U.S. Department of the Treasury, OIG – Washington D.C.

Cybercrimes Special Agent

Closes: 07/06/2020


This position is located in the Department of the Treasury, Office of Inspector General (OIG), Office of Investigations (OI). 

The incumbent is responsible for planning and conducting the full range of investigations of assigned criminal and administrative cases. In addition, the incumbent supports the seizure, examination, and analysis of digital evidence and conducts investigations into internet-based fraudulent schemes, computer network intrusions, and other criminal activity.


As a Criminal Investigator (Cybercrimes Special Agent) , you will:

  • Conduct extremely difficult, complex, technical, and highly sensitive investigations of national and international dimensions, particularly as they relate to cybercrimes and digital evidence. This work often includes the preparation and execution of digital search warrants, court orders and subpoenas; and analysis of digital evidence such as email headers, file metadata, and log files. Plan and manages multi-jurisdictional investigations where methods are subject to changing legal admissibility.
  • Plan and conduct interviews with victims, suspects, witnesses, and informants during case development and analyzes evidence provided by other OIG investigators. Serve search warrants and subpoenas; searches crime scenes for evidence and provides technical assistance to other OIG investigators. Collect and analyze evidence and intelligence from a wide range of sources which include but are not limited to law enforcement agencies, military departments, foreign governments, financial institutions and technology companies.
  • Provide forensic analysis and data mining of large data sets, which often consist of, but is not limited to, account access logs, email search warrant returns, and contents of electronic storage devices seized during criminal or administrative investigations; and conduct research and development projects to resolve developing technical issues which impact on the security of Department of the Treasury (Treasury) and OIG networked systems. Develop new investigative techniques and methods to address techniques that may become obsolete due to changes in data retained by technology companies, and changes in software and hardware platforms used by OIG.
  • Prepare interim and comprehensive final investigative or forensic reports for prosecutive and management officials. Responsible for the coordination and integration of investigative findings to ensure clarity, accuracy, conciseness and presentation of sufficient detail.
  • Testify before Grand Juries, courts, or administrative hearings on the facts of criminal or administrative cases, in particular cases involving internet-based fraudulent schemes, computer system compromise and network intrusions.  
  • Provide expert advice, analysis, and investigative guidance to other Criminal Investigators and managers on all technology-related aspects of OIG investigations. Compile data from other OIG investigators in order to make recommendations for new procedures and policies utilized while conducting cybercrime investigations. Plans, coordinates and initiates contacts with Federal, State, and local officials; the private sector technical community; the law enforcement forensic and network intrusion communities; and individuals responsible for research and development projects for the purpose of developing and applying technical solutions to OIG investigations generally complicated by innumerable jurisdictional problems.

Travel Required

Occasional travel – Travel Nights Per Month: 01 to 05

Conditions of Employment

  • Must be a U.S citizen or U.S National
  • Please refer to “Conditions of Employment”
  • Click “Print Preview” to review the entire announcement before applying

The experience may have been gained in either the public or private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your résumé.


You must meet all eligibility and qualification requirements by the closing date of this announcement.
Medical Requirements: The selectee must pass a pre-appointment physical examination and meet the physical requirements for this position as required by this agency. The duties of this position require moderate to arduous physical exertion involving walking and standing, use of firearms, and exposure to inclement weather. Manual dexterity with comparatively free motion of finger, wrist, elbow, shoulder, hip, and knee joints is required. Arms, hands, legs, and feet must be sufficiently intact and functioning in order that applicants may perform the duties satisfactorily. Sufficiently good vision and hearing are required to perform the duties satisfactorily. Because the duties of this position are exacting, responsible, and sometimes performed under trying conditions, the selectee must possess emotional and mental stability. Any condition that would cause the selectee to be a hazard to himself/herself, or others is disqualifying.

Age Restriction: The date immediately preceding an individual’s 37th birthday is the maximum entry age for original appointment to a position within the OIG as a law enforcement officer. Please note: a) This requirement does not apply to preference-eligible veterans; b) An individual who is 37 years of age or older may be reemployed as a law enforcement officer in the OIG if the individual has prior coverage under the special law enforcement retirement plan.

Specialized experience: For the GS-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes: 

  • Working in a rigorous law enforcement position that has provided the incumbent with experience in investigative techniques, statutes, legal rulings and jurisdictional issues to utilize in formulating policy, provide oversight and technical advice; AND
  • Conducting criminal and administrative cyber-based investigations, as a criminal investigator with the authority to arrest, and to determine violations of Federal laws and regulations; AND
  • Writing search warrants for accounts at email or other digital service providers and analyzing the returns in furtherance of cyber investigations; OR Conducting forensic examinations of digital devices or media in furtherance of cyber investigations.