Duties

There are a variety of Cybersecurity Threat Analysis opportunities across the Department, including supporting several specialized programs at the DHS Office of Strategy, Policy, and Plans (PLCY), Cybersecurity and Infrastructure Security Agency (CISA), DHS Office of the Chief Information Officer (OCIO), and the Federal Emergency Management Agency (FEMA).

As a DHS Cybersecurity Service employee in the Developmental Career Track, you will continually and proactively participate in learning activities to enhance and apply your developing expertise in the technical capability of Cybersecurity Threat Analysis to perform a range of routine tasks, which may include:

• Collecting, processing, analyzing, and disseminating cyber warning assessments.
• Applying knowledge of cybersecurity threats to determine possible consequences to DHS and draft or recommend mitigation strategies.
• Performing code analysis, traffic analysis, web log analysis, and pattern analysis to determine possible trends, patterns, and suspicious activity on networks.
• Tracking technical network and host-based attack vectors, malicious actors, emerging cyber threats, new vulnerabilities, and current trends to prepare and present cyber threat intelligence briefings to DHS leadership.
• Actively participating in Departmental, Component, or Federal working groups, task forces, and committees to develop, share or otherwise contextualize cyber indicators or information, recommending countermeasure or mitigation strategies for perceived threats.
• Applying Intelligence Community (IC) standards to analyze all-source intelligence on current and emerging cyber threats and sharing this analyses with DHS customers and partners.
• Producing routine intelligence assessments and cyber warning assessments to identify and evaluate emerging threats.
• Monitoring DHS or Component architectures, networks, communications, applications, and systems by mining open source and classified data sources.
• Actively working with Cyber Incident Response teams and cyber experts to implement identification and protection measures against state sponsored threats, sharing intelligence and analysis.
• Performing routine scanning and probing activities to analyze and interpret all-source intelligence on current and emerging cyber threats using intelligence community analytical standards.