PolicyBrief
H.R. 1034
119th CongressFeb 5th 2025
DHS Cybersecurity On-the-Job Training Program Act
IN COMMITTEE

This bill establishes a voluntary on-the-job training program to prepare Department of Homeland Security employees for internal cybersecurity roles.

Sylvester Turner
D

Sylvester Turner

Representative

TX-18

LEGISLATION

DHS Launches Internal Cyber Career Track: New 7-Year Training Program Aims to Fill Security Vacancies from Within.

The DHS Cybersecurity On-the-Job Training Program Act sets up a voluntary pipeline for current Department of Homeland Security employees to pivot their careers into cybersecurity. Instead of just looking for outside hires to fill critical security gaps, the bill directs the agency to build an internal academy. This program will use established national standards to train staff through a mix of digital courses, traditional classrooms, and hands-on mentoring from senior cyber pros. To keep things transparent, the bill mandates a seven-year reporting cycle where the department must disclose exactly how many people are being trained and where they end up working.

Upskilling the Front Lines

Think of this like a corporate tuition-reimbursement plan, but with a more direct path to a new desk. If you’re currently working in a non-tech role at DHS—maybe you're in logistics or administrative support—this bill creates a formal way to trade your current toolkit for a digital one. By leveraging the Federal Cyber Defense Skilling Academy, the program ensures that a TSA officer or a FEMA coordinator has a roadmap to become a cybersecurity analyst without having to quit their job or go back to school on their own dime. The bill specifically mentions 'continuing service agreements,' which is policy-speak for a fair trade: the government pays for your high-level training, and you agree to stick around for a few years to use those skills where they’re needed most.

Tracking the Talent Gap

One of the smarter moves in this legislation is the requirement for the Under Secretary for Management to track and report vacancies annually. It’s not just about offering classes; it’s about making sure the training actually meets the department’s needs. For example, if there’s a massive shortage of cloud security experts in the Coast Guard, the reporting requirements under Section 2 are designed to highlight that gap so the training curriculum can be adjusted. This data-driven approach aims to prevent the government from training people for roles that don't exist while critical positions stay empty. It’s a practical attempt to treat the agency’s 240,000+ employees as a talent pool rather than just a payroll list.

The Fine Print on Implementation

While the bill is a win for professional development, it does leave some room for interpretation. The Director is given the authority to use 'other methods' for training beyond the standard classroom or online models. While this flexibility is great for fast-moving tech, it means the quality of the education could vary depending on who is running the show. Additionally, the 'participation criteria' aren't set in stone yet; the Director gets to decide who qualifies for the program. For the average taxpayer, the success of this bill hinges on whether DHS can actually turn a beginner into a pro effectively enough to protect national infrastructure, or if it will simply become another bureaucratic checkbox. However, by focusing on internal recruitment, the bill tries to solve a high-stakes labor shortage by investing in the people who already know how the department works.