Mitigation and Response - Technical

The Department of Homeland Security (DHS) is recruiting professionals to support a range of technical roles in Mitigation and Response, including Cyber Defense Incident Responder, Cyber Incident Response Analyst, and Cyber Intrusion Detection Specialist. All positions are in the DHS Cybersecurity Service.

This position is in the Technical Track across a range of career levels. Employees in this career track generally: Have between 5-15 years of cybersecurity work experience. Range from experienced cybersecurity professionals who apply technical expertise and independent judgement to perform cybersecurity work - to - recognized Federal cybersecurity technical authorities with uncommon technical expertise who advise on cybersecurity challenges impacting DHS and the Nation. DHS Cybersecurity Service employees with a technical capability in Mitigation and Response will generally: Track and respond to prioritized urgent IT and cyber events and indicators of compromise (IOCs) to mitigate threats to networks, systems, and applications. Investigate and analyze response activities and employs various advanced response and recovery approaches as appropriate. Apply understanding of tactics, techniques, and procedures for investigative processes, including identifying adversaries' TTPs and applying corresponding defense or security controls. Conduct root cause analysis and response coordination, providing recommendations for mitigation. Execute recovery action plans and adapts plans to handle new developments. DHS Cybersecurity Service employees start at career levels and salaries matching their experience and expertise. In recruiting for this opportunity, DHS may hire employees at higher or lower career levels and associated salaries. To learn more about DHS Cybersecurity Service career tracks and levels, visit our application portal. This position is focused on Mitigation and Response. DHS Cybersecurity Service jobs are structured cybersecurity specializations - called technical capabilities. To learn more about technical capabilities, visit our application portal.