Cyber Counter Intelligence Analyst

Defense Counterintelligence and Security Agency (DCSA); San Diego (CA); Híbrido; USD 90 000 - 120 000; Tempo integral

Resumo da oferta

Defense Counterintelligence and Security Agency (DCSA) is seeking a Cyber Counterintelligence Analyst (GG-0132-13) to identify, assess, and mitigate cyber foreign intelligence threats. You will analyze logs, identify indicators of compromise, and present findings to leadership using both written and oral formats.

The role requires US citizenship, suitability for DCIPS, and the ability to work with classified and unclassified data.

Qualificações

• Specialized cyber CI experience aligned with DoD/DCIPS standards.
• Ability to conduct cyber data analysis (logs, reports) for threats and vulnerabilities.
• Experience presenting analytic findings clearly in written and oral form.
• Familiarity with classified and unclassified research tools and databases.

Responsabilidades

• Serve as cyber CI SME, providing enrichment and analysis for DCSA CI activities.
• Conduct log analysis to identify incidents, threats, and vulnerabilities; recommend improvements.
• Identify and validate indicators of compromise; assess threat attribution and level of threat.
• Enhance cyber threat awareness among internal/external stakeholders.
• Present analytic findings in oral and written communications.
• Utilize classified/unclassified databases and tools to assess adversary capabilities and methods.

Conhecimentos

Cyber CI analysis

Log analysis

Indicators of compromise

Oral communication

Written communication

Threat research

Ferramentas

Intelligence databases

Descrição da oferta de emprego

Summary

The DCSA Counterintelligence (CI) Operating Component Cyber Mission Center is seeking a GG-0132-13 Cyber Counterintelligence Analyst. Develops, promotes, and integrates DCSA cyber counterintelligence initiatives to identify, assess, and mitigate cyber foreign intelligence threats.

Summary

The DCSA Counterintelligence (CI) Operating Component Cyber Mission Center is seeking a GG-0132-13 Cyber Counterintelligence Analyst. Develops, promotes, and integrates DCSA cyber counterintelligence initiatives to identify, assess, and mitigate cyber foreign intelligence threats.

Duties

As a Cyber Counter Intelligence Analyst you will be responsible for the following duties:

• Serve as a cyber counterintelligence analytic subject matter expert, providing cyber-enrichment and analysis to DCSA CI activities and reporting.
• Conduct log analysis to identify cyber incidents, threats, and vulnerabilities and make recommendations for improvements and changes.
• Identify, research and validate indicators of compromise and counterintelligence-related cyber threat activities to establish attribution and evaluate the level of threat posed.
• Enhance counterintelligence-related cyber threat and vulnerability awareness among internal and external consumers.
• Present analytic findings in oral and written communications.
• As a recognized subject matter expert the employee fully utilizes classified and unclassified databases, software applications, and other intelligence research tools to identify, assess and evaluate cyber adversary capabilities and intentions, methodologies, methods and motives of those who may conduct CNE (computer network exploitation) and CNA (computer network attacks) against designated systems and information.

Requirements

Conditions of employment

• Must be a US citizen
• Selective Service Requirement: Males born after 12-31-59 must be registered for Selective Service. For more information http://www.sss.gov
• Resume and supporting documents received by 11:59PM EST will be considered
• This is a Drug Testing designated position
• Position is a (DCIPS) position in the Excepted Service under U.S.C. 1601
• Work Schedule: Full Time
• Overtime: Occasionally
• Tour of Duty: Flexible
• PCS (Permanent Change of Station): Not Authorized
• Fair Labor Standards Act (FLSA): Exempt
• Financial Disclosure: Not Required
• Telework Eligibility: Supervisors may approve situational telework on a case‑by‑case, temporary basis for limited situations.
• If selected, the incumbent must obtain and maintain appropriate security clearance as indicated in job announcement.

Qualifications

The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/0100/intelligence-series-0132/ for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 10/19/2026

Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position.

You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GG/GS 12 in the Federal service and are prepared to take on greater responsibility.

Generally, this would include one year or more of such specialized experience.

Specialized experience for this position includes: Conducts Cyber CI analysis and coordinates those activities across DCSA and national-level agencies; provides cyber-enrichment and analysis to DCSA CI activities and reporting; conducts analysis of various cyber data (e.g. logs) to identify cyber incidents, threats, and vulnerabilities; conducts in-depth research, compilation, and analysis of a wide range of complex and sensitive information; presents analytic findings in oral and written communications.

Specifically You Will Be Evaluated On The Following Competencies

• Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
• Partnering: Develops networks and builds alliances; collaborates across boundaries to build strategic relationships and achieve common goals.
• Technical Competence: Uses knowledge that is acquired through formal training or extensive on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues.
• Writing: Recognizes or uses correct English grammar, punctuation, and spelling; communicates information (for example, facts, ideas, or messages) in a succinct and organized manner; produces written information, which may include technical material that is appropriate for the intended audience.
• Researching: Identifies a need for and knows where or how to gather information. Obtains, evaluates, organizes, and maintains information.

Education

Substitution of education may not be used in lieu of specialized experience for this grade level.

Additional information

VETERANS PREFERENCE/CURRENT OR FORMER FEDERAL

In accordance with DoD Instruction 1400.25, Volume 2005, veterans preference is not required to be applied when considering candidates with prior Federal competitive or excepted service who have completed a probationary or trial period and have not been separated for cause. Therefore, veterans preference will not be applied to applicants with current federal service, or former federal civilian service meeting the above criteria.

Re-employed Annuitant

This position does not meet criteria for re-employed annuitant. The DoD criteria for hiring Re-employed Annuitants can be found at: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/140025/1400.25-V300.pdf

Applicants selected from this announcement may be required to serve a two-year trial period.

If selected, Federal employees currently serving in the competitive service must acknowledge that they will voluntarily leave the competitive service by accepting an offer of employment for a DCIPS excepted service positions.

If selected, non-DCIPS candidates must acknowledge in writing that the position they have been selected for is in the excepted service and covered by DCIPS.

All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statue, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status.

For more information on the DCIPS occupational structure click here.

For more information about career advancement in DCIPS click here.

This position is subject to an initial drug screening, and random testing thereafter. A negative drug test result must be received by HR within 30 calendar days after the EOD (i.e., start date). The selectee's inability successfully pass; or refusal to conduct the test may result in: 1) the tentative or FJO being withdrawn during the recruitment process; or 2) subsequently being removed from Federal service for failure to meet a condition of employment.

You may be required to sign a "Drug Test Statement of Understanding" if you are selected for this position.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

A career with the U.S. government provides employees with a comprehensive benefits package.

As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.

Review our benefits

Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.