyber operations plans based on technical cybersecurity understanding, applicable policies, and rules of engagement
- Supporting the development of primary and contingency action plans, using expertise to select the most appropriate and effective methods of defense/attack that align with operational protocols
- Employing best practices and available capabilities for mounting defensive and/or offensive cyber operations against identified threats to DHS networks and systems
- Examining indicators of compromise and integrating digital forensics and incident response data to bolster DHS and DHS partners' defenses at each step of the cybersecurity defensive operations process
- Engaging with a community of network defenders as well as other intelligence components to better understand identified intrusion sets and deviations and to build better defensive cybersecurity strategies
- Conducting reverse malware analysis and applying engineering techniques to prevent incidents or mitigate threats to DHS or Federal systems and networks
- Collecting and disseminating information on cyber threats or threat actors using various intelligence collection tools and methods
- Identifying information needs and requirements of customers and formulating effective, executable collection plans and strategies to meet those needs
- Analyzing all-source intelligence on current and emerging cyber threats to identify and evaluate the intent and capabilities of cyber actors using intelligence community analytic standards
- Providing cyber intelligence and analysis to inform cyber operations and supporting intelligence cycle by evaluating information and identifying customer needs for finished intelligence analysis
- Preparing and refining draft or final intelligence products - including written reports or briefings - in tandem with counterparts in the intelligence community - for a variety of audiences, including senior government officials and other decision makers, planners, or network defenders
- Serving as a technical mentor to DHS employees in cyber defensive operations and those seeking to build expertise in the field
Requirements
- Must be a U.S. Citizen or national.
- Must be 18 years of age.
- Must be registered for the Selective Service (if you are a male).
- Must be able to obtain and maintain a security clearance. Security clearance levels may vary.
- Must be able to submit to a drug test and receive a negative result.
- Must be able to comply with ethics and standards of conduct requirements, including completing any applicable financial disclosure.
- May be required to serve a 3 year probationary period.
- While many of these positions are considered telework eligible, some individuals must live within 2 hrs driving distance to a DHS SCIF in either Chandler, AZ; Stennis, MS; Idaho Falls, ID; Arlington, VA; Pensacola, FL; Springfield, VA or D.C.
- DHS Cybersecurity Service employees start at career levels and salaries matching their experience and expertise. In recruiting for this opportunity, DHS may hire employees at higher or lower career levels and associated salaries.
Nice-to-haves
- Experience with cybersecurity frameworks and standards
- Familiarity with incident response and digital forensics
- Knowledge of threat intelligence tools and methodologies
- Ability to work collaboratively in a team environment
- Strong analytical and problem-solving skills
Benefits
- Comprehensive federal employment benefits package
- Health insurance options for employees and their families
- Retirement plans including TSP (Thrift Savings Plan)
- Paid time off including vacation and sick leave
- Opportunities for professional development and training
