Intelligence Operations Specialist

Clarification from the agency

All U.S. Citizens

As a Intelligence Operations Specialist, GS-0132-11/12/13, your typical work assignments may include:

• Conducts digital forensic examinations and technical exploitation of electronic media and mobile devices: Performs triage, extraction, and analysis of digital evidence, identifies hidden or obfuscated data using specialized forensic software, develops and applies exploitation methodologies and TTPs.
• Researches, develops, and applies advanced forensic methodologies and tools: Participates in IT projects and technical initiatives, applies scientific principles to collect, analyze, and interpret digital data, supports administration, maintenance, and upgrade of forensic systems.
• Prepares and communicates authoritative oral and written reports, briefings, and recommendations: Presents findings to investigators, stakeholders, and leadership, coordinates with officials, program staff, and representatives of other agencies, ensures findings are clearly presented and actionable.
• Develops and maintains documentation, SOPs, evaluations, and recommendations; coordinates workload and training: Tracks and reports production metrics, provides on-the-job training and supports team development, assists with program support for HI2C forensic priorities and objectives.
• Provides forensic support, training, and customer service to internal and external partners: Ensures compliance with legal, policy, privacy, and civil liberties requirements, resolves customer needs and issues, delivers training on forensic capabilities and tools.
• Collaborates and engages with HI2C teams, functional leads, and customer agencies: Coordinates production and metrics reporting, participates in meetings and process improvements, assists with training and development of HI2C forensic personnel.

All DHS-HQ announcements have a 5-business day open period due to the number of applications received. This announcement will be open for 5 business days OR until the first 100 applications have been received, whichever happens first.

View common definitions of terms found in this announcement: Common Definitions.

Conditions of employment

• You must be a U.S. citizen to apply for this position.
• Males born after 12/31/1959 must be registered for Selective Service.
• You must successfully pass a background investigation.
• You must submit to a pre-employment drug test. This is a Testing Designated Position (TDP) and may require random testing.
• You may be required to serve a two-year trial period.
• Acceptance of an excepted service appointment from applicants in the competitive service will require a written statement of understanding when voluntarily leaving the competitive service.
• Applying to this announcement certifies that you give permission for DHS to share your application with others in DHS for similar positions.
• You will be subject to a pre-employment polygraph examination and random polygraph examinations may be conducted after entry on duty.
• Must obtain and maintain a Top-Secret security clearance.
• You may be required to work in shifts on a rotational basis in support of 24-hour operations.
• You may be required to work other than normal duty hours, which may include evenings, weekends, and/or holidays and/or overtime, and/or 24/7 shift schedules, and/or on-call and standby duty status
• Work may occasionally require travel away from the normal duty station on military or commercial aircraft.

Qualifications

GS-11:
You qualify for the GS-11 grade level if you possess the specialized experience, equivalent to the GS-09 grade level in the Federal government, performing duties such as:

• 5+ years of mastered experience performing forensic extractions, examinations, and/or analysis, basic IT and/or forensic certifications (ie: CompTIA A+/Security +, CCO, CCPA, MCFE) or demonstrated experience performing forensic acquisition and examinations, for law enforcement, CI Investigations and/or Intelligence.
• Familiarity with standard IT (e.g., operating systems, file systems, networks, IT hardware/software troubleshooting) and leading forensic software.
• Working knowledge of leading forensic software (ie: EnCase, Magnet Axiom, Cellebrite, etc.)
• Working knowledge of various mobile and computer technology; to include digital storage devices and computer operating systems.

-OR-

Substitution of Education for Experience
You may substitute your education for your experience if you possess one of the following:

• A Ph.D. or equivalent doctoral degree
• Three (3) full years of progressively higher-level graduate education leading to such a degree
• LL.M., if related

-OR-

Combination of Education and Experience
A combination of successfully completed graduate level education and specialized experience as described above that, when combined, equal 100% of the total requirement. This will be calculated using your resume and unofficial transcripts or a list of courses/course hours submitted with your application.
NOTE: Only graduate education in excess of the first two years may be used to qualify for the GS-11 level.

SPECIALIZED EXPERIENCE GS-12:
You qualify for theGS-12 grade level if you possess one year of specialized experience, equivalent to the GS-11 grade level in the Federal government that demonstrates the following:

• 7+ years of mastered experience performing forensic extractions, examinations, and/or analysis, basic IT and/or forensic certifications (ie: GCFE, GCFA, CCO, CCPA, MCFE) or demonstrated experience performing forensic acquisition and examinations, for law enforcement, CI Investigations and/or Intelligence.
• Demonstrated knowledge of working with standard IT (e.g., operating systems, file systems, networks, IT hardware/software troubleshooting) and leading forensic software.
• Demonstrated knowledge of and ability to use leading forensic software (ie: EnCase, Magnet Axiom, Cellebrite, etc.)
• Demonstrated ability to communicate both orally and in writing to formulate and present findings, briefings, project papers, status reports, and correspondence to foster understanding acceptance of findings and recommendations.

Substitution of education in lieu of specialized experience may not be used for this grade level.

SPECIALIZED EXPERIENCE GS-13:
You qualify for theGS-13 grade level if you possess one year of specialized experience, equivalent to the GS-12 grade level in the Federal government that demonstrates the following:

• 10+ years of mastered experience performing forensic extractions, examinations, and/or analysis, basic IT and/or forensic certifications (ie: CCME, CEH, MCFE, GCFA) or demonstrated experience performing forensic acquisition and examinations, for law enforcement, CI Investigations and/or Intelligence.
• Mastered knowledge of working with standard IT (e.g., operating systems, file systems, networks, IT hardware/software troubleshooting) and leading forensic software.
• Expert knowledge in performing data searches and retrievals from media storage devices and protected media; copied evidence, ensured proper chain-of-custody and storage of media devices; wide range of analytical and evaluative techniques used in assisting digital forensics analysis and threats to homeland security.
• Expert knowledge in preparing and furnishing authoritative oral and written reports to investigators which convey the expert opinion and findings and ability to independently prioritize and complete multiple tasks with little to no supervision.

Substitution of education in lieu of specialized experience may not be used for this grade level.

All qualifications and eligibility requirements must be met by the closing date of the announcement.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

This position is designated as Emergency Essential. Emergency Essential personnel must be able to serve during a continuity of operation event without regard to declarations of liberal leave or government closures due to weather, protests, and acts of terrorism or lack of funding. Failure to report for or remain in this position may result in disciplinary or adverse action in accordance with applicable laws, rules, and regulations (5 U.S.C. 7501-7533 and 5 CFR Part 752, as applicable).

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

We will review your resume and supporting documentation to ensure you meet the basic qualification requirements. If you meet the minimum qualifications, your experience, education and training will be rated using a job questionnaire that is based on the following competencies or knowledge, skills and abilities needed to perform this job: Customer Service, Information Management, Oral Communication, Partnering, Research, and Technical Competence

If you meet the minimum qualifications, you will be placed in one of the following categories:

Best-Qualified: Applicants possessing experience that substantially exceeds the minimum qualifications of the position and demonstrate high proficiency in all of the critical competencies, including all Selective Placement Factors (SPF), and appropriate Quality Ranking Factors (QRF) as determined by the job analysis.

Well-Qualified: Applicants possessing experience that exceeds the minimum qualifications of the position and demonstrates acceptable proficiency in all of the critical competencies, including all SPF's and appropriate QRFs as determined by the job analysis.

Qualified: Applicants possessing experience that meets the minimum qualifications of the position and demonstrate basic proficiency in most of the critical competencies, including all SPFs and appropriate QRFs as determined by the job analysis.

If you are amongst the best qualified, you may be referred to the hiring manager for consideration and may be called for an interview. To preview the job questionnaire and application, click https://apply.usastaffing.gov/ViewQuestionnaire/12960705

Interviews are required for this position. Failure to complete the interview may result in removal from further consideration.

If, after reviewing your resume and/or supporting documentation, a determination is made that you have overstated your qualifications and/or experience, you may be removed from consideration or your score may be lowered.

Consideration may be given to performance appraisals and incentive awards as an indicator of quality of prior experience.

1. Your resume NOTE: Limit your resume to no more than two pages. The USAJOBS database will not allow an applicant to submit an application that includes a resume over two pages. For what to include in the resume, click on the link: USAJOBS Help Center
2. Your responses to the job questionnaire. https://apply.usastaffing.gov/ViewQuestionnaire/12960705
3. Are you qualifying based on education? Submit a copy of your college transcript (unofficial is acceptable) from an accredited institution. Once selected and prior to appointment, applicants must provide an official college transcript. Education completed in foreign colleges or universities may be used to meet Federal qualification requirements if you can show that your foreign education is comparable to education received in accredited educational institutions in the United States. For example, specific courses accepted for college-level credit by an accredited U.S. college or university, or foreign education evaluated by an organization recognized for accreditation by the Department of Education as education equivalent to that gained in an accredited U.S. college or university. It is your responsibility to provide such evidence with your application. See Recognition of Foreign Qualifications for more information.


4. Are you a current or former political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee? Submit a copy of your applicable SF-50, along with a statement that provides the following information regarding your most recent political appointment:
   • Position title,
   • Type of appointment (Schedule A, Schedule C, Non-career SES, or Presidential Appointee),
   • Agency, and
   • Beginning and ending dates of appointment.
5. You may be asked to provide a copy of your recent performance appraisal and/or incentive awards.
6. Are you an IC CAE Scholar? Information on the IC CAE program can be found at https://www.dni.gov/index.php/iccae To verify you are a IC CAE Scholar, you must submit a copy of your transcript that shows you are current student at an active or legacy IC CAE institution, or an individual who has graduated from such an institution, who has successfully completed at least one course in IC CAE study areas, such as Intelligence, National Security, Critical Technologies, STEM, languages, or other areas of study as determined by the Director of National Intelligence (DNI) to meet Intelligence Community needs.

Next steps