DHS' recent rulemaking for a 2014 law gives the Cybersecurity and Infrastructure Security Agency a lot of discretion in hiring cybersecurity people.
