Cybersecurity Specialist; Cyber Operations & Incident Responder

• Hiring Agency: Consumer Product Safety Commission
• Department: Other Agencies and Independent Organizations
• Location: Washington, District of Columbia

The Cybersecurity Specialist (Cyber Operations & Incident Responder) position is located in the Office of Information and Technology Services (EXIT), U.S. Consumer Product Safety Commission (CPSC). EXIT is responsible for managing and securing the information technology resources for the CPSC. The incumbent is a recognized authority responsible for leading the CPSC cybersecurity program.

The primary purpose of the position is to assess the impact of forecasted changes in technology and business requirements on the agency's long-range Information Technology (IT) cybersecurity plans and recommend appropriate changes to goals and strategies.

The work involves developing, implementing, and ensuring compliance with IT cybersecurity plans and policies; serving as the incident response coordinator for cyber security operations, analyzing cyber events occurring in the agency's network environment; monitoring network activity; analyzing evidence of suspicious behavior; implementing and managing cyber defense tools; conducting assessments of threats and vulnerabilities; testing and implementing new technologies; and determining deviations from acceptable network configurations and policies assessing the level of risk, and recommending appropriate mitigation countermeasures to top-level management.

The Cybersecurity Specialist (Cyber Operations & Incident Responder) serves as a recognized authority in leading and establishing the framework for CPSC Cybersecurity Information Security IT programs. Assesses and anticipates the effects of new emerging technology and develops policies to prevent cybersecurity violations and govern activities.

Develops and maintains strategic plans to define current and future cybersecurity requirements and establish metrics to measure and evaluate systems performance. Represents the agency on interagency committees and participates in high- level collaboration, coordination, decision-making meetings, and conferences regarding classified and unclassified cybersecurity programs and projects. Briefs senior agency management on the status of committee activities and decisions made.

The duties of this position include:
Monitoring agency network activities and cyber incident response activities. Analyzing evidence of suspicious behavior to identify and report events that occur or may occur within the network to protect the information, systems, and networks from threats. Advising top- level management on immediate and long-term measures that must be taken in accordance with the level of risk involved, including exploring new concepts and technologies.

Analyzing cyber events and the network environment to find trends, patterns, or anomaly correlations that indicate more serious attacks or future threats. Developing new policies, procedures, standards, methods, techniques, and solutions to highly complex technical issues; evaluating the impact of technological change; and recommending proactive measures to contain identified incidents.

Reviewing data collected from various cyber defense tools (e.g., Intrusion Detection System (IDS) alerts, firewalls, network traffic logs) to analyze events within the operating environment and identify and mitigate threats and deter future security attacks. Responds to security alerts indicating possible cyber events.

Performing real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support the agency's Cyber…