Ethical Hacker
What you'd do
This position is located in the Department of Health & Human Services (HHS), Centers for Medicare & Medicaid Services (CMS), Office of Information Technology (OIT). As a Ethical Hacker, GS-2210-14, you will lead and execute comprehensive cybersecurity operations including advanced penetration testing, vulnerability management programs, and strategic security assessments across enterprise-wide CMS information technology (IT) systems, networks, and applications.
Major duties
Lead and execute enterprise penetration testing campaigns across CMS systems and applications, including cloud and hybrid environments. Design and conduct advanced adversary simulations and red team exercises to identify systemic weaknesses across interconnected infrastructure, identity services, and applications. Develop and maintain custom exploit tools, scripts, and automated testing capabilities to enhance vulnerability discovery and testing efficiency. Conduct enterprise risk assessments and threat modeling to identify high-impact attack paths and recommend mitigation strategies aligned with federal cybersecurity standards. Integrate threat intelligence, vulnerability data, and testing results into continuous security improvement initiatives and remediation roadmaps.
What you need to qualify
ALL QUALIFICATION REQUIREMENTS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT. Your resume (limited to no more than 2 pages) must include detailed information as it relates to the responsibilities and specialized experience for this position. Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from receiving further consideration. Basic Requirement: You must have IT-related experience demonstrating each of the four competencies listed below: 1. Attention to Detail - is thorough when performing work and conscientious about attending to detail; 2. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services; 3. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately; AND 4. Problem Solving - identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. AND In order to qualify for the GS-14, you must meet the following: You must demonstrate in your resume at least one year (52 weeks) of qualifying specialized experience equivalent to the GS-13 grade level in the Federal government, obtained in either the private or public sector, to include: 1. Designing and conducting advanced ethical hacking campaigns, including multi-phase attack simulations, AND; 2. Developing or customizing exploit frameworks, scripts, or automation tools, AND; 3. Conducting vulnerability assessments and translating findings into prioritized remediation strategies, AND; 4. Providing technical recommendations to leadership on enterprise cybersecurity risk. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills, and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Click the following link to view the occupational questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/13024809
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.