U.S. Secret Service – D.C., Pennsylvania, and Hawaii

Network Intrusion Forensic Analyst – Open to the public!

Summary

Joining the Secret Service, Office of Investigations, Criminal Investigative Division, will allow you to draw on your technological expertise to perform complex network intrusion investigations, computer/digital media forensic examinations, as well as criminal case preparation and subsequent prosecution associated with the attempted criminal exploitation of the nation’s critical infrastructure. For more information on the Secret Service click here.

Responsibilities

The selectee will serve as a Network Intrusion Forensic Analyst in the Office of Investigations. Typical work assignments include:

• Conducting forensic acquisitions and exams on both live and offline computer systems, multiple operating systems (Windows, Apple, Linux, etc.), and mobile devices; conducting sophisticated network computer forensic analysis.
• Conducting network intrusion investigations and examinations, to include preservation of electronic evidence from both live and offline computer systems, net flow analysis, log analysis, and forensic malware analysis.
• Preparing case summaries of evidence for legal prosecution; assisting in discovery conferences to explain and discuss forensic findings; preparing reports, correspondence, and official messages.

Travel Required

Occasional travel – Occasional travel – Incumbent may be required to travel both domestically and abroad on temporary duty assignments.

Conditions of Employment

• U.S. citizenship is required.

Conditions of Employment If selected for this position, you will be required to:

• Obtain and maintain a top secret Tier 5 clearance. For more information visit OPM Mythbuster Page.
• Submit to a drug test prior to your appointment and random drug testing while you occupy the position.
• If selected you must maintain a TS/SCI clearance and you may be required to submit to a polygraph examination.
• The incumbent may be requested to perform inventory and process evidence, which requires walking, bending, stretching, crawling and lifting. Additionally, when instructing and supporting the NITRO program, the employee should anticipate being on their feet and/or walking for an extended period of time.
• The work is primarily performed in an office setting, but the incumbent will be requested to assist in the seizure and transportation of electronic evidence as well as providing classroom instruction.
• Overtime work may be required due to the time-sensitive nature of the work performed.
• Work may require incumbent to (occasionally) work for extended hours with relatively short notice.
• Mandatory training is required which must be successfully completed within the first year of employment in the following areas: Computer Forensic and NITRO Training.

Qualifications

GS-13: You qualify for the GS-13 level (starting base salary $78,681) if you possess one year of specialized experience equivalent to the GS-12 level performing duties such as providing computer forensic support to law enforcement investigations in the form of evidence seizure and data recovery; conducting computer forensic analysis; conducting network forensic analysis; and mobile device forensic analysis.

Writing Sample: If selected for an interview you will be requested to provide samples of your forensic evidence examination reports.

National Service Experience (i.e., volunteer experience): Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Qualifications Must Be Met: The qualification requirements listed above must be met by the closing date of this announcement.

The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office.

Education

There is no educational requirement for this position.