> Markdown version of [/jobs/ext/4199070-supervisory-cyber-threat-analyst](https://www.wearedevelopers.com/jobs/ext/4199070-supervisory-cyber-threat-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Supervisory Cyber Threat Analyst - **Company:** U.S. DEPARTMENT OF HOMELAND SECURITY - **Location:** Washington, DC, United States (Remote available) - **Salary:** $143,913.0 - $187,093.0 - **Contract:** Permanent contract - **Skills:** HTML, Artificial Intelligence, Cyber Security, Information Systems, Databases, Computer Telephony Integration, Data Security, Electronic Funds Transfer, Github, Information Management, Internet Security, Network Security, Transport Layer, Microsoft Copilot, RPL (Programming Language), Large Language Models, Cyber Threat Analysis, Information Technology, Cybercrime, Cyber Warfare, GPT - **Published:** October 16, 2026 - **Apply:** https://apply.usastaffing.gov/ViewQuestionnaire/13083934 ## About the Role Security Attacks, Internet Security, Analysis Skills, Government Organizations, HTTPS (HyperText Transport Protocol Secure), Internet Security, Information Technology & Information Systems, Information/Data Security (InfoSec), Reimbursement, Policy Development, Do NOT copy and paste the duties, specialized experience, or occupational assessment questionnaire from this announcement into your resume as that will not be considered a demonstration of your qualifications for this position. Your resume must describe your work and experience, in your own words. To be considered minimally qualified for this position, you must demonstrate that you have the required proficiency level of competencies and experience for the respective grade level in which you are applying. COMPETENCY REQUIREMENT: Experience must be Information Technology (IT)-related; the experience may be demonstrated by paid or unpaid experience and/or completion of specific, intensive training (for example, IT certification), as appropriate. You must have IT-related experience demonstrating each of the required competencies listed below and must meet or exceed the minimum proficiency level established for each by grade level. For more information, see Competency-Based Qualification Standard for the Information Technology Management Series, 2210. You qualify at the GS-14, if you have the following competencies: * Attention to Detail - Is thorough when performing work and conscientious about attending to detail. (Minimum Proficiency Level: 4) * Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. (Minimum Proficiency Level: 4) * Decision Making - Makes sound, well-informed, and objective decisions; perceives the impact and implications of decisions; commits to action, even in uncertain situations, to accomplish organizational goals; causes change. (Minimum Proficiency Level: 3) * Information Management - Identifies a need for and knows where or how to gather information; organizes and maintains information or information management systems. (Minimum Proficiency Level: 4) * Interpersonal Skills - Shows understanding, friendliness, courtesy, tact, empathy, concern, and politeness to others; develops and maintains effective relationships with others; may include effectively dealing with individuals who are difficult, hostile, or distressed; relates well to people from varied backgrounds and different situations. (Minimum Proficiency Level: 4) * Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. (Minimum Proficiency Level: 3) * Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. (Minimum Proficiency Level: 4) * Teamwork - Encourages and facilitates cooperation, pride, trust, and group identity; fosters commitment and team spirit; works with others to achieve goals. (Minimum Proficiency Level: 4) * Technical Competence - Uses knowledge that is acquired through formal training or on-the-job experience to perform ones job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. (Minimum Proficiency Level: 4) AND SPECIALIZED EXPERIENCE: In addition to meeting the competency requirement listed above, you must have at least one year of specialized experience at the next lower GS-grade level (or equivalent). Specialized experience is experience that has equipped you with the particular competencies/knowledge, skills, and abilities to successfully perform the duties of the position and is typically in or related to the work of the position to be filled. Such experience is typically gained in the IT field or through the performance of work where the primary concern is IT. You qualify at the GS-14 grade level, if you have: At least one (1) year of specialized experience at the GS-13 grade level (or equivalent) performing all the following duties: * Leading or supervising a cybersecurity, cyber operations, or cyber threat analysis team; including planning work, assigning tasks, evaluating performance or work products, and managing workloads or operational priorities; * Applying cyber threat, vulnerability, incident, network defense, or security operations information to support cyber defense activities, such as incident response, threat hunting, security operations, vulnerability response, detection development, or risk mitigation; AND * Developing, implementing, or improving cybersecurity plans, procedures, playbooks, workflows, analytic products, or operational processes for cyber defense, cyber operations, or cyber threat analysis missions or capabilities. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement. Education Education may not be substituted for experience. You must meet the qualification requirements specified in the "Qualifications"section of this announcement., * Accountability * Attention to Detail * Customer Service * Decision Making * Decisiveness * Flexibility * Information Management * Interpersonal Skills * Oral Communication * Problem Solving * Resilience * Teamwork * Technical Competence The USA Hire Assessment includes a cut score based on the minimum level of required proficiency in these critical general competencies. You will not be considered for the position if you score below the cut score or fail to complete the assessment. ## Description * Sign in * My jobs * Profile * Resumes & documents * Notifications * Talent networks * Sign out * My jobs * Profile * Resumes & documents * Notifications * Talent networks * Sign out * Events * Help Center * Search, This announcement is issued under the Direct Hire Authority (DHA) to recruit for positions for which there is a critical hiring need. Selectee(s) will receive a career or career-conditional appointment in the competitive service and may be required to serve a one year probationary period., Help Typical work assignments include, but are not limited to: * Leading a mission-focused Cyber Threat Intelligence (CTI) section within CISA Threat Hunting, supervising federal employees and coordinating contractor support to deliver timely, accurate, and actionable CTI in support of national cyber defense operations. * Directing CTI support to high-priority Threat Hunting missions, including proactive hunts, incident response engagements, targeted notifications, vulnerability exploitation analysis, operational priorities, and senior leadership decision-making. * Overseeing analysis of advanced cyber threats, including nation-state and other highly capable adversaries, by guiding analysts as they assess adversary infrastructure, malware, tools, tactics, techniques, procedures, victimology, and targeting. * Building strong working relationships across CISA Threat Hunting, the Cybersecurity Division, interagency partners, law enforcement, intelligence community partners, private-sector stakeholders, and vendors to improve threat visibility and coordinated defensive action. * Managing section priorities, workloads, deliverables, and surge support in a fast-moving operational environment where emerging threats, active incidents, customer requirements, and long-term program improvements must be balanced. * Reviewing and approving CTI products, briefings, actor profiles, campaign assessments, SOPs, work instructions, and other deliverables to ensure analytic rigor, technical accuracy, operational relevance, and clear communication. * Developing analysts, team leads, and future leaders by setting clear expectations, providing constructive feedback, strengthening analytic tradecraft, encouraging initiative, and building a professional, accountable, mission-driven team culture. Requirements Help Conditions of employment * You must be a U.S. citizen. * Complete the initial online assessment and USA Hire Assessment, if required. * Selective Service - Males born after 12/31/59 must be registered or exempt from Selective Service, see http://www.sss.gov/ * All Federal employees are required to participate in Direct Deposit/Electronic Funds Transfer for salary payments. * DHS uses E-Verify, an Internet-based system, to confirm the eligibility of all newly hired employees to work in the United States. Learn more about E-Verify, including your rights and responsibilities. * You must be able to obtain and maintain a security clearance suitable for Federal employment as determined by a background investigation. This may include a credit check, a review of financial issues, as well as certain criminal offenses and illegal use or possession of drugs. * This position may be designated as essential personnel. Essential personnel must be able to serve during continuity of operation events without regard to declarations of liberal leave or government closures due to weather, protests, and acts of terrorism or lack of funding. Failure to report for or remain in this position may result in disciplinary or adverse action in accordance with applicable laws, rules, and regulations (5 U.S.C. 7501-7533 and 5 CFR Part 752, as applicable). * This position has been identified as a drug testing designated position (TDP) for purposes of the CISAs Drug-Free Workplace Program. All applicants tentatively selected for this position will be required to submit to a drug test to screen for illicit/illegal drug use prior to receiving a final offer of employment. A final offer of employment is contingent upon a negative drug test result. After appointment, you may be subject to periodic random drug testing., * If you receive a conditional offer of employment for this position, you will be required to complete an Optional Form 306, Declaration for Federal Employment, and to sign and certify the accuracy of all information in your application, prior to entry on duty. False statements on any part of the application may result in withdrawal of offer of employment, dismissal after beginning work, fine, or imprisonment. * Additional vacancies may be filled with this announcement. * A one-year probationary period may be required during which we will evaluate your fitness and whether your continued employment advances the public interest. We may consider your performance and conduct, the needs and interests of the agency, whether your continued employment would advance organizational goals of the agency or the Government, and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your probationary period your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. * Under provisions of the Civil Service Reform Act, first time supervisors and/or managers will be required to serve a one-year probationary period. You may also be required to complete an appropriate supervisory training course within one year of assignment to this position. Reasonable Accommodation (RA) Requests: If you believe you have a disability (i.e., physical or mental), covered by the Rehabilitation Act of 1973 as amended that would interfere with completing the USA Hire Competency Based Assessments, you will be granted the opportunity to request a RA in your online application. Requests for RA for the USA Hire Competency Based Assessments and appropriate supporting documentation for RA must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests for RA are made on a case-by-case basis. If you meet the minimum qualifications of the position, after notification of the adjudication of your request, you will receive an email invitation to complete the USA Hire Competency Based Assessments, based on your adjudication decision. You must complete all assessments within 48 hours of receiving the URL to access the USA Hire Competency Based Assessments, if you received the link after the close of the announcement. To determine if you need a RA, please review the Procedures for Requesting a Reasonable Accommodation for Online Assessments. Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office. Expand Hide additional information Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution., All documents, including transcripts, must be in English. 1. RESUME: Limit your resume to no more than two pages. The USAJOBS database will not allow an applicant to submit an application that includes a resume over two pages. Be clear and specific in describing your job-related qualifications, as HR cannot make assumptions regarding your experience. For qualification determination, you MUST include dates of employment (month and year) and hours worked per week. For Federal civilian service, you MUST include your series and grade. Do NOT include photographs, social media links (e.g., LinkedIn, GitHub), inappropriate content, or other personal or sensitive information such as date of birth, social security number, gender, religious affiliation. IF INCLUDED YOUR RESUME WILL NOT BE CONSIDERED. 2. COMPLETE APPLICATION QUESTIONNAIRE AND ONLINE USA HIRE ASSESSMENTS * If you are requesting a reasonable accommodation for the USA Hire Assessments, submit a Reasonable Accommodation Request and provide documentation to support your request. 3. OTHER SUPPORTING DOCUMENTS (only submit if applicable): * CURRENT OR FORMER FEDERAL CIVILIAN EMPLOYEE: Submit a copy of your most recent SF-50, Notification of Personnel Action which shows the grade, step, tenure (block 24) "1" (Career) or "2" (Career-Conditional), and position occupied (block 34) "1" (Competitive Service). Schedule Policy/Career employees submit a copy of your initial appointment SF-50 and proof of competitive status. Provide proof of permanent appointment if applying based on an Interchange Agreement. If applying for a higher grade, provide a SF-50 which shows the length of time you have been in your current/highest grade or promotion potential held. You may need to provide more than one (1) SF-50,if your SF-50 does not clearly demonstrate that you meet the one-year time-in-grade requirement(examples of appropriate SF-50s include Appointment/Conversion, Within-Grade/Range Increases and Promotion actions). NOTE: Pay adjustments and awards are NOT acceptable. * VETERAN DOCUMENTATION: Submit a copy of your DD-214, Certificate of Release or Discharge from Active Duty (Member Copy 4 or equivalent). * ACTIVE DUTY SERVICE MEMBERS: If applying based on eligibility under the Veterans Opportunity to Work (VOW) Act, you must submit certification from the Armed Forces that you will be discharged or released from active duty within 120 days from the date on the certification. This must indicate your dates of active service, rank/grade, expected character of service (i.e., honorable or general) and type of separation (i.e., separation or retirement). NOTE: The VOW Act provides tentative preference. If selected, a DD-214 must be provided prior to appointment. * 10-POINT VETERANS PREFERENCE: If claiming 10-point Veterans Preference, you will need to submit a SF-15 and provide an official document from the Department of Veterans Affairs or from a branch of the Armed Forces certifying your overall compensable service-connected disability rating (NOTE: Your overall percentage must be clearly shown), and/or any other associated documentation based on your preference. * INTERAGENCY/CAREER TRANSITION ASSISTANCE PROGRAM (I/CTAP): Submit a copy of the following: * Reduction in Force (RIF) separation notice, notice of proposed removal for failure to relocate, notice of disability annuity termination, or certification from the National Guard Bureau or Military Department that you are eligible for disability retirement; * SF-50 "Notification of Personnel Action", documenting your RIF separation, noting your position, grade level, and duty location, and/or Agency certification of inability to place you through reemployment priority list (RPL), etc.; * Latest performance appraisal including your rating; AND * Any documentation from your agency that shows your current promotion potential. * CURRENT OR FORMER POLITICAL SCHEDULE A, SCHEDULE C, NON-CAREER SES OR PRESIDENTIAL APPOINTEE EMPLOYEE: Submit a copy of your applicable SF-50, along with a statement that provides the following information regarding your most recent political appointment: * Position title; * Type of appointment (Schedule A, Schedule C, Non-career SES, or Presidential Appointee); * Agency; AND * Beginning and ending dates of appointment., * Access USA Hire using your unique assessment link. Access is granted through your USAJOBS login credentials. * Review all instructions prior to beginning your assessments. You will have the opportunity to request a testing accommodation before beginning the assessments should you have a disability covered under the Rehabilitation Act of 1973 as amended. * Set aside about 1 hours to take the USA Hire assessments; however, most applicants complete the assessments in less time. If you need to stop the assessments and continue later, you can re-use your unique assessment link. * Your responses to the USA Hire Assessments will be reused for one year (in most cases) from the date you complete an assessment. If future applications you submit require completion of the same assessments, your responses will be automatically reused. Visit the USA Hire Applicant Resource Center for practice assessments and assessment preparation resources. To update your application, including supporting documentation: You may update your application documents and some questions related to your personal information at any time during the announcement open period. However, you will not be able to make changes to questions related to assessing the minimum qualifications and competencies (knowledge, skills, abilities and other characteristics) mentioned in the "How You Will Be Evaluated" section above. To make an allowed update to your application, return to your USAJOBS account. There you will find a record of your application, the application status, and an option to Edit my application. This option will no longer be available once the announcement has closed. To verify the status of your application, log into your USAJOBS account at https://usajobs.gov, all your applications will appear on the Welcome screen. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: https://help.usajobs.gov/how-to/application/status. Shared Certificate: After CISA completes its hiring, the resumes of the remaining candidates referred for selection consideration may be shared with other DHS Components. During the application process, you may choose to opt-in if you would like your name, application material, and assessment results to be shared. There is no guarantee of further consideration, and you continue to explore other job opportunity announcements. Short Essay Questions: The vacancy questionnaire includes four short, free-response essay questions. This provides an opportunity for you to highlight your dedication to public service for the hiring manager and agency leadership (or designee(s)). While your responses are not required and will not be scored, we encourage you to thoughtfully address each question. Please provide a response of 200 words or less to each question. You will be asked to certify that you are using your own words and did not use a consultant or artificial intelligence (AI) such as a large language model (LLM) like ChatGPT or Copilot., The Federal hiring process is set up to be fair and transparent. Please read the following guidance. Criminal history inquiries Equal Employment Opportunity (EEO) Policy Financial suitability New employee probationary period Privacy Act Reasonable accommodation policy Selective Service Signature and false statements Social security number request Required Documents Help All documents, including transcripts, must be in English. 1. RESUME: Limit your resume to no more than two pages. The USAJOBS database will not allow an applicant to submit an application that includes a resume over two pages. Be clear and specific in describing your job-related qualifications, as HR cannot make assumptions regarding your experience. For qualification determination, you MUST include dates of employment (month and year) and hours worked per week. For Federal civilian service, you MUST include your series and grade. Do NOT include photographs, social media links (e.g., LinkedIn, GitHub), inappropriate content, or other personal or sensitive information such as date of birth, social security number, gender, religious affiliation. IF INCLUDED YOUR RESUME WILL NOT BE CONSIDERED. 2. COMPLETE APPLICATION QUESTIONNAIRE AND ONLINE USA HIRE ASSESSMENTS * If you are requesting a reasonable accommodation for the USA Hire Assessments, submit a Reasonable Accommodation Request and provide documentation to support your request. 3. OTHER SUPPORTING DOCUMENTS (only submit if applicable): * CURRENT OR FORMER FEDERAL CIVILIAN EMPLOYEE: Submit a copy of your most recent SF-50, Notification of Personnel Action which shows the grade, step, tenure (block 24) "1" (Career) or "2" (Career-Conditional), and position occupied (block 34) "1" (Competitive Service). Schedule Policy/Career employees submit a copy of your initial appointment SF-50 and proof of competitive status. Provide proof of permanent appointment if applying based on an Interchange Agreement. If applying for a higher grade, provide a SF-50 which shows the length of time you have been in your current/highest grade or promotion potential held. You may need to provide more than one (1) SF-50,if your SF-50 does not clearly demonstrate that you meet the one-year time-in-grade requirement(examples of appropriate SF-50s include Appointment/Conversion, Within-Grade/Range Increases and Promotion actions). NOTE: Pay adjustments and awards are NOT acceptable. * VETERAN DOCUMENTATION: Submit a copy of your DD-214, Certificate of Release or Discharge from Active Duty (Member Copy 4 or equivalent). * ACTIVE DUTY SERVICE MEMBERS: If applying based on eligibility under the Veterans Opportunity to Work (VOW) Act, you must submit certification from the Armed Forces that you will be discharged or released from active duty within 120 days from the date on the certification. This must indicate your dates of active service, rank/grade, expected character of service (i.e., honorable or general) and type of separation (i.e., separation or retirement). NOTE: The VOW Act provides tentative preference. If selected, a DD-214 must be provided prior to appointment. * 10-POINT VETERANS PREFERENCE: If claiming 10-point Veterans Preference, you will need to submit a SF-15 and provide an official document from the Department of Veterans Affairs or from a branch of the Armed Forces certifying your overall compensable service-connected disability rating (NOTE: Your overall percentage must be clearly shown), and/or any other associated documentation based on your preference. * INTERAGENCY/CAREER TRANSITION ASSISTANCE PROGRAM (I/CTAP): Submit a copy of the following: * Reduction in Force (RIF) separation notice, notice of proposed removal for failure to relocate, notice of disability annuity termination, or certification from the National Guard Bureau or Military Department that you are eligible for disability retirement; * SF-50 "Notification of Personnel Action", documenting your RIF separation, noting your position, grade level, and duty location, and/or Agency certification of inability to place you through reemployment priority list (RPL), etc.; * Latest performance appraisal including your rating; AND * Any documentation from your agency that shows your current promotion potential. * CURRENT OR FORMER POLITICAL SCHEDULE A, SCHEDULE C, NON-CAREER SES OR PRESIDENTIAL APPOINTEE EMPLOYEE: Submit a copy of your applicable SF-50, along with a statement that provides the following information regarding your most recent political appointment: * Position title; * Type of appointment (Schedule A, Schedule C, Non-career SES, or Presidential Appointee); * Agency; AND * Beginning and ending dates of appointment., The Federal hiring process is set up to be fair and transparent. Please read the following guidance. Criminal history inquiries Equal Employment Opportunity (EEO) Policy Financial suitability New employee probationary period Privacy Act Reasonable accommodation policy Selective Service Signature and false statements Social security number request Cybersecurity and Infrastructure Security Agency The Department of Homeland Security (DHS) is calling on those who want to help protect American interests and secure our Nation. DHS Components work collectively to prevent terrorism; secure borders and our transportation systems; protect the President and other dignitaries; enforce and administer immigration laws; safeguard cyberspace; and ensure resilience to disasters. We achieve these vital missions through a diverse workforce spanning hundreds of occupations. Make an impact; join DHS. The Cybersecurity and Infrastructure Security Agency (CISA) leads the national effort to defend critical infrastructure against the threats of today, while working with partners across all levels of government and in the private sector to secure against the evolving risks of tomorrow. CISAs mission includes protecting the Federal Governments networks and physical infrastructure, to helping entities in the public and private sectors manage potential risk, to enhancing public safety communications at all levels of government. CISAs multi-faceted mission is home to a wide range of career fields including cybersecurity, program management, business administration, communications, and data science. Joining CISA means being part of the team focused on securing the Nations physical and cyber infrastructure against threats to public health and safety, economy, and national security; we Defend Today, Secure Tomorrow.