Skip to main content
U.S. flag
Back to results

Insider Threat Analyst

Department of Homeland Security
DHS Headquarters
Office of the Chief Security Officer, Threat Management Operations
This job announcement has closed

Summary

This position is located in the Department of Homeland Security (DHS), Office of the Chief Security Officer, Threat Management Operations.

The primary purpose of this position is to conduct monitoring and analysis of various technical and non-technical data sources for anomalous behaviors, and to conduct inquiries into suspected insider threat activity.

Non-BU: This is a non-bargaining unit position.

Overview

Help
Reviewing applications
Open & closing dates
11/19/2025 to 11/24/2025
This job will close when we have received 100 applications which may be sooner than the closing date. Learn more
Salary
$101,401 to - $156,755 per year

Salary includes locality for the Springfield, VA area

Pay scale & grade
GS 12 - 13
Location
2 vacancies in the following location:
Springfield, VA
Remote job
No
Telework eligible
No
Travel Required
50% or less - You may be expected to travel for this position.
Relocation expenses reimbursed
No
Appointment type
Permanent
Work schedule
Full-time
Service
Competitive
Promotion potential
13
Supervisory status
No
Security clearance
Sensitive Compartmented Information
Drug test
Yes
Position sensitivity and risk
Special-Sensitive (SS)/High Risk
Trust determination process
Financial disclosure
No
Bargaining unit status
No
Announcement number
ST-12808238-26-OCSO
Control number
850331400

Duties

Help

As a Insider Threat Analyst, GS-1801-12/13, your typical work assignments may include the following:

  • Plans and conducts insider threat inquiries with internal, interagency, and national security implications by conducting case management activities, including documenting and tracking reported allegations, events, and incidents, develops insider threat inquiries and investigative findings.
  • Analyzes new legislation, policies, and investigative trends to determine where policy formulation, refinement, or clarification is indicated. Streamlines operations and refines analytical techniques to detect and validate potential insider threats.
  • Facilitates ongoing inquiries and participates with other law enforcement and intelligence personnel in planning, conducting and supporting investigations into criminal, administrative and security incidents.
  • Utilizes digital evidence and network audit data as part of cyber related inquiries with internal, interagency, and national implications. Performs User Activity Monitoring (UAM) and other cyber forensic activities to analyze and detect insider threat activities and suspicious behaviors.
This announcement will be open for 5 business days OR until the first 100 applications have been received, whichever happens first.

View common definitions of terms found in this announcement: Common Definitions.

Requirements

Help

Conditions of employment

  • You must be a U.S. citizen to apply for this position.
  • Males born after 12/31/1959 must be registered for Selective Service.
  • You must successfully pass a background investigation.
  • Complete the initial online assessment and USAHire Assessment, if required.
  • You must submit to a pre-employment drug test.
  • Current federal employees must meet time-in-grade requirements.
  • You may be required to serve a one-year probationary period.
  • Applying to this announcement certifies that you give permission for DHS to share your application with others in DHS for similar positions.
  • You will be required to undergo periodic drug testing.
  • You must be able to obtain a Top Secret/Sensitive Compartmented Information Security Clearance.
  • May be required to work other than normal duty hours, which may include evenings, weekends, and/or holidays and/or overtime.
  • Work may occasionally require travel away from the normal duty station on military or commercial aircraft.
  • May be required to work in shifts on a rotational basis in support of 24-hour operations.

Qualifications

There are no Individual Occupational Requirements for this series.

Specialized Experience:

You qualify at the GS-12 grade level if you possess the following:

  • One year of specialized experience, equivalent to the GS-11 grade level in Federal service, that demonstrates the ability to defined as skills in gathering, identifying, receiving, ingesting, examining, and integrating data on potential insider threat incidents from various sources to evaluate potential insider threat indicators; Proficiency in using data visualization techniques and tools for collecting, analyzing, visualizing, and reporting on complex information; Knowledge of counterintelligence principles, methods, functional services, and potential criminal behaviors/activities.

You qualify at the GS-13 grade level if you possess the following:
  • One year of specialized experience, equivalent to the GS-12 grade level in Federal service, that demonstrates significant experience in gathering, identifying, receiving, ingesting, examining, and integrating data on potential insider threat incidents from various sources to evaluate potential insider threat indicators; Knowledge of counterintelligence principles, methods, functional services and potential criminal behaviors/activities; Proficiency in utilizing automated analytics systems, web logs, and User Activity Monitoring (UAM) to identify behavioral and technical threat indicators, and practical understanding in utilizing enterprise security software to aggregate and analyze data.
Substitution for education is not applicable at the GS 12 and 13 grade level.

All qualifications and eligibility requirements must be met by the closing date of the announcement.

Time-in-grade: Current General Schedule (GS) federal employees, and those that have served in GS positions within the last 52 weeks, must have served 52 weeks at the next lower grade, or a combination of the next lower grade level and an equivalent band in the federal service by the closing of this announcement.

Note: Current or former Federal employees MUST submit a copy of their SF-50 Form which shows competitive service appointment ("position occupied" block 34 on the SF-50 should show a "1"), tenure group (block 24 should show a 1 or 2), grade, and salary. If you are applying for a higher grade, please provide the SF-50 Form which shows the length of time you have been in your current/highest grade (examples of appropriate SF-50s include promotions, With-in Grade/Range Increases, and SF-50s dated a year apart within the same grade/job). If you have promotion potential in your current position, please provide proof. Employees applying with an interchange agreement must provide proof of their permanent appointment. IF YOU DO NOT SUBMIT ALL OF THE REQUIRED DOCUMENTATION, YOU WILL NOT RECEIVE CONSIDERATION AS A STATUS CANDIDATE.

Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C, Non-career SES or Presidential Appointee employee in the Executive Branch, you must disclose this information to the Human Resources Office.

Essential Personnel Position - This position may be designated as essential personnel. Essential personnel must be able to serve during continuity of operation events without regard to declarations of liberal leave or government closures due to weather, protests, and acts of terrorism or lack of funding. Failure to report for or remain in this position may result in disciplinary or adverse action in accordance with applicable laws, rules, and regulations. (5 U.S.C. 7501-7533 and 5 CFR, Part 752, as applicable).

Education

Not Applicable

Additional information

The Department of Homeland Security encourages persons with disabilities to apply, to include persons with intellectual, severe physical or psychiatric disabilities, as defined by 5 CFR 213.3102(u), and or Disabled Veterans with a compensable service-connected disability of 30 percent or more as defined by 5 CFR 315.707. Veterans, Peace Corps, VISTA volunteers, and persons with disabilities possess a wealth of unique talents, experiences, and competencies that can be invaluable to the DHS mission. If you are a member of one of these groups, you may not have to compete with the public for federal jobs. To determine your eligibility for non-competitive appointment and to understand the required documentation, click on the links above or contact the servicing Human Resources Office listed at the bottom of this announcement.

Pursuant to Executive Order 12564 and DHS policy, DHS is committed to maintaining a drug-free workplace and, therefore, conducts random and other drug testing of its employees in order to ensure a safe and healthy work environment. Headquarters personnel in safety- or security-sensitive positions are subject to random drug testing and all applicants tentatively selected for employment at DHS Headquarters are subject to drug testing resulting in a negative test result.

This position may be filled at the GS-12 or GS-13 level. If selection is made at the GS-12 level, promotion to the GS-13 level may occur without further competition.

  • You may be required to serve a one-year probationary period.
  • Permanent Change of Duty Station (PCS) Expenses will NOT be paid.
  • This position may be designated as essential personnel. These personnel must be able to serve without regard to declarations of liberal leave, government closures due to weather, protests, and acts of terrorism, or lack of funding.
  • Selectee may be required to work overtime and shift work.
If you receive a conditional offer of employment for this position, you will be required to complete an Optional Form 306, Declaration of Federal Employment, and to sign and certify the accuracy of all information in your application, prior to entry on duty. False statements on any part of the application may result in withdrawal of offer of employment, dismissal after beginning work, fine, or imprisonment.

Background Investigation: To ensure the accomplishment of our mission, DHS requires every employee to be reliable and trustworthy. To meet those standards, all selected applicants must undergo and successfully pass a background investigation for Top Secret clearance as a condition of placement in this Special-Sensitive position. This review may include financial issues such as delinquency in the payment of debts, child support and/or tax obligations, as well as certain criminal offenses and illegal use or possession of drugs.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated based on how well you meet the qualifications listed in this vacancy announcement. Your qualifications will be evaluated based on your application materials (e.g., resume, supporting documents), the responses you provide on the application questionnaire, and the result of the online assessments required for this position. You will be assessed on the following competencies (knowledge, skills, abilities, and other characteristics): Attention to Detail, Customer Service, Flexibility, Integrity/Honesty, Interpersonal Skills, Learning, Reading Comprehension, Reasoning, Self-Management, Stress Tolerance, and Teamwork

  • Investigative methods
  • Exercising initiative
  • Attention to detail
  • Judgment and Problem Solving
  • Ability to analyze and evaluate data or evidence
  • Ability to partner with or lead others
To be considered for this position, you must complete all required steps in the process. In addition to the application and application questionnaire, this position requires an online assessment. The online assessment measures critical general competencies required to perform the job.

If you are the best qualified, you may be referred to the hiring manager for consideration and may be called for an interview. To preview the application questionnaire, click: https://apply.usastaffing.gov/ViewQuestionnaire/12808238

Interviews are required for this position. Failure to complete the interview may result in removal from further consideration.

Veterans Employment Opportunities Act (VEOA): To be eligible for a VEOA appointment, the veteran must be 1) be a preference eligible; or 2) be a veteran separated after 3 or more years of continuous active service performed under honorable conditions. In addition, you must submit the supporting documents listed under the required documents section of this announcement. (Note: Veteran's preference does not apply under Merit Promotion procedures. View VEOA information on Feds Hire Vets.)

Interagency Career Transition Assistance Program (ICTAP) Eligibles: If you have never worked for the federal government, you are not ICTAP eligible. View information about ICTAP eligibility on OPM's Career Transition Resources website. To be considered well qualified under ICTAP, you must be rated at a minimum score of 85 for this position. In addition, you must submit the supporting documents listed under the required documents section of this announcement.

Due weight will be given to performance appraisals and incentive awards in merit promotion selection decisions in accordance with 5 CFR 335.103(b)(3).

Overstating your qualifications and/or experience in your application materials or application questionnaire may result in your removal from consideration. Cheating on the online assessment may also result in your removal from consideration.

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.