Network Intrusion Forensic Analyst
Summary
Joining the Secret Service, Office of Investigations, National Computer Forensics Institute, Hoover, AL , will allow you to draw on your technological expertise to perform complex network intrusion investigations, computer/digital media forensic examinations, as well as criminal case preparation and subsequent prosecution associated with the attempted criminal exploitation of the nation’s critical infrastructure. For more information on the Secret Service click here.
Responsibilities
The selectee will serve as a Network Intrusion Forensic Analyst in the Office of Investigations, National Computer Forensics Institute. Typical work assignments include:
- Serves as subject matter expert and principal advisor/analyst to senior-level stakeholders and other applicable stakeholders on matters involving the implementation and compliance of the Network Intrusion Forensics Analyst (NIFA) Program to ensure that work efforts and activities meet the overall mission and guidance of the agency; defines, interprets, and implements policy as it relates to investigative methods, evidence recovery, and forensics analysis.
- Serves as an expert analyst and technical advisor on computer and data forensics management and implementation; serves as a Contracting Officer’s Representative (COR) in managing awarded contracts and collaborates with internal and external stakeholders on forensics contract management and task orders development.
- Serves as an Network Intrusion Forensics Analyst (NIFA) and is responsible for providing expert guidance in network and digital forensics, including, but not limited to network intrusion investigations; computer forensics analysis, including imaging and processing digital media; locating and identifying evidence of network intrusions; validating testing of computer forensics hardware and software; and participating in setting up virtualized computer system environments on stand-alone workstations.
- Serves as a technical expert and testifies as a witness (as required) at trials in support of evidentiary findings including, but not limited to responding to questions from counsel, articulating findings, methods and procedures; works under the legal authority of court orders, search warrants and other legal processes to gain access to electronic equipment, files, records, databases, images, and storage devices to prepare pertinent items of evidence for examination obtained from evidence collection procedures and findings.
- Prepares technical and complex comprehensive written reports and presentations outlining forensics findings for internal and external stakeholders including, but not limited to case agents, investigators, senior-level management, attorneys, and prosecutors; make formal presentations to senior-level management on forensics findings; deliver training to include continuous improvement of NITRO training strategies and updates to training material for specific NITRO courses or training modules, and explain complex technical issues to non-technical stakeholders.
Travel Required
Occasional travel
Conditions of Employment
- U.S. citizenship is required.
Conditions of Employment If selected for this position, you will be required to:
- Obtain and maintain a top secret Tier 5 clearance. For more information visit OPM Mythbuster Page.
- Submit to a drug test prior to your appointment and random drug testing while you occupy the position.
- If selected you must maintain a TS/SCI clearance and you may be required to submit to a polygraph examination.
- Physical Demands: The incumbent may be requested to perform inventory and process evidence, which requires walking, bending, stretching, crawling and lifting. Additionally, when instructing and supporting the NITRO program, the employee should anticipate being on their feet and/or walking for an extended period of time.
- Work Environment: The work is primarily performed in an office setting, but the incumbent will be requested to assist in the seizure and transportation of electronic evidence as well as providing classroom instruction.
- Overtime work may be required due to the time-sensitive nature of the work performed.
- Work may require incumbent to (occasionally) work for extended hours with relatively short notice.
- Mandatory training is required which must be successfully completed within the first year of employment in the following areas: Computer Forensic and NITRO Training.
Veterans: Qualified veterans who have a compensable service-connected disability of at least 10% are listed in the best qualified category, except when the position being filled is scientific, professional at the GS-09 grade level, or higher. This position is not considered scientific/professional. Other 10-point preference eligibles and veterans with 5-point preference who meet the eligibility and qualification requirements are placed above non-preference eligibles within the category in which they qualify. For information on veterans’ preference, please click here.
Qualifications
GS-13: You qualify for the GS-13 level (starting salary $88,712) if you possess one year of specialized experience equivalent to the GS-12 level performing duties such as: conducting computer forensic analysis; conducting network forensic analysis; and mobile device forensic analysis, and providing computer forensic support to law enforcement investigations in the form of evidence seizure and data recovery; managing awarded contracts i.e., serving as a Contract Officer Representative (COR).
Writing Sample: If selected for an interview you will be requested to provide samples of your forensic evidence examination reports.
Interview Requirement: Interviews are required for this position. Failure to complete the interview may result in removal from further consideration.
National Service Experience (i.e., volunteer experience): Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Qualifications Must Be Met: The qualification requirements listed above must be met by the closing date of this announcement.
The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office.