INVESTIGATIONS SPECIALIST

Full Job Description

Click on "Learn more about this agency" button below for IMPORTANT additional information.

The primary purpose of this position is to serve as a Threat Analyst for the DAF Counter-Insider Threat Program within 16AF.

**Salary ranges include local market supplements.** This is a GG-13 position in the Defense Civilian Intelligence Personnel System (DCIPS).

The GG-13 duties for the "Professional" work category are at the "Senior" work level and are equivalent to those at the GS-13 level.

The selectee's salary will be set within the grade equivalent to a GS/GG grade based on the selectee's qualifications in relation to the job.

In order to qualify, you must meet the specialized experience requirements described in the Office of Personnel Management (OPM) Qualification Standards for General Schedule Positions, Administrative and Management Positions.

EXPERIENCE REQUIRED: Your resume must reflect the quality level of experience which demonstrates the possession of the knowledge, skills, abilities, and competencies necessary for successful job performance required for this position.

Examples of creditable experience include applying knowledge of a wide range of principles, concepts, and methods of integrated Insider Threat concepts and practices with skills gained through wide-ranging knowledge of software applications, Insider Threat tools, all-source information sources and advanced analytic techniques, and processes; applying demonstrated knowledge of Federal, DoD, IC, and AF Insider Threat policies and guidelines; applying practical knowledge of Insider Threat, Cyber Security, multisource analysis, and information assurance tools and concepts; skill in analyzing human behavior to produce fully justified recommendations and policies that can be presented to higher levels of management for use in identifying and mitigating Insider Threat actors.

Note: Creditable experience may include previous military experience, experience gained in the private sector, or experience gained in another government agency.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs): Your qualifications will be evaluated on the basis of your level of knowledge, skills, abilities and/or competencies in the following areas: Knowledge of National, DoD, AF, and IC Insider Threat policies, tools, and strategic planning goals and objectives.

Knowledge of the relationship of the various AF and IC entities involved in overall planning and execution of ISR cyber network defense, integrated defense of the IC information environment (IE) and IA; and strategic planning methodologies, tools, and techniques that effectively lead and monitor efforts to meet Insider Threat goals, objectives, and guidelines.

Knowledge of IT security, IA, and CND principles, policies, products, and services to assess risk factors, and advise on vulnerability to attack from a variety of sources (e.g.

destructive programs/applications/viruses/unauthorized access, IT sabotage, disruption of services, espionage); and procedures and methods for protection of systems and applications.

Knowledge of intelligence oversight, the Privacy Act, and familiarity with civil liberty concerns as they relate to management of Insider Threat programs.

Skill in using the analysis tradecraft and processes to gather, assemble, and analyze facts, draw conclusions, conduct analysis, devise recommended solutions, and package the entire process in briefings, papers, responses from security or LE/CI cases, or reports suitable for senior management use and decision-making.

Ability to communicate effectively both orally and in writing; negotiate complex issues; and maintain good working relations.

CONDITIONS OF EMPLOYMENT CONTINUED: Position is designated special-sensitive and incumbent must be able to obtain and retain a TOP SECRET (TS) security clearance with access to Sensitive Compartmented Information (SCI).

A non-disclosure agreement must be signed. Drug Testing: This position has been designated by the Air Force as a Testing Designated Position (TDP) under the Air Force Civilian Testing Program.

Employee must pass initial and periodic short notice drug testing.

Illegal drug use by employees in sensitive positions presents a clear Threat to the mission of the Air Force, national security, and public safety.

Information Assurance Certification is a condition of employment. This position includes information assurance (IA) work as a paramount duty requirement.

Per DoD 8570.01-M, the incumbent of this position must achieve the appropriate IA certification within six months of assignment of these duties.

A waiver of this six month requirement may be granted per DoD 8570.01-M, C3.2.4.2 or C3.2.4.3. Failure to receive the proper IA certification may result in removal from this position.

PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work.

You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.

VOLUNTEER WORK EXPERIENCE: Refers to paid and unpaid experience, including volunteer work done through National Service Programs (i.e., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student and social).

Volunteer work helps build critical competencies, knowledge and skills that can provide valuable training and experience that translates directly to paid employment.

You will receive credit for all qualifying experience, including volunteer experience. Major Duties:

Serves as an AF IC ITAP Threat Analyst and utilizes various knowledges and skills that include Information assurance (IA), computer network defense (CND), and other experience to identify anomalous behavior in the AF IC Information Environment (IE) indicative of an Insider Threat.

Responsible for initial triage of potential Insider Threat indicators from multiple data sources across the Air Force and DoD.

Responsible for long term patterns over time, identifying multiple potential Insider Threat indicators and providing enterprise vulnerability and risk trends.

Represents the organization at conferences and meetings and presents briefings.

Participates in discussions, meetings, conferences, committees, or special Insider Threat/Trend analysis tradecraft initiatives.