Clarification from the agency

All candidates who are: Current or former federal employees qualifying as Status Candidates, Federal employees currently serving on a VRA, VEOA eligibles, CTAP/ICTAP eligible, eligible for special hiring authorities (e.g., the Schedule A appointment for persons with disabilities, or covered by an Interchange Agreement), or Land Management employees eligible through Public Law 114-47.

As a Criminal Investigator (Cybercrimes Special Agent) , you will:

• Conduct extremely difficult, complex, technical, and highly sensitive investigations of national and international dimensions, particularly as they relate to cybercrimes and digital evidence. This work often includes the preparation and execution of digital search warrants, court orders and subpoenas; and analysis of digital evidence such as email headers, file metadata, and log files. Plan and manages multi-jurisdictional investigations where methods are subject to changing legal admissibility.
• Plan and conduct interviews with victims, suspects, witnesses, and informants during case development and analyzes evidence provided by other OIG investigators. Serve search warrants and subpoenas; searches crime scenes for evidence and provides technical assistance to other OIG investigators. Collect and analyze evidence and intelligence from a wide range of sources which include but are not limited to law enforcement agencies, military departments, foreign governments, financial institutions and technology companies.
• Provide forensic analysis and data mining of large data sets, which often consist of, but is not limited to, account access logs, email search warrant returns, and contents of electronic storage devices seized during criminal or administrative investigations; and conduct research and development projects to resolve developing technical issues which impact on the security of Department of the Treasury (Treasury) and OIG networked systems. Develop new investigative techniques and methods to address techniques that may become obsolete due to changes in data retained by technology companies, and changes in software and hardware platforms used by OIG.
• Prepare interim and comprehensive final investigative or forensic reports for prosecutive and management officials. Responsible for the coordination and integration of investigative findings to ensure clarity, accuracy, conciseness and presentation of sufficient detail.
• Testify before Grand Juries, courts, or administrative hearings on the facts of criminal or administrative cases, in particular cases involving internet-based fraudulent schemes, computer system compromise and network intrusions.  
• Provide expert advice, analysis, and investigative guidance to other Criminal Investigators and managers on all technology-related aspects of OIG investigations. Compile data from other OIG investigators in order to make recommendations for new procedures and policies utilized while conducting cybercrime investigations. Plans, coordinates and initiates contacts with Federal, State, and local officials; the private sector technical community; the law enforcement forensic and network intrusion communities; and individuals responsible for research and development projects for the purpose of developing and applying technical solutions to OIG investigations generally complicated by innumerable jurisdictional problems.
  

Conditions of employment

• Must be a U.S citizen or U.S National
• Please refer to "Conditions of Employment"
• Click "Print Preview" to review the entire announcement before applying

The experience may have been gained in either the public or private sector or volunteer service. One year of experience refers to full-time work; part-time work is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/day/year, and indicate number of hours worked per week on your résumé.

Qualifications

You must meet all eligibility and qualification requirements by the closing date of this announcement.

Medical Requirements: The selectee must pass a pre-appointment physical examination and meet the physical requirements for this position as required by this agency. The duties of this position require moderate to arduous physical exertion involving walking and standing, use of firearms, and exposure to inclement weather. Manual dexterity with comparatively free motion of finger, wrist, elbow, shoulder, hip, and knee joints is required. Arms, hands, legs, and feet must be sufficiently intact and functioning in order that applicants may perform the duties satisfactorily. Sufficiently good vision and hearing are required to perform the duties satisfactorily. Because the duties of this position are exacting, responsible, and sometimes performed under trying conditions, the selectee must possess emotional and mental stability. Any condition that would cause the selectee to be a hazard to himself/herself, or others is disqualifying.

Age Restriction: The date immediately preceding an individual's 37th birthday is the maximum entry age for original appointment to a position within the OIG as a law enforcement officer. Please note: a) This requirement does not apply to preference-eligible veterans; b) An individual who is 37 years of age or older may be reemployed as a law enforcement officer in the OIG if the individual has prior coverage under the special law enforcement retirement plan.

Specialized experience: For the GS-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes: 

• Working in a rigorous law enforcement position that has provided the incumbent with experience in investigative techniques, statutes, legal rulings and jurisdictional issues to utilize in formulating policy, provide oversight and technical advice; AND
• Conducting criminal and administrative cyber-based investigations, as a criminal investigator with the authority to arrest, and to determine violations of Federal laws and regulations; AND
• Writing search warrants for accounts at email or other digital service providers and analyzing the returns in furtherance of cyber investigations; OR Conducting forensic examinations of digital devices or media in furtherance of cyber investigations.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Your application includes your résumé, responses to the online questions, and required supporting documents. Please be sure that your résumé includes detailed information to support your qualifications for this position; failure to provide sufficient evidence in your résumé may result in a “not qualified” determination.

Rating: Your application will be evaluated in the following areas: Technical, Communication, Analytical, Leadership.Your application will be rated and ranked among others, based on the extent and quality of your experience, education, training, performance appraisals and awards relevant to the duties of this position. We may lower your rating if your responses to the online questions are not supported by the education and/or experience described in your application.

Referral: If you are among the top qualified candidates, your application will be referred to a selecting official for consideration. You may be required to participate in a selection interview. 

If you are a displaced or surplus Federal employee (eligible for the Career Transition Assistance Plan (CTAP)/Interagency Career Transition Assistance Plan (ICTAP)), you must receive a score of 90 or better to be rated as "well qualified" to receive special selection priority.