Deputy Director for Threat Analysis and Incident Response

Open: April 16, 2026 — Closes: April 30, 2026

Summary

This position serves as Deputy Director for the Threat Analysis and Incident Response organization, a key member of the CESER senior leadership team. TAIR assesses and mitigates risks to the energy sector by working with industry and government partners. Leads response and recovery efforts for cyber, physical, and natural incidents impacting the energy sector, providing situational awareness, facilitating technical assistance, regulatory waivers, and expertise to support restoration.

Major Duties

As the Deputy Director for Threat Analysis and Incident Response, you will, Lead strategic risk mitigation for the energy sector: Integrate physical and cyber threat intelligence to develop a unified risk picture for critical energy infrastructure. This includes overseeing advanced risk models for climate, physical, and cyber impacts, and directing ongoing risk identification and monitoring of adversary activity and Information Technology (IT) and Operational Technology (OT) vulnerabilities. Overseeing an operational collaborative that convenes experts from DOE and the energy sector to collectively identify, analyze, and mitigate threats to America's critical energy infrastructure.

The Energy Threat Analysis Center (ETAC) integrates industry data and context with government intelligence to enable collaboration and information sharing of threats. Exercise Federal Power Act authority: Utilize Section 202(c) of the Federal Power Act, in coordination with DOE General Counsel, to issue Emergency Orders for grid security and reliability. Collaborate with interagency partners on regulatory waivers and update DOE's emergency authority processes as needed.

Oversee national programs to boost technical resilience, build capacity, and implement security best practices for energy owners and operators. Direct Cybersecurity Risk Information Sharing Program (CRISP) for IT/OT network monitoring and data sharing and oversee EAGLE-I for real-time situational awareness during outages. Oversee federal energy emergency response and recovery: Serve as the executive lead for Emergency Support Function #12 (Energy), coordinating federal response to restore energy during outages or national emergencies.

Direct CESER's 24/7/365 federal responses, manage responder deployment, and support resource allocation. Direct the development of national-level programs designed to increase the technical resilience of energy owners and operators, providing them with the tools necessary to defend against threat and enhance their defensive posture. Managing programs designed to build technical capacity and security best practices for the energy sector.