IT Cybersecurity Specialist

This position is located with Bonneville Power Administration, in Cyber Security Forensics and Intelligence (JBB), Cyber Security (JB), Information Technology (J). A successful candidate in this position will serve as a technical specialist and digital forensics expert leading a wide variety of investigations, inquiries, and tasks concerning incident and investigations management and with the preservation, identification, extraction, interpretation, and documentation of computer evidence.

As an IT Cybersecurity Specialist, you will: Retrieve, recover, and preserve digital evidence. Use various host-based forensic tools such as Encase or FTK to search for and prepare information and evidence. Obtain and image various digital devices and provides information about the devices to assist investigations/inquiries. Examine and perform thorough technical analyses of computer-related evidence/information. Examine and analyze evidence/information from magnetic media storage devices (floppy disks, hard disks, magnetic tapes, optical disks, memory cards, magnetic strip cards, and the like). Analyze raw data (e.g. malware, network packets), log information, and other information sources in the course of incident response. Manage multiple threat analysis sources and their integration and use in the enterprise incident response teams. Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities. Lead projects or efforts to maintain and improve our department's cyber defensive capabilities. Interact with other agencies such as the FBI to stay informed about threats to BPA's infrastructure.

In accordance with Executive Order 14170, applicants are encouraged to respond to four short, free-response, essay questions in the questionnaire. Answer to these questions is not scored or rated. Your answers will be reviewed by the hiring manager and agency leadership if you are referred for selection consideration. When you apply you will be asked a series of questions to determine your eligibility for employment and your qualification for this position specifically. You must answer all of these questions completely and truthfully. Key Requirements: You must be a United States Citizen. This employer participates in the e-Verify program. Males must abide by Selective Service registration requirements. You will be required to report in person to the official duty location. Conditions of Employment: Suitable for Federal employment, as determined by a background investigation. May be required to successfully complete a probationary period. This position has been designated as Critical-Sensitive, High Risk, Tier 5 and requires a security clearance at the DOE "Q" level; the incumbent will be required to access, process, use, and safeguard classified information. The incumbent is required to obtain and maintain this clearance level; failure to do so may result in separation from federal service. This position requires an initial drug test prior to appointment and random drug or drug and alcohol testing thereafter. Failure to test or a positive result on random drug or drug and alcohol tests conducted after appointment may result in removal from Federal employment. Position may be required to participate in scheduled or ad hoc on call duties, including after hours, weekends, and holidays at management's discretion to support mission needs. The Computer Forensic Technician position is exposed to extremely sensitive unclassified information (SUI), classified information (Q), and extremely high level network access which requires a high degree of confidentiality, discreteness, professionalism and skill and requires a top secret (Q) for which the incumbent must qualify to hold or continue to hold the position.