Intelligence Research Specialist (Cyber Threat Analyst)

Summary Become part of the team that safeguards the financial system from the abuses of financial crime. At the Financial Crimes Enforcement Network (FinCEN), we are at the forefront in preventing and detecting terrorist financing, money laundering, and other financial crime. Serve at the nations financial intelligence unit and protect the United States financial system from criminals and terrorist financiers. Responsibilities The following are the duties of this position at the GS-13 grade level. If you are selected at a lower grade level, you will have the opportunity to learn to perform all these duties, and will receive training to help you grow in this position. Serve as a subject matter expert and advisor to all FinCEN divisions in understanding and interpreting technical subject matter, such as cryptocurrency systems, in order to assist in interpreting and drafting rules, regulations, and policies under the Bank Secrecy Act (31 USC § 5311 and seq., 31 CFR Chapter X), which includes requirements regarding money services business registration and Suspicious Activity Report filing. Analyze issues and prepares responses to queries or situations using creative thinking, problem solving, and decision-making practices based on past practices, comprehensive knowledge of the subject matter (cybercrimes, illicit financial activities, money laundering networks, etc.). Organize information and analyses cyber threats, cybercrimes, and illicit use of emerging payment technologies by using comprehensive technical knowledge of computer intrusion methods, blockchain analysis, and network defense. Guide senior experts, counterparts, partner offices and/or agencies by identifying and recommending targets for FinCEN investigation and/or analysis involving potential and/or actual threats engaged in illicit financial activities to include cybercrimes and/or abuse of cryptocurrency systems. Requirements Conditions of Employment Security Clearance: This position has been designated National Security Level IV, Special Sensitive and requires the incumbent to obtain and maintain eligibility for a Top Secret (TS) clearance with Sensitive Compartmented Information (SCI) access. Applicant must meet and continue to adhere to the requirements of a Tier 5 level background investigation. Failure to successfully meet these requirements will be grounds for termination. Continued employment with FinCEN is contingent upon satisfactory completion of the Tier 5 level background investigation, the results of which fully meet the FinCENs special employment criteria. All employees are subject to satisfactory completion of periodic reinvestigation and a continuing life style in conformity with applicable national and FinCEN directives. Any unfavorable information developed during an investigation or other official inquiry may result in termination of employment in accordance with established security policies and procedures. This position requires that the successful candidate undergo personnel vetting, which includes a background investigation and enrollment upon onboarding into “Continuous Vetting.” Enrollment in Continuous Vetting will result in automated record checks being conducted throughout ones employment with Treasury. The successful candidate will also be enrolled into FBIs Rap Back service, which will allow Treasury to receive notification from the FBI of criminal matters (e.g., arrests, charges, convictions) involving enrolled individuals in near real-time. There are three key documents that contain important information about your rights and obligations. Please read and retain these documents: Noncriminal Justice Applicants Privacy Rights, for those who undergo an FBI fingerprint-based criminal history record check for personnel vetting, which includes Rap Back, FD-258 Privacy Act Statement – FBI (this is the same statement used when your fingerprints are submitted as part of your background investigation), and SEAD-3-Reporting-U.pdf (dni.gov), (applicable to those who hold a sensitive position or have eligibility for access to classified information). Key Requirements: Please refer to “Conditions of Employment.” Click “Print Preview” to review the entire announcement before applying. Must be U.S. Citizen or U.S. National Qualifications You must meet the following requirements by the closing date of this announcement. Specialized experience for the GS-13 grade level is defined as one year of experience at or equivalent to the GS-12 grade level in the federal service which is directly related to the position, and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as experience in the following: – Identifying and evaluating topics for potential analysis and investigation involving illicit use of emerging payment technologies, cybercrime, or cyber-enabled crime; AND – Analyzing cyber threat intelligence, indicators of compromise, malware forensics, blockchain transactions, malicious use of emerging technologies, law enforcement information, or other financial data in development of written threat intelligence products; AND – Assessing developments and threats related to cyber-enabled transactions and emerging payment systems; OR – Analyzing large datasets of Bank Secrecy Act information to develop written actionable findings. Specialized experience for the GS-12 grade level is defined as one year of experience at or equivalent to the GS-11 grade level in the federal service which is directly related to the position, and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as experience in the following: – Composing and briefing analytical assessments on emerging technology or cyber threat topics; AND – Conducting intelligence research related to malicious cyber actors financial networks, tactics, techniques, and procedures (TTPs); OR – Utilizing financial and cybersecurity threat tools and data sources to conduct research. Specialized experience for the GS-11 grade level is defined as one year of experience at or equivalent the GS-09 grade level in the federal service, that is directly related to the position and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as: – Analyzing segments of financial or cyber threat information for inclusion in tactical or strategic studies, such as: cyber threat intelligence, indicators of compromise, malware forensics, blockchain transactions, malicious use of emerging technologies, law enforcement information, classified intelligence, or other financial, cyber threat, or technical data for the production of intelligence reports, investigative memoranda, evidentiary packages, and other written materials; AND – Experience with anti-money laundering/countering financing of terrorism, fraud, or big data analytics investigations or policies. OR you may substitute education for specialized experience as follows: – Ph.D. or equivalent doctoral degree; OR – 3 full years of progressively higher level graduate education leading to such a degree; OR – LL.M., if related; OR you may qualify on a combination of education and experience: To combine education and experience, the total percentage of experience at the required grade level compared to the requirement, as well as the percentage of completed education compared to the requirement must equal at least 100 percent. Only graduate level education in excess of the first 36 semester hours (54 quarter hours) may be combined to be considered for qualifying education. Specialized experience for the GS-09 grade level is defined as one year of experience at or equivalent to the GS-07 grade level in the federal service which is directly related to the position, and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as experience in the following: – Analyzing segments of financial or cyber threat information for inclusion in tactical or strategic studies, such as: cyber threat intelligence, indicators of compromise, malware forensics, blockchain transactions, malicious use of emerging technologies, law enforcement information, classified intelligence, or other financial, cyber threat, or technical data, for the production of intelligence reports, investigative memoranda, evidentiary packages, and other written materials. OR You may substitute education for experience as follows: masters or equivalent graduate degree OR 2 full years of progressively higher level graduate education leading to such a degree that demonstrates the knowledge, skills, and abilities necessary to do the work OR an LL.B. or J.D., in a field related to this position. OR You may qualify on a combination of education and experience. To combine education and experience, the total percentage of experience at the required grade level compared to the requirement, as well as the percentage of completed education compared to the requirement must equal at least 100 percent. Only graduate level education in excess of the first 18 semester hours (27 quarter hours) may be combined to be considered for qualifying education. The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your résumé. Education Education Requirements: The education generally must be from an accredited (or pre-accredited) college or university recognized by the U.S. Department of Education. If you are qualifying based on foreign education, you must submit proof of creditability of education as evaluated by a credentialing agency. Refer to the OPM instructions. Additional Information OTHER INFORMATION: We may select from this announcement or any other source to fill one or more vacancies. This is a non-bargaining unit position. We offer opportunities for telework. We offer opportunities for flexible work schedules. CONDITIONS OF EMPLOYMENT: A one year probationary period may be required. Must successfully complete a background investigation. Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency. Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer. If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so. Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S. Obtain and use a Government-issued charge card for business-related travel. File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on. Submit to a drug test prior to your appointment and random drug testing while you occupy the position. Applicants may be required to provide a writing sample and/or performance ratings at a later stage in the evaluation process. FinCEN offers flexible work schedules, 11 paid holidays, financial subsidies to employees who use public transportation to commute, in-house training, fitness center reimbursement, alternate work schedules (AWS) and telework opportunities, and eligibility for performance awards. FinCEN also offers attractive health, life, and long-term care insurance programs, and the employees health insurance contributions are out of pre-tax dollars. Newer employees are covered by a three-tier retirement plan that includes a pre-tax retirement contribution program with matching funds or, as applicable, continuance in the Civil Service Retirement System. Learn more about Federal benefits programs at: https://www.usajobs.gov/help/working-in-government/benefits/ All candidates will be considered regardless of their race, color, religion, sex, national origin, age, sexual orientation, protected genetic information, status of a parent, lawful political affiliation, marital status, physical/mental disability (if not a job factor), membership, non-membership in an employee organization, or any other non-merit factor. To file a complaint of discrimination, contact FinCEN, Office of Equal Opportunity and Diversity on (703) 905-5052 or TDD (703) 905-3838.