This position is located in the Department of Homeland Security (DHS), Office of the Chief Security Officer, Threat Management Operations. The primary purpose of this position is to identify, detect, deter, and mitigate threats that an insider uses to do harm to the Department's mission, resources, personnel, facilities, information, equipment, networks, or systems. Non-BU: This is a non-bargaining unit position.
There are no Individual Occupational Requirements for this series. Specialized Experience: You qualify at the GS-09 grade level if you possess one of the following: One year of specialized experience, equivalent to the GS-07 grade level in Federal service, that demonstrates the ability to ability to conduct investigations, interview, fact-find, and collect data; receive and document testimony of individuals who may be fearful, skeptical, or uncooperative during the questioning process of the investigation; understanding insider threat risks and identifying insider threat vulnerabilities and indicators.; OR A master's or equivalent graduate degree or 2 full years of progressively higher-level graduate education leading to such a degree or LL.B. or J.D., if related to General Inspection, Investigation, Enforcement, and Compliance Series; OR A combination of successfully completed graduate level education and specialized experience as described above that, when combined, equal 100% of the total requirement. This will be calculated using your resume and unofficial transcripts or a list of courses/course hours submitted with your application. NOTE: Only graduate education in excess of the first year may be used to qualify for the GS-09 level. You qualify at the GS-11 grade level if you possess one of the following: One year of specialized experience, equivalent to the GS-09 grade level in Federal service, is defined as knowledge of and participation utilizing digital evidence and network data as part of cyber-related investigations and inquiries with internal, interagency, and national implications; evaluates intelligence to determine and identify potential insider threats; Conducting investigations covering a diverse range of complex subjects and allegations, and ranging from simple inquiries to very complex issues resulting in further investigative matters growing from the original investigation; OR A Ph.D. or equivalent doctoral degree or 3 full years of progressively higher-level graduate education leading to such a degree or LL.M., if related to General Inspection, Investigation, Enforcement, and Compliance Series; OR A combination of successfully completed graduate level education and specialized experience as described above that, when combined, equal 100% of the total requirement. This will be calculated using your resume and unofficial transcripts or a list of courses/course hours submitted with your application. NOTE: Only graduate education in excess of the first two years may be used to qualify for the GS-11 level. All qualifications and eligibility requirements must be met by the closing date of the announcement. Time-in-grade: Current General Schedule (GS) federal employees, and those that have served in GS positions within the last 52 weeks, must have served 52 weeks at the next lower grade, or a combination of the next lower grade level and an equivalent band in the federal service by the closing of this announcement. Note: Current or former Federal employees MUST submit a copy of their SF-50 Form which shows competitive service appointment ("position occupied" block 34 on the SF-50 should show a "1"), tenure group (block 24 should show a 1 or 2), grade, and salary. If you are applying for a higher grade, please provide the SF-50 Form which shows the length of time you have been in your current/highest grade (examples of appropriate SF-50s include promotions, With-in Grade/Range Increases, and SF-50s dated a year apart within the same grade/job). If you have promotion potential in your current position, please provide proof. Employees applying with an interchange agreement must provide proof of their permanent appointment. IF YOU DO NOT SUBMIT ALL OF THE REQUIRED DOCUMENTATION, YOU WILL NOT RECEIVE CONSIDERATION AS A STATUS CANDIDATE. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office. Essential Personnel Position - This position may be designated as essential personnel. Essential personnel must be able to serve during continuity of operation events without regard to declarations of liberal leave or government closures due to weather, protests, and acts of terrorism or lack of funding. Failure to report for or remain in this position may result in disciplinary or adverse action in accordance with applicable laws, rules, and regulations. (5 U.S.C. 7501-7533 and 5 CFR, Part 752, as applicable).
As a Investigator, GS-1801-9/11, your typical work assignments may include the following: Works independently and part of a team to deter, detect, and mitigate insider threat incidents. Collects and manages data, information, and evidence consistent with federal laws, guidelines, Executive Orders, regulations, policies, and procedures. Facilitates ongoing investigations and participates with other law enforcement and intelligence personnel in planning, conducting and supporting investigations into criminal, administrative and security incidents. Performs User Activity Monitoring (UAM) and other cyber forensic activities to detect insider threat activities and suspicious behavior. This announcement will be open for 5 business days OR until the first 100 applications have been received, whichever happens first. View common definitions of terms found in this announcement: Common Definitions.