Ethical Hacker

Lead and execute enterprise penetration testing campaigns across CMS systems and applications, including cloud and hybrid environments.

Design and conduct advanced adversary simulations and red team exercises to identify systemic weaknesses across interconnected infrastructure, identity services, and applications.

Develop and maintain custom exploit tools, scripts, and automated testing capabilities to enhance vulnerability discovery and testing efficiency.

Conduct enterprise risk assessments and threat modeling to identify high-impact attack paths and recommend mitigation strategies aligned with federal cybersecurity standards.

Integrate threat intelligence, vulnerability data, and testing results into continuous security improvement initiatives and remediation roadmaps.

ALL QUALIFICATION REQUIREMENTS MUST BE MET BY THE CLOSING DATE OF THIS ANNOUNCEMENT. Your resume (limited to no more than 2 pages) must include detailed information as it relates to the responsibilities and specialized experience for this position.

Evidence of copying and pasting directly from the vacancy announcement without clearly documenting supplemental information to describe your experience will result in an ineligible rating. This will prevent you from receiving further consideration.

Basic Requirement: You must have IT-related experience demonstrating each of the four competencies listed below: 1. Attention to Detail - is thorough when performing work and conscientious about attending to detail; 2.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services; 3.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately; AND 4.

Problem Solving - identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

AND In order to qualify for the GS-14, you must meet the following: You must demonstrate in your resume at least one year (52 weeks) of qualifying specialized experience equivalent to the GS-13 grade level in the Federal government, obtained in either the private or public sector, to include: 1.

Designing and conducting advanced ethical hacking campaigns, including multi-phase attack simulations, AND; 2. Developing or customizing exploit frameworks, scripts, or automation tools, AND; 3. Conducting vulnerability assessments and translating findings into prioritized remediation strategies, AND; 4.

Providing technical recommendations to leadership on enterprise cybersecurity risk. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social).

Volunteer work helps build critical competencies, knowledge, and skills, and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Click the following link to view the occupational questionnaire: https://apply.usastaffing.gov/ViewQuestionnaire/13024809