1. Short title This Act may be cited as the DHS Cybersecurity On-the-Job Training Program Act . 2. DHS Cybersecurity On-the-Job Training Program (a) In general Subtitle A of title XXII of the Homeland Security Act of 2002 ( 6 U.S.C. 141 et seq. ) is amended by adding at the end the following new section: 2220F. DHS Cybersecurity On-the-Job Training Program (a) In general There is established within the Agency a DHS Cybersecurity On-the-Job Training Program (in this section referred to as the Program ) to voluntarily train Department employees who are not currently in a cybersecurity position for work in matters relating to cybersecurity at the Department. The Program shall be led by the Director, in consultation with the Under Secretary for Management. (b) Duties of the Director In carrying out the Program under subsection (a), the Director— (1) shall develop a curriculum for the Program, incorporating any existing curricula as appropriate, and consistent with the National Initiative for Cybersecurity Education Framework or any successor framework, which may include distance learning instruction, in-classroom instruction within a work location, on-the-job instruction under the supervision of experienced cybersecurity staff, or other means of training and education as determined appropriate by the Director; (2) shall develop criteria for participation in the Program; (3) in accordance with paragraph (1), shall provide cybersecurity training to employees of the Department and may, as appropriate, provide cybersecurity training to other Federal employees; and (4) shall annually for seven years submit to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs of the Senate a report that includes— (A) information relating to the number of employees who participated in the Program in the preceding year; (B) an identification of the positions into which employees trained through the Program were hired after such training