Insider Threat Analyst

2 days left

Employer
USAJobs
Location
Washington, D.C
Posted
Nov 09, 2019
Closes
Nov 17, 2019
Function
Analyst
Hours
Full Time
Duties

Summary

The FRTIB is looking for a highly qualified and motivated individual to serve as an Insider Threat Analyst.

This Job Opportunity Announcement (JOA) may be used to fill other Insider Threat Analyst, GS-1801-14 positions within the FRTIB in the same geographical location with the same qualifications and specialized experience.
Learn more about this agency

Responsibilities

This vacancy is also being announced concurrently with vacancy announcement FRTIB-20-DE-004-10638542 under delegated examining procedures. NOTE: Applicants must apply separately for each announcement in order to be considered.

The major duties of the position are:
  • Gathers, integrates, and analyzes information derived from various sources including user activity monitoring, cybersecurity tools and reports, law enforcement, counterintelligence, personnel security, human resources, and other sources, to assess and detect significant potential insider threats.
  • Leads, participates and coordinates teams and projects concerned with the collection, review, interpretation, correlation, and analysis of
    employee and contractor related data to identify behavior potentially indicative of an insider threat. Develops and implements analytic strategies and approaches for detecting malicious activity affecting the Agency's data, systems, or networks.
  • Provides subject matter expertise related to investigation and analysis of anomalous events indicative of insider threat.
  • Develops insider threat analytic products to include situation reports/spot reports, threat and risk assessments, alerts, advisories, and bulletins.


Travel Required

Occasional travel - You may be expected to travel for this position for training purposes.

Supervisory status
No

Promotion Potential
14

Requirements

Conditions of Employment


U.S. citizenship is required.

All qualification requirements must be met by 11/22/2019. Your application package will not be considered if it is missing any of the required documents listed under the "Required Documents" tab.

Probationary Period. One-year probationary period may be required.

Selective Service. If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System , or are exempt from having to do so under the Selective Service Law.

Background Suitability Investigation. Continued employment is contingent upon satisfactory completion of a background investigation and the granting of a federal suitability or security clearance. If selected, you may be offered tentative employment until the background investigation has been fully adjudicated.

Applicants who have held a General Schedule (GS) position within the last 52 weeks must meet the Time-in-Grade Requirement, which is 52 weeks of federal service at the next lower grade, GS-13.

Qualifications

To qualify for this position, applicants must meet the Specialized Experience as described below.

Specialized Experience:
Applicants must have at least one year of full-time specialized work experience comparable in scope and responsibility to the next lower level (equivalent to the GS-13) in the federal government. Specialized experience is defined as: Experience performing functions supporting an Insider Threat Program to include: gathering, integrating, and analyzing information derived from various sources including user activity monitoring, cybersecurity tools and alerts, law enforcement, counterintelligence, personnel security, human resources, and other sources, to assess and detect significant potential insider threats; conducting complex focused insider threat risk analysis and assessments; performing trend analysis; and conducting investigations and warning analysis to identify potential threats and associated risks.

*Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations. Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Specialized experience must meet 52 weeks equivalent to the next lower grade level. A full year of work is considered to be 35-40 hours of work per week. Part-time experience will be credited on the basis of time actually spent in appropriate activities. Applicants wishing to receive credit for such experience must indicate clearly the nature of their duties and responsibilities in each position and the number of hours a week spent in such employment.

Education

Education may not be substituted for experience for this series and grade combination.

Additional information

The FRTIB offers a comprehensive benefits package that includes paid time off*, life insurance, health benefits, and participation in the 3-tier federal retirement system. The FRTIB also has wonderful benefits and work/life-balance flexibilities that may be right for you. We offer, if applicable:
  • -Flexible work schedule options. The FRTIB offers two flexible work schedules, the Gliding Schedule and the Flexible 5-4/9 Schedule. Employees on the Gliding Schedule must arrive between 6:30 am and 9:30 am and work 8 hours plus a 30-minute unpaid lunch period. Employees on the Flexible 5-4/9 Schedule work eight 9-hour days and one 8-hour day (plus the 30-minute unpaid lunch period) in each biweekly pay period and receive one scheduled day off; and must arrive between 6:30 am and 9:30 am.
  • -Telework up to 2 days per week for eligible positions.
  • - Employee Assistance Program (EAP) . The EAP provides employees with free confidential assistance for help with personal issues that may be affecting work life. The program also provides consultation to supervisors who are trying to best help an employee with performance and/or attendance problems.
  • -Work Life 4 You. The FRTIB provides all employees and their family members with access to the Federal Occupational Health managed referral and information service to assist in dealing with life, family, health, education, work, and finance. This service is provided at no cost to the employee.
  • -*Annual and sick leave (paid time off). Employees of the FRTIB accrue both annual and sick leave depending on years of service with the federal government. Annual leave may be used for vacation or other personal reasons. Sick leave may be used when you are ill, when you have a doctor, dental, or optical appointment, or when you need to provide care to an ill family member.
  • -Fitness center. The FRTIB employees, at no cost, have access to the fitness center conveniently located on the main level of the building featuring state of the art weight training and cardiovascular equipment.
  • -Extensive training programs and tools supportive of enhancing organization effectiveness and employee development.
  • -A monthly transit subsidy for a portion of your commuting costs to help defray the commuting costs of employees who use mass transportation, including commuter bus, Metrorail or Metrobus, or commuter rail systems.
  • -Child care program. The FRTIB's childcare subsidy program offers up to $600 in monthly subsidy paid to qualified child care providers of employees meeting the eligibility requirements.
  • -Student loan repayment or recruitment bonus, when applicable.
The FRTIB offices are conveniently located within a few blocks of the Union Station metro station. In addition, private parking is available in the building at the posted daily and monthly rates.

Relocation expenses are not authorized for this position; however, other recruitment incentives may be authorized.

How You Will Be Evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

To preview the occupational questionnaire, click on the following link https://apply.usastaffing.gov/ViewQuestionnaire/10638543 .

You will be evaluated for this job based on how well you meet the above qualifications.

Once the application process is complete, a review of the resume and supporting documentation will be made and compared against your responses to the assessment questionnaire to determine if you are qualified for this job. If, after reviewing your resume and/or supporting documentation, a determination is made that you have inflated your qualifications and/or experience, you may lose consideration for this position. Please follow all instructions carefully. Errors or omissions may affect your eligibility.

Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities and other characteristics):

Insider Threat Security Administration: Knowledge of a major area of insider threat security specialization or demonstrated mastery of general Insider Threat security administration programs sufficient to function as a technical authority in assignments requiring the application of new theories strategies, and developments to Insider Threat.

Oral and Written Communication: Skill in oral and written communication sufficient to present briefings and compose written documents at departmental levels to brief superiors as required.

Threat Analysis and Risk Management: Expert level skill in threat analysis and risk management to include use of information technology automation software and processes involved with insider threat detection sufficient to gather, track, and analyze vast amounts of information to fuse assessments and identify potential threats and associated risks.

Veterans' Preference. If you are claiming veterans' preference you must submit supporting documentation as described in the "Required Documents" section. Visit the Feds Hire Vets website for more information regarding veterans' preference.

Interagency Career Transition Assistance Program (ICTAP). The ICTAP provides eligible displaced federal competitive service employees with selection priority over other candidates for competitive service vacancies. If your agency has notified you in writing that you are a displaced employee eligible for ICTAP consideration, you may receive selection priority if this vacancy is within your ICTAP eligibility, you apply under the instructions in this announcement, and you are found Well Qualified for this vacancy. Well Qualified means you must meet all the minimum qualification standards listed above and be assessed and assigned the rating of at least Well Qualified to receive special selection priority. Well Qualified is further defined as possessing the Basic Qualifications and meeting the specialized experience noted above.

You must provide proof of eligibility with your application to receive selection priority. Such proof may include a copy of your written notification of ICTAP eligibility or a copy of your separation personnel action form. Information about ICTAP eligibility is on OPM's Career Transition website .

Background checks and security clearance

Security clearance
Not Required

Drug test required
No

Position sensitivity and risk
Noncritical-Sensitive (NCS)/Moderate Risk

Trust determination process
Suitability/Fitness

Required Documents

Please be advised, the following documents are required even if you are already a current federal employee or employee of the FRTIB:

1. Resume (please include on your resume the experience you wish to be considered for the review of your qualifications, the dates of employment with month and year, and hours worked per week). Resumes that do not contain all of the necessary information to determine qualifications may be marked as insufficient and applicants may not receive consideration for this position. Your latest resume submission is the one that will be used to determine your qualifications.

2. Responses to the occupational questionnaire.

3. You must submit supporting documents verifying your eligibility to apply to this vacancy, selection priority eligibility, or any preference eligibility along with your application package. Omitting these documents may result in no preference being adjudicated for you. These documents may include, but are not limited to:
  • -SF-50 documenting current or previous employment in the federal service; the date on your SF-50 must clearly show you meet the time-in-grade requirements to be eligible to apply for this job opportunity.
  • -Veteran's documentation. All veterans must submit a DD-214, Member Copy 4. If you are currently on active duty you must submit an official statement of service from your command or other official documentation that proves your military service was performed under honorable conditions.
  • -Preference eligible documentation. If claiming 10-point preference you must submit the final VA letter including percentage (please do not include letter from VA noting specific private medical information), as well as the DD-214 Member Copy 4. The SF-15 will be requested if selected.
  • -ICTAP documentation. RIF separation notice along with your last performance rating or appraisal.
  • -Schedule A documentation. A qualifying letter from a doctor's or vocational rehabilitation office indicating you are eligible for hire under the Schedule A hiring authority .
4. Please submit a copy of your most recent performance appraisal / evaluation and a copy of your SF-50 for any incentive awards (e.g. superior performance awards, special act or achievement awards, quality step increase, etc.) you have received in the last 3 years. You must submit performance appraisal / evaluation and incentive award documentation which will be forwarded to the selecting official. The selecting official may use this documentation to assign a due weight point value to be considered during the overall selection process. If you do not have a current performance appraisal you must submit a statement as to why it is not available, and if your performance was at an acceptable level . Applicants that do not have an appraisal must submit a statement saying they do not have an appraisal. If you fail to submit this documentation your application may be marked as insufficient and may not receive consideration for this position.

If you are relying on your education to meet qualification requirements:

Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education .

Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.

Similar jobs

More searches like this