U.S. Air Force OSI – Maryland or Virginia

Criminal Investigator (Cyber)

Duties

The incumbent:

• Independently plans, organizes and conducts criminal investigations of alleged or suspected violations of the Uniformed Code of Military Justice (UCMJ) and/or federal criminal laws (e.g., Title 10 and 18 of the US Code) of the United States affecting Air Force personnel and resources.
• Organizes and manages comprehensive counterintelligence investigations involving highly delicate matters of interest to high echelon government officials, and briefs management officials on the status of these investigations.
• Develops criminal investigative reports upon completion of each assignment for facilitating determination of appropriate actions and final decision.
• Coordinates criminal investigative activity with other federal, state and local agencies as well as foreign governments on matters related to criminal investigations and resolves jurisdictional problems in accordance with established policies.
• Periodically briefs senior DoD management, investigative personnel, attorneys and other interested parties on criminal investigative and other matters.

• Establishes and maintains professional working relationships with all local, state and federal law enforcement entities.
• Testifies in court proceedings.

 Help

Requirements

Conditions of Employment

• U.S. Citizenship Required.
• All male applicants born after December 31, 1959 must have registered for the Selective Service.
• This position requires the incumbent to carry a firearm. Any person who has been convicted of a misdemeanor crime of domestic violence cannot lawfully possess a firearm or ammunition (18 U.S.C. Section 922(g) ((9)).
• This position requires the incumbent to drive a motor vehicle. Incumbent must possess and maintain a valid state driver?s license.
• All Federal employees are required to have their salary payments made by direct deposit to a financial institution of their choosing.
• Initial relocation expenses may or may not be authorized.
• Requires occasional travel away from the normal duty station.
• May require travel via various military or commercial means.
• May require international travel.
• Disclosure of Political Appointments.
• Position is designated by the Air Force as a testing designated position under the Air Force Civilian Drug Testing Program and is subject to random drug testing.
• This position is subject to a two-year trial period during the first two years of the employee?s permanent federal appointment.
• This position requires a Top Secret security clearance. Favorable completion of a Single Scope Background Investigation (SSBI) is required prior to an offer of employment.
• This position requires the favorable completion of an Agent Suitability Investigation, including a successful criminal background check, prior to an offer of employment.
• Applicants are subject to counterintelligence scope polygraph examinations as determined by the command. Failure to successfully complete a polygraph examination could result in disciplinary action as determined by the command.
• Employees may be assigned anywhere in the U.S. or overseas. In addition, employees may be required to work in areas of unrest or in war zones.
• Employees must be able to work substantial amounts of unscheduled overtime or be available to work substantial amounts of unscheduled overtime on evenings, weekends, and/or holidays. May also be required to work regular scheduled overtime as needed.
• The duties of this position require the incumbent to carry a firearm. Applicants must meet initial and continuing OSI qualifications in the use of firearms.

Qualifications

This applicant pool will be used to fill special agent positions focused on Cyber Investigations and Operations, Digital Forensics, and Technology Investigations and Operations.

In order to qualify, applicants must meet the specialized or general experience requirements described in this announcement as follows:

Applicants must have two years/104 weeks of full time specialized or general experience at a level of difficulty and responsibility equivalent to the GS-12 grade level (or equivalent in other pay systems) in the Federal service.

Specialized Experience:

GS-12-level specialized experience required for this position includes:

• Planning and conducting highly complex criminal investigations, independently as a lead investigator or as a team member
• Apprehending or detaining suspected violators of criminal laws of the U.S.
• Conducting interviews with suspects, witnesses, and informants in case development
• Recruiting and utilizing witnesses
• Planning, organizing, and conducting surveillance
• Preparing interim and comprehensive final investigative reports for prosecutors and management officials
• Participating in joint task forces
• Briefing management and DoD officials on the progress of current investigations
• Testifying before Grand Juries, proceedings in criminal trials, and/or administrative hearings
• Testifying before Grand Juries, proceedings in criminal trials, and/or administrative hearings
• Coordinating criminal investigative activity with other Federal, state, and local agencies and foreign governments and resolving jurisdictional issues
• General Experience:
  
  GS-12 level general experience required for this position includes one or more of the following:
  
  1) Criminal investigative expertise and/or other felony-level criminal investigative expertise, gained from experience in federal law enforcement criminal investigations.
  
  2) Tactical operational expertise in law enforcement relevant to criminal investigations associated with unauthorized network access or advanced persistent threat operations, gained from experience in Department of Defense and/or federal law enforcement. Such experience could include penetration testing, proactive hunt operations, information operations, digital forensics, cyber enabled fraud, and other related disciplines. Network defense experience may also be qualifying, depending on the training and experience.
  
  3) Cybersecurity expertise, gained from the private sector (e.g. incident response, Chief Information Security Officer, risk consulting, finance, etc.), within the Department of Defense, and/or the US Intelligence Community, and/or state, local, tribal, territorial, or federal government.
  
  4) Digital Forensics and Technology Investigations Operations expertise, gained within the Department of Defense, and/or the US Intelligence Community, and/or state, local, tribal, territorial, or federal law enforcement. Such experience could include digital imaging and examinations of computer systems; ransomware, dark web, and/or cryptocurrency investigations; digital imaging and examination of mobile devices, digital imaging and examination of data associated with vehicle infotainment and telematics systems, recovery and examination of data associated with cloud based services, and imaging and examination of data associated with Internet of Things devices.
  
  5) Counterintelligence expertise, gained from experience in a US government counterintelligence role, to include analysis, functional services, collections, investigations and operations. Applicants should make note of any blended cyber counterintelligence experience.
  
  PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

Education

Specialized Training: Successful graduation from the Federal Law Enforcement Training Center’s (FLETC) Criminal Investigators Training Program (CITP) or federal equivalent is required. (Qualifying federal CITP equivalents include: Federal Bureau of Investigation New Agent Training, Drug Enforcement Administration Special Agent Training, US Army Criminal Investigation Division Special Agent Course, or United States Air Force Special Investigations Academy (USAFSIA) Special Investigators Course.)

Please annotate CITP (or federal equivalent) in your resume.

In addition to CITP (or federal equivalent), completion of OSI’s Basic Special Investigators Course (BSIC) at the USAFSIA is desired. BSIC is the OSI “follow-on” course to CITP.

Please annotate BSIC in your resume, if applicable.

If selected for a position, applicants who have not completed CITP (or federal equivalent) and/or BSIC will be required to attend these courses (or equivalent training as designated by the Agency).

Additional Training and Experience: Highly desired applicants will have current industry standard (or DoD equivalent) certification portfolio that demonstrates an emphasis on cyber investigations and operations techniques. Examples of such certifications include; DoD Computer Crime Investigator; Vendor-based computer forensic certification, such as EnCase Certified Examiner (EnCE) or Access Data Certified Examiner (ACE); Magnet Certified Forensic Examiner (MCFE), or Cellebrite Certified Operator/Cellebrite Certified Physical Analyst (CCO/CCPA);Non-vendor computer forensic certification such as IACIS Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE) or GIAC Certified Forensic Examiner (GCFE) or GIAC Advanced Smartphone Forensics (GASF); CompTIA certifications A+, Net+, and Sec+, or PenTest+; Offensive Security Certified Professional (OSCP); GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), GIAC Penetration Tester (GPEN), GIAC Defending Advanced Threats (GDAT); or computer science degree with associated investigative experience. Highly desired applicants may also possess certifications relevant to cybersecurity in DoD, US Intelligence Community, and private sector settings. Such relevant certifications include, but are not limited to, Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP). Applicants may also detail other cybersecurity certifications not listed here for consideration.

Education Level: Bachelor’s Degree from an accredited college or university is highly desired. We seek applicants who completed challenging degree programs that provided them with hard-to-replicate skills relevant to the desired qualifications noted above.

ADDITIONAL REQUIREMENTS:
Agent Suitability Investigation: This position requires the favorable completion of an Agent Suitability Investigation, including a successful criminal background check, prior to an offer of employment.

Drug Testing: Position is designated by the Air Force as a testing designated position under the Air Force Civilian Drug Testing Program and is subject to random drug testing.

Probation: This position is subject to a two-year trial period during the first two years of the employee’s permanent federal appointment.

Security Clearance: This position requires a Top Secret security clearance. Favorable completion of a Single Scope Background Investigation (SSBI) is required prior to an offer of employment.

Polygraph Examination: Applicants are subject to counterintelligence scope polygraph examinations as determined by the command. Failure to successfully complete a polygraph examination could result in disciplinary action as determined by the command.

Work Environment: Employeesmay be assigned anywhere in the U.S. or overseas. In addition, employeesmay be required to work in areas of unrest or in war zones.

Work Schedule: Employees must be able to work substantial amounts of unscheduled overtime or be available to work substantial amounts of unscheduled overtime on evenings, weekends, and/or holidays. Employees may also be required to work regular scheduled overtime as needed.

Firearms: The duties of this position require the incumbent to carry a firearm. Applicants must meet initial and continuing OSI qualifications in the use of firearms.

Additional information

Medical, Health and Fitness Requirements:

• Must be physically fit in order to perform strenuous and physically demanding duties
• Must be physically able to travel by plane as required
• May be required to take a series of vaccinations and immunizations
• Moderate to arduous physical exertion involving standing, walking, running
• The use of firearms
• Exposure to inclement weather or other environmental hazards
• Manual dexterity
• Arms, hands, legs, and feet must be sufficiently intact and functioning in order that applicants may perform the duties satisfactorily
• Sufficiently good vision in each eye, with or without correction, is required to perform the duties satisfactorily. Near vision, corrective lenses permitted, must be sufficient to read printed material the size of typewritten characters.
• Adequate hearing is required in order to perform duties safely and satisfactorily; hearing loss, as measured by an audiometer, must not exceed 35 decibels at 1000, 2000, and 3000 Hz levels
• Must possess emotional and mental stability
• Any physical or mental condition that would cause the applicant to be a hazard to themselves or others is disqualifying
• Must successfully pass a pre-employment medical examination (including vision, hearing, cardiovascular and mobility of extremities) by an authorized Government physician and be determined physically able to perform duties without being a hazard to themselves or others

BENEFITS:

Locality Pay: This position is authorized locality pay based on the location of permanent assignment.

Law Enforcement Availability Pay (LEAP): LEAP compensates Criminal Investigators for substantial amounts of unscheduled overtime or their availability to work substantial amounts of overtime. Applicants are eligible to receive LEAP upon appointment. To ensure your availability, you will receive extra compensation in the form of LEAP, which is calculated at a flat rate of 25 percent of basic pay (including applicable locality pay).

MONETARY INCENTIVE A recruitment or relocation incentive may or may not be authorized