About this role
Job SummaryThis position is located in the Department of Homeland Security (DHS), Office of Intelligence and Analysis, Homeland Identity Intelligence Center (HI2C), Document and Media Exploitation Branch. The primary purpose of this position is to perform multifaceted DOMEX Technical Exploitation customer support and community access to forensically found data, and use of data, from customers and other sources in order to produce intelligence. Non-BU: This is a non-bargaining unit position.
QualificationsGS-11: You qualify for the GS-11 grade level if you possess the specialized experience, equivalent to the GS-09 grade level in the Federal government, performing duties such as: 5+ years of mastered experience performing forensic extractions, examinations, and/or analysis, basic IT and/or forensic certifications (ie: CompTIA A+/Security +, CCO, CCPA, MCFE) or demonstrated experience performing forensic acquisition and examinations, for law enforcement, CI Investigations and/or Intelligence. Familiarity with standard IT (e.g., operating systems, file systems, networks, IT hardware/software troubleshooting) and leading forensic software. Working knowledge of leading forensic software (ie: EnCase, Magnet Axiom, Cellebrite, etc.) Working knowledge of various mobile and computer technology; to include digital storage devices and computer operating systems. -OR- Substitution of Education for Experience You may substitute your education for your experience if you possess one of the following: A Ph.D. or equivalent doctoral degree Three (3) full years of progressively higher-level graduate education leading to such a degree LL.M., if related -OR- Combination of Education and Experience A combination of successfully completed graduate level education and specialized experience as described above that, when combined, equal 100% of the total requirement. This will be calculated using your resume and unofficial transcripts or a list of courses/course hours submitted with your application. NOTE: Only graduate education in excess of the first two years may be used to qualify for the GS-11 level. SPECIALIZED EXPERIENCE GS-12: You qualify for the GS-12 grade level if you possess one year of specialized experience, equivalent to the GS-11 grade level in the Federal government that demonstrates the following: 7+ years of mastered experience performing forensic extractions, examinations, and/or analysis, basic IT and/or forensic certifications (ie: GCFE, GCFA, CCO, CCPA, MCFE) or demonstrated experience performing forensic acquisition and examinations, for law enforcement, CI Investigations and/or Intelligence. Demonstrated knowledge of working with standard IT (e.g., operating systems, file systems, networks, IT hardware/software troubleshooting) and leading forensic software. Demonstrated knowledge of and ability to use leading forensic software (ie: EnCase, Magnet Axiom, Cellebrite, etc.) Demonstrated ability to communicate both orally and in writing to formulate and present findings, briefings, project papers, status reports, and correspondence to foster understanding acceptance of findings and recommendations. Substitution of education in lieu of specialized experience may not be used for this grade level. SPECIALIZED EXPERIENCE GS-13: You qualify for the GS-13 grade level if you possess one year of specialized experience, equivalent to the GS-12 grade level in the Federal government that demonstrates the following: 10+ years of mastered experience performing forensic extractions, examinations, and/or analysis, basic IT and/or forensic certifications (ie: CCME, CEH, MCFE, GCFA) or demonstrated experience performing forensic acquisition and examinations, for law enforcement, CI Investigations and/or Intelligence. Mastered knowledge of working with standard IT (e.g., operating systems, file systems, networks, IT hardware/software troubleshooting) and leading forensic software. Expert knowledge in performing data searches and retrievals from media storage devices and protected media; copied evidence, ensured proper chain-of-custody and storage of media devices; wide range of analytical and evaluative techniques used in assisting digital forensics analysis and threats to homeland security. Expert knowledge in preparing and furnishing authoritative oral and written reports to investigators which convey the expert opinion and findings and ability to independently prioritize and complete multiple tasks with little to no supervision. Substitution of education in lieu of specialized experience may not be used for this grade level. All qualifications and eligibility requirements must be met by the closing date of the announcement. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. This position is designated as Emergency Essential. Emergency Essential personnel must be able to serve during a continuity of operation event without regard to declarations of liberal leave or government closures due to weather, protests, and acts of terrorism or lack of funding. Failure to report for or remain in this position may result in disciplinary or adverse action in accordance with applicable laws, rules, and regulations (5 U.S.C. 7501-7533 and 5 CFR Part 752, as applicable).
Major DutiesAs a Intelligence Operations Specialist, GS-0132-11/12/13, your typical work assignments may include: Conducts digital forensic examinations and technical exploitation of electronic media and mobile devices: Performs triage, extraction, and analysis of digital evidence, identifies hidden or obfuscated data using specialized forensic software, develops and applies exploitation methodologies and TTPs. Researches, develops, and applies advanced forensic methodologies and tools: Participates in IT projects and technical initiatives, applies scientific principles to collect, analyze, and interpret digital data, supports administration, maintenance, and upgrade of forensic systems. Prepares and communicates authoritative oral and written reports, briefings, and recommendations: Presents findings to investigators, stakeholders, and leadership, coordinates with officials, program staff, and representatives of other agencies, ensures findings are clearly presented and actionable. Develops and maintains documentation, SOPs, evaluations, and recommendations; coordinates workload and training: Tracks and reports production metrics, provides on-the-job training and supports team development, assists with program support for HI2C forensic priorities and objectives. Provides forensic support, training, and customer service to internal and external partners: Ensures compliance with legal, policy, privacy, and civil liberties requirements, resolves customer needs and issues, delivers training on forensic capabilities and tools. Collaborates and engages with HI2C teams, functional leads, and customer agencies: Coordinates production and metrics reporting, participates in meetings and process improvements, assists with training and development of HI2C forensic personnel. All DHS-HQ announcements have a 5-business day open period due to the number of applications received. This announcement will be open for 5 business days OR until the first 100 applications have been received, whichever happens first. View common definitions of terms found in this announcement: Common Definitions.