Senior Critical Infrastructure Cyber Defense Threat Hunter

This announcement is issued under the Direct Hire Authority (DHA) to recruit for positions for which there is a critical hiring need. Selectee(s) will receive a career or career-conditional appointment in the competitive service and may be required to serve a one year probationary period. The official title of this position is Information Technology Cybersecurity Specialist (INFOSEC) GS-22.This position is located in the Cybersecurity Division (CSD), which leads CISA's cybersecurity efforts as the nation's flagship civilian cyber defense organization. CSD collaborates with partners across the government and private sector to enhance the nation's cybersecurity posture. Typical work assignments at the full performance level include, but are not limited to: Leading the development and execution of sophisticated threat hunting strategies across both IT Enterprise and Operational Technology (OT) environments. Proactively identifying, investigating, and analyzing anomalous activity, indicators of compromise (IOCs), and emerging threats. Correlating and synthesizing data from disparate enterprise and OT sources to uncover complex attack patterns and adversary behaviors. Writing, testing, and deploying custom network signatures to detect specific threats and attack techniques relevant to critical infrastructure. Maintaining a high level of precision in threat analysis, detection, and documentation to ensure accuracy and reliability in all findings. Staying current with emerging threats, vulnerabilities, and attack techniques relevant to critical infrastructure. Researching and evaluating new threat hunting tools, methodologies, and frameworks, contributing to ongoing improvement of threat hunting playbooks and procedures. Responding quickly and effectively to evolving threat landscapes, new technologies, and unexpected incidents, adjusting strategies as needed.