Intelligence Research Specialist (Cyber Threat Analyst)

Summary
Become part of the team that safeguards the financial system from the abuses of financial crime. At the Financial Crimes Enforcement Network (FinCEN), we are at the forefront in preventing and detecting terrorist financing, money laundering, and other financial crime. Serve at the nation's financial intelligence unit and protect the United States financial system from criminals and terrorist financiers.
This job is open to

• The public
  U.S. Citizens, Nationals or those who owe allegiance to the U.S.

Clarification from the agency
U.S. citizens or U.S. Nationals;no prior Federal experience is required.
Duties
The following are the duties of this position at the GS-13. If you are selected at a lower grade level, you will have the opportunity to learn to perform all these duties and will receive training to help you grow in this position.

• Serve as a subject matter expert and advisor to all FinCEN divisions in understanding and interpreting technical subject matter, such as cryptocurrency systems, in order to assist in interpreting and drafting rules, regulations, and policies under the Bank Secrecy Act (31 USC § 5311 and seq., 31 CFR Chapter X), which includes requirements regarding money services business registration and Suspicious Activity Report filing.
• Advise or interact with FinCEN and other Treasury employees in order to ensure appropriate regulatory enforcement actions (such as assessments of civil money penalties and recommendations of special measures for jurisdictions, financial institutions, international transactions, or types of accounts of primary money laundering concern) are applied appropriately in accordance with the Bank Secrecy Act and U.S. Patriot Act, including 31 USC § 5318A and § 5321-5322.
• Analyze issues and prepare responses to queries or situations using creative thinking, problem solving, and decision-making practices based on past practices, comprehensive knowledge of the subject matter (cybercrimes, illicit financial activities, money laundering networks, etc.).
• Analyze a wide range of information, (including, but not limited to, Cyber Threat intelligence, indicators of compromise, malware forensics, blockchain transactions, law enforcement information, classified intelligence, and other financial data) to produce intelligence reports, investigative memoranda, evidentiary packages, and other written materials that incorporate technical information in support of Treasury and FinCEN enforcement actions, law enforcement investigations, and policy makers' understanding of national security threats in the cyber and cryptocurrency domains.

Requirements
Conditions of Employment
Security Clearance: This position has been designated National Security Level IV, Special Sensitive and requires the incumbent to obtain and maintain eligibility for a Top Secret (TS) clearance with Sensitive Compartmented Information (SCI) access. Applicant must meet and continue to adhere to the requirements of a Tier 5 level background investigation. Failure to successfully meet these requirements will be grounds for termination. Continued employment with FinCEN is contingent upon satisfactory completion of the Tier 5 level background investigation, the results of which fully meet the FinCEN's special employment criteria. All employees are subject to satisfactory completion of periodic reinvestigation and a continuing life style in conformity with applicable national and FinCEN directives. Any unfavorable information developed during an investigation or other official inquiry may result in termination of employment in accordance with established security policies and procedures.
This position requires that the successful candidate undergo personnel vetting, which includes a background investigation and enrollment upon onboarding into "Continuous Vetting." Enrollment in Continuous Vetting will result in automated record checks being conducted throughout one's employment with Treasury. The successful candidate will also be enrolled into FBI's Rap Back service, which will allow Treasury to receive notification from the FBI of criminal matters (e.g., arrests, charges, convictions) involving enrolled individuals in near real-time.
There are three key documents that contain important information about your rights and obligations. Please read and retain these documents:

1. Noncriminal Justice Applicant's Privacy Rights, for those who undergo an FBI fingerprint-based criminal history record check for personnel vetting, which includes Rap Back,
2. FD-258 Privacy Act Statement - FBI (this is the same statement used when your fingerprints are submitted as part of your background investigation), and
3. SEAD-3-Reporting-U.pdf (dni.gov), (applicable to those who hold a sensitive position or have eligibility for access to classified information).

Key Requirements:

1. Please refer to "Conditions of Employment."
2. Click "Print Preview" to review the entire announcement before applying.
3. Must be U.S. Citizen or U.S. National

Qualifications
You must meet the following requirements by the closing date of this announcement.
Specialized experience for the GS-13 grade level is defined as one year of experience at or equivalent to the GS-12 grade level in the federal service which is directly related to the position, and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as experience in the following:
- Identifying and evaluating topics for potential analysis and investigation involving illicit use of emerging payment technologies, cybercrime, or cyber-enabled crime; AND
- Analyzing Cyber Threat intelligence, indicators of compromise, malware forensics, blockchain transactions, law enforcement information, or other financial data in development of written threat intelligence products; AND
- Assessing developments and threats related to cyber-enabled transactions and emerging payment systems; OR
- Analyzing large datasets of Bank Secrecy Act information to develop written actionable findings.
Specialized experience for the GS-12 grade level is defined as one year of experience at or equivalent to the GS-11 grade level in the federal service which is directly related to the position, and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as experience in the following:
- Composing and briefing analytical assessments on emerging technology or Cyber Threat topics; AND
- Conducting Intelligence Research related to malicious cyber actors' financial networks, tactics, techniques, and procedures (TTPs); OR
- Utilizing financial and cybersecurity threat tools and data sources to conduct research.
Specialized experience for the GS-11 is defined as one year of experience at or equivalent the GS-09 level in the federal service, that is directly related to the position and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience for this position is defined as:
- Analyzing segments of financial or Cyber Threat information for inclusion in tactical or strategic studies, such as: Cyber Threat intelligence, indicators of compromise, malware forensics, blockchain transactions, law enforcement information, classified intelligence, or other financial data for the production of intelligence reports, investigative memoranda, evidentiary packages, and other written materials; AND
- Experience with anti-money laundering/countering financing of terrorism policies.
OR You may substitute education for general or specialized experience as follows:
- Ph.D. or equivalent doctoral degree; OR
- 3 full years of progressively higher-level graduate education leading to such a degree; OR
- LL.M., if related.
OR You may qualify on a combination of education and experience:
To combine education and experience, the total percentage of experience at the required grade level compared to the requirement, as well as the percentage of completed education compared to the requirement must equal at least 100 percent. Only graduate level education in excess of the first 36 semester hours (54 quarter hours) may be combined to be considered for qualifying education.
The experience may have been gained in either the public, private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your résumé.
Education
Education Requirements: The education generally must be from an accredited (or pre-accredited) college or university recognized by the U.S. Department of Education. If you are qualifying based on foreign education, you must submit proof of creditability of education as evaluated by a credentialing agency. Refer to the OPM instructions.
Additional information
OTHER INFORMATION:

• We may select from this announcement or any other source to fill one or more vacancies.
• This is a non-bargaining unit position.
• We offer opportunities for telework.
• We offer opportunities for flexible work schedules.

CONDITIONS OF EMPLOYMENT:

• A one-year probationary period may be required.
• Must successfully complete a background investigation.
• Complete a Declaration for Federal Employment to determine your suitability for Federal employment, at the time requested by the agency.
• Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer.
• If you are a male applicant born after December 31, 1959, certify that you have registered with the Selective Service System or are exempt from having to do so.
• Go through a Personal Identity Verification (PIV) process that requires two forms of identification from the Form I-9. Federal law requires verification of the identity and employment eligibility of all new hires in the U.S.
• Obtain and use a Government-issued charge card for business-related travel.
• File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on.
• Submit to a drug test prior to your appointment and random drug testing while you occupy the position.
• Applicants may be required to provide a writing sample and/or performance ratings at a later stage in the evaluation process.

FinCEN offers flexible work schedules, 11 paid holidays, financial subsidies to employees who use public transportation to commute, in-house training, fitness center reimbursement, alternate work schedules (AWS) and telework opportunities, and eligibility for performance awards. FinCEN also offers attractive health, life, and long-term care insurance programs, and the employees' health insurance contributions are out of pre-tax dollars. Newer employees are covered by a three-tier retirement plan that includes a pre-tax retirement contribution program with matching funds or, as applicable, continuance in the Civil Service Retirement System. Learn more about Federal benefits programs at: https://help.usajobs.gov/index.php/Pay_and_Benefits
All candidates will be considered regardless of their race, color, religion, sex, national origin, age, sexual orientation, protected genetic information, status of a parent, lawful political affiliation, marital status, physical/mental disability (if not a job factor), membership, non-membership in an employee organization, or any other non-merit factor. To file a complaint of discrimination, contact FinCEN, Office of Equal Opportunity and Diversity on (703) 905-5052 or TDD (703) 905-3838.

• Benefits
  A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
  Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

How You Will Be Evaluated
You will be evaluated for this job based on how well you meet the qualifications above.
Your application includes your résumé, responses to the online questions, and required supporting documents. Please be sure that your résumé includes detailed information to support your qualifications for this position; failure to provide sufficient evidence in your résumé may result in a "not qualified" determination.
Rating: This announcement is issued under the "direct-hire" authority. Consistent with 5 U.S.C. 3304(a)(3) and OPM regulations (5 CFR 337 Subpart B) on direct-hire: All candidates who meet all the qualifications and other eligibility requirements may be referred for consideration. Competitive examining rules providing for rating and ranking and veterans' preference do not apply.
Referral: All qualified & eligible candidates will be referred to the hiring manager for consideration.
If you are a displaced or surplus Federal employee (eligible for the Career Transition Assistance Plan (CTAP)/Interagency Career Transition Assistance Plan (ICTAP)) you must meet specialized experience and any education requirement to receive special selection priority.

• Benefits
  A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
  Eligibility for benefits depends on the type of ...