SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘DHS Cybersecurity 
On-the-Job Training Program Act’’. 
SEC. 2. DHS CYBERSECURITY ON-THE-JOB TRAINING PRO-
GRAM. 
(a) IN GENERAL.—Subtitle A of title XXII of the 
Homeland Security Act of 2002 (6 U.S.C. 141 et seq.) 
is amended by adding at the end the following new section: 
‘‘SEC. 2220F. DHS CYBERSECURITY ON-THE-JOB TRAINING 
PROGRAM. 
‘‘(a) IN GENERAL.—There is established within the 
Agency a ‘DHS Cybersecurity On-the-Job Training Pro-
gram’ (in this section referred to as the ‘Program’) to vol-
untarily train Department employees who are not cur-
rently in a cybersecurity position for work in matters re-
lating to cybersecurity at the Department. The Program 
shall be led by the Director, in consultation with the 
Under Secretary for Management. 
‘‘(b) DUTIES OF THE DIRECTOR.—In carrying out 
the Program under subsection (a), the Director— 
‘‘(1) shall develop a curriculum for the Pro-
gram, incorporating any existing curricula as appro-
priate, and consistent with the National Initiative 
for Cybersecurity Education Framework or any suc-
cessor framework, which may include distance learn-
ing instruction, in-classroom instruction within a
work location, on-the-job instruction under the su-
pervision of experienced cybersecurity staff, or other 
means of training and education as determined ap-
propriate by the Director; 
‘‘(2) shall develop criteria for participation in 
the Program; 
‘‘(3) in accordance with paragraph (1), shall 
provide cybersecurity training to employees of the 
Department and may, as appropriate, provide cyber-
security training to other Federal employees; and 
‘‘(4) shall annually for seven years submit to 
the Committee on Homeland Security of the House 
of Representatives and the Committee on Homeland 
Security and Governmental Affairs of the Senate a 
report that includes— 
‘‘(A) information relating to the number of 
employees who participated in the Program in 
the preceding year; 
‘‘(B) an identification of the positions into 
which employees trained through the Program 
were hired after such training; 
‘‘(C) a description of metrics used to meas-
ure the success of the Program; 
‘‘(D) copies of the reports submitted pur-
suant to (c)(1); and
‘‘(E) any additional information relating to 
the duties specified in this subsection. 
‘‘(c) DUTIES OF THE UNDER SECRETARY FOR MAN-
AGEMENT.—In carrying out the Program under sub-
section (a), the Under Secretary for Management shall— 
‘‘(1) submit to the Secretary an annual report 
on the status of vacancies in cybersecurity positions 
throughout the Department; 
‘‘(2) support efforts by the Director to identify 
and recruit individuals employed by the Department 
to participate in the Program; 
‘‘(3) implement policies, including continuing 
service agreements, to encourage participation in the 
Program by employees throughout the Department; 
and 
‘‘(4) conduct outreach to employees who com-
plete the Program regarding cybersecurity job op-
portunities within the Department.’’. 
(b) CLERICAL AMENDMENT.—The table of contents 
in section 1(b) of the Homeland Security Act of 2002 is
amended by inserting after the item relating to section 
2220E the following new item: 
‘‘Sec. 2220F. DHS Cybersecurity On-the-Job Training Program.’’. 
Passed the House of Representatives September 24, 
2024. 
Attest: 
Clerk.
118TH CONGRESS 
2D SESSION 
H. R. 3208 
AN ACT 
To amend the Homeland Security Act of 2002 to 
establish a DHS Cybersecurity On-the-Job 
Training Program, and for other purposes.