Cyber Command has drastically cut hiring time for cybersecurity roles, says DOD CISO

The Cyber Excepted Service program is bearing some fruit, Department of Defense CISO Jack Wilmer says.

Cyber Command has recently cut down the average amount of time it takes to hire someone by approximately 60 percent — 111 days to 44 days — under the Cyber Excepted Service program, according to the Department of Defense CISO Jack Wilmer.

The CES program, intended to speed up cybersecurity candidate recruitment in the DOD through initiatives like allowing hiring managers to make direct hires, was originally authorized in 2016 by Congress.

The CES also establishes market-based pay scales and allows hiring with or without public notification or vacancy announcements, both intended to decrease red tape in the Pentagons’ hiring process.

Wilmer said the decrease has given the Department of Defense a leg up on private sector cybersecurity hiring. Since implementing the CES program, the Pentagon has seen fewer cases of candidates leaving DOD jobs on the table for the private sector.

“That is a huge win,” Wilmer said while speaking Thursday at the 2019 Workforce Summit in Washington, D.C., produced by WorkScoop and FedScoop. “Frankly we run into fewer cases [in which] someone accepts a job initially, but because it takes us so long to bring them onboard they find another opportunity.”

Beyond Cyber Command, the Navy and Marine Corps began using CES authorities this summer as part of a so-called “Phase 2” of the program. The Defense Information Systems Agency, the Pentagon’s CIO office, and the Joint Force Headquarters-DoD Information Networks have also been relying on the program.

The CES initiative also works to bring salaries closer to what the private sector can offer.

“Cyber Excepted Service … gives us the authority to bring people into the department faster and to actually provide different compensation for those individuals that is more in line with what the market can actually bear,” Wilmer said.

But while the Pentagon has been working to boost salaries, Wilmer noted that the most enticing prospect about working at the DOD is about the mission — fighting U.S. adversaries — not the pay.

As a result, Pentagon leadership isn’t necessarily focused on providing salary that surpasses averages in private sector, Wilmer said. Instead, it’s about getting Pentagon cybersecurity role compensation closer to private sector standards.

“What our goal is on the compensation front is not to try and beat industry. It’s just to enable those people that are making mission choice to work with us … to have more competitive pay.”

Cyber scholarship-for-service students say government has pulled rug on them, potentially burdening them with debt

Hiring freezes, budget cuts and more are raising questions about the future of CyberCorps.

DOD official: We need to drop the cybersecurity talent hiring window to 25 days

Biden set to approve expansive authorities for Pentagon to carry out cyber operations

Government

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure