U.S. Department of the Treasury, OIG – New Carrollton, Maryland

Criminal Investigator

Closes: 05/20/2020


This position is located in the Cybercrime Investigations Division (CCID) within the Office of Investigations (OI) at the Treasury Inspector General for Tax Administration (TIGTA, Office of Investigations (OI).  The incumbent reports to the Assistant Special Agent in Charge (Cybercrimes).


As a Criminal Investigator (CyberCrimes Special Agent) you will:
-Provide expert forensic support through the scientific analysis of electronic evidence.  Conduct computer forensic examinations that are consistent with those standards established by TIGTA and the Department of Justice, as well as, reflective of current trends and techniques within the law enforcement and professional communities.  This may include the testing and validation of forensic software and other appropriate automated analytical tools to meet diverse investigative requirements.
-Develop new techniques, legal processes and approaches. Analyze, and review logs from a wide range of complex hardware and software from large-scale local area network and wide area network systems as it relates to illicit cyber activity, including protocols such as simple mail transfer protocol management systems, communications controllers, bridges, routers, firewalls, and other linked devices that support extensive network operations.
-Testify before Grand Juries, courts of law, or administrative hearings in support of forensic examinations, complex expert opinions, or other technical matters.
-Conduct, oversee, and coordinate investigations into extremely difficult, complex, highly technical, and sensitive matters of interregional and national dimensions, particularly as they relate to computer and computerized evidence.
-Analyze and evaluate operational implications presented in proposed legislation and regulations, which impact on TIGTA investigative programs. 

Travel Required

Occasional travel – 11 or more nights a month

Conditions of Employment

  • Please refer to “Conditions of Employment.”
  • Click “Print Preview” to review the entire announcement before applying.
  • Must be U.S. Citizens or U.S. Nationals.

The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your resume.


You must meet the following requirements by the closing date of this announcement.

Age Restriction: The date immediately preceding an individual’s 37th birthday is the maximum entry age for original appointment to a law enforcement officer position. This requirement does not apply to a) Preference-eligible veterans; OR b) Individuals who are 37 years of age or older and have previously served in law enforcement officer positions that were covered by a special law enforcement retirement plan.

Medical Requirements: The duties of positions in this series require moderate to arduous physical exertion involving walking and standing, use of firearms, and exposure to inclement weather. Manual dexterity with comparatively free motion of finger, wrist, elbow, shoulder, hip, and knee joints is required. Arms, hands, legs, and feet must be sufficiently intact and functioning in order that applicants may perform the duties satisfactorily. Sufficiently good vision in each eye, with or without correction, is required to perform the duties satisfactorily. Near vision, corrective lenses permitted, must be sufficient to read printed material the size of typewritten characters. Hearing loss, as measured by an audiometer, must not exceed 35 decibels at 1000, 2000, and 3000 Hz levels. Since the duties of these positions are exacting and responsible, and involve activities under trying conditions, applicants must possess emotional and mental stability. Any physical condition that would cause the applicant to be a hazard to himself/herself, or others is disqualifying.

 Specialized experience: For the GS-14, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-13grade level in the Federal service. Specialized experience at this level is defined as: -Experience resolving technical inquiries derived from electronic evidence and independently performing cybercrime investigations.

Examples of such specialized experience include:
-Investigating subjects of a technical nature such as cybercrimes or related inquiries into the illicit use of computers and computer related communication technologies; obtaining, discretely handling, and working with cold or fragmentary electronic evidence to initiate investigations or inquiries;
-Developing evidence for difficult cyber-related investigations by conducting forensic media analysis of digital media, reviews of logs such as application, system, or various network logs, or from traditional interrogations, surveillance, documentary examinations, informants, etc.;
-Utilizing various investigative techniques to establish interrelationships between digital records or other electronic evidence; technology-based cases involving jurisdictional problems;
-Leading a multi-agency, technically-oriented task force; performing or leading dangerous and difficult cyber-based undercover and surveillance work, etc.

In addition to the above requirements, you must meet the following time-in-grade requirement, if applicable:
For the GS-14, you must have been at the GS-13 level for 52 weeks.