Analyst 1, CyberTipline

Ncmec; Alexandria, Northern (VA, KY); Hybrid; USD 55,000 - 75,000; Full time

Job summary

NCMEC’s Alexandria, VA-based CyberTipline Analyst 1 position provides critical analysis and case support for reports submitted by Electronic Service Providers, triaging information and making reports available to law enforcement per policy.

The role handles sensitive content, emphasizes accuracy, and thrives in a fast-paced environment with occasional travel and non-remote, in-office hours.

Qualifications

• AA or AS from an accredited college or university.
• Minimum of two years' work and/or internship experience preferred.
• An equivalent combination of education and experience may be substituted.

Responsibilities

• Conduct background research on CyberTipline reports from ESPs to reduce child sexual exploitation.
• Review, triage, and process incoming reports with time-sensitive details following guidelines.
• Respond to requests for Technical Assistance from law enforcement and other parties, including CyberTipline phones and emails.
• Determine methods and approaches for online queries using available databases.
• Monitor and maintain electronic files on reports and cases within the CyberTipline.
• Maintain pace and quality after certification in CyberTipline processing and TA requests.
• Manage individual queue within the CyberTipline to meet deadlines.
• Conduct tours of NCMEC for visiting law enforcement and guests to promote awareness.
• Attend internal trainings as needed.
• Other duties as assigned.

Skills

Analytical thinking

Research skills

Time management

Communication skills

Attention to detail

Education

AA/AS degree

Job description

Headquarters, 333 John Carlyle, Alexandria, Virginia, United States of America

Job Description

Posted Tuesday, August 25, 2026 at 4:00 AM

TITLE: Analyst 1, CyberTipline

DATE PREPARED: October 2010

FLSA: Exempt

DEPARTMENT: CyberTipline

TRAVEL REQUIREMENT:

Occasional travel for out-of-state training is required.

HOURS AND SCHEDULE:

Basic hours are Monday – Friday, in-office, 9:00am to 5:30pm (37.5 hours within five (5) days per week); unless otherwise required or approved by management. Ability to work flexible schedule to include some weekends, evening hours, and holidays is required. Position is not eligible for remote work or telework.

SUPERVISION RECEIVED:

Position reports to the CyberTipline Program Manager and works under the direct supervision of a CyberTipline Supervisor.

SUPERVISION EXERCISED:

None

RESPONSIBILITY FOR PUBLIC CONTACT:

Position requires daily contact with law enforcement, visitors, external stakeholders, and other interested parties requiring courtesy, discretion, and sound judgment.

LICENSING AND CERTIFICATION:

None

GENERAL DESCRIPTION:

Position is responsible for providing overall analysis and case related support for CyberTipline reports submitted by Electronic Service Providers (ESPs), including the triage of incoming reports, identifying links between reported information, and making reports available to law enforcement agencies per ECD policy.

CyberTipline reports may contain graphic pornographic content or links to pornographic content online depicting minors and/or adults. Child sexual abuse material (CSAM) includes images, videos, and text describing child sexual exploitation. Such assistance requires an employee that can handle exposure to sensitive content, demonstrates a high level of accuracy and thoroughness in their work product, and thrives in a fast-paced environment.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Conduct background research on CyberTipline reports received from Electronic Service Providers (ESPs), using both internal and external sources of information, in an effort to reduce child sexual exploitation.
• Review, triage, and process incoming reports and related information concerning suspected child sexual exploitation, with special attention to time-sensitive details, following established guidelines and make reports available to law enforcement agencies per ECD policy.
• Respond to written and verbal requests for Technical Assistance and information from law enforcement, external parties, and other NCMEC divisions, to include answering the CyberTipline phone line and monitoring CyberTipline email accounts.
• Determine methods, techniques, plans, parameters, and approaches to be used in conducting online queries utilizing available databases.
• Monitor and maintain electronic files on reports and cases within the CyberTipline.
• After becoming certified on CyberTipline Report processing and Technical Assistance Requests, maintain acceptable pace and quality of CyberTipline report processing.
• Manage individual queue within the CyberTipline to ensure deadlines are met.
• Conduct tours of NCMEC for visiting law enforcement and other guests to promote public awareness of the CyberTipline and activities to counter child sexual exploitation.
• Attend internal trainings on an as needed basis.
• Other duties as assigned.
• Conform with and abide by all regulations, policies, work procedures, and instructions, including the ECD Mission and Values.
• Promote and exhibit loyalty to the National Center for Missing and Exploited Children and the cause of protecting children worldwide.
• Promote a professional image.
• Communicate with co-workers, NCMEC management, the public, law enforcement officials, and other agencies in a courteous and professional manner.
• Respond promptly when returning telephone calls and replying to correspondence.

EDUCATION AND EXPERIENCE:

• AA or AS from an accredited college or university.
• Minimum of two years’ work and/or internship experience preferred.
• An equivalent combination of education and experience may be substituted.

KNOWLEDGE, SKILLS, AND ABILITIES

• Strong passion for NCMEC’s mission.
• Excellent organizational, interpersonal, verbal, telephone, and written communications skills.
• Ability to prioritize workload, multi-task, meet deadlines, and thrive in a fast-paced environment, and make important decisions under pressure.
• Ability to consistently meet expectations for quality and strong attention to detail.
• Capacity to hold oneself accountable.
• Skilled in the use of MS Office Suite or an equivalent office suite product including the knowledge of database and spreadsheet applications.
• Ability to travel as needed for conferences, training, etc.
• Must demonstrate strong Internet skills, to include familiarity with search engines, social media platforms, E-mail, online gaming, and photo sharing/hosting platforms.
• Adaptability, flexibility, and ability to work as part of a team or in an individual capacity.
• Ability to handle and maintain the integrity and confidentiality of highly sensitive material and information.

Headquarters, 333 John Carlyle, Alexandria, Virginia, United States of America