Skip to main content
U.S. flag
Back to results

IT Cybersecurity Specialist (INFOSEC) - Insider Risk Data Analyst

Department of Agriculture
Homeland Security Staff
NATIONAL SECURITY DIVISION
This job announcement has closed

Summary

This position is in the National Security Division (NSD) in the Office of Homeland Security (OHS), United States Department of Agriculture (USDA). As an Insider Risk Data Analyst, the incumbent will leverage User Activity Monitoring (UAM) tools and other data analytics to identify and analyze potential insider risks to the Department.

Overview

Help
Reviewing applications
Open & closing dates
09/08/2025 to 09/12/2025
This job will close when we have received 150 applications which may be sooner than the closing date. Learn more
Salary
$101,401 to - $131,826 per year
Pay scale & grade
GS 12
Location
1 vacancy in the following location:
Washington, DC
Remote job
No
Telework eligible
No
Travel Required
Occasional travel - You may be expected to travel for this position.
Relocation expenses reimbursed
No
Appointment type
Permanent
Work schedule
Full-time
Service
Competitive
Promotion potential
None
Supervisory status
No
Security clearance
Sensitive Compartmented Information
Drug test
Yes
Position sensitivity and risk
Special-Sensitive (SS)/High Risk
Trust determination process
Financial disclosure
No
Bargaining unit status
No
Announcement number
OHS-12793314-25-PS
Control number
845036300

This job is open to

Help

Clarification from the agency

Applications will be accepted from any U.S. citizen. Direct Hire Authority will be used to fill this position. Veterans Preference and traditional rating and ranking of applicants does not apply to this vacancy.

Duties

Help
  • Assists the Insider Risk Program Manager by evaluating existing capabilities of User Activity Monitoring tools.
  • Prioritizes the review and response on User Activity Monitoring alerts marked as critical or high severity.
  • Capturing relevant user activity data to identify potential insider risks.
  • Triages critical and high severity alerts generated by monitoring tools for the protection against insider risks.
  • Contributes to the development and improvement of insider risk training, policy, and procedures that are consistent with law, policy, and regulation.
  • Responsible for data collection and applying critical thinking to draft case reports, referral letters, and annual reports in support of the Insider Risk Program.
  • Briefs National Security Division leadership on highly technical and/or complex data for review and acceptance.

Requirements

Help

Conditions of employment

  • You must be a US Citizen or US National.
  • Males born after 12/31/1959 must be Selective Service registered or exempt.
  • Subject to satisfactory adjudication of background investigation and/or fingerprint check.
  • If selected, you may be required to serve a probationary or trial period as applicable to appointment type.
  • Direct Deposit: Per Public Law 104-134 all Federal employees are required to have federal payments made by direct deposit to their financial institution.
  • Successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit E-Verify at https://www.e-verify.gov/.
  • You will be required to sign a Mobility Agreement as mobility is a factor in this occupation. You may be reassigned to a new location during your career based on the needs of the service.
  • Selected applicant must undergo and successfully obtain and maintain a background investigation for a Top Secret SCI clearance. You must meet initial and periodic suitability determinations based on favorable background investigations and updates.
  • This position requires pre-employment urinalysis to screen for illegal drug use. Drug testing must also be passed on an ongoing basis after appointment, as directed. Appointment to this position is contingent upon negative drug test results.
  • This position is considered critical-essential, and as such may be required to return to his/her assigned duty station outside of normal duty hours to provide support to USDA policymakers, particularly during crisis periods.

Qualifications

Applicants must meet all qualifications and eligibility requirements by the closing date of the announcement including basic IT competencies and specialized experience, as defined below.

Basic Requirements: Applicants must meet the following individual occupational requirements in order to be considered for the 2210, Information Management Series:
Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Minimum Qualifications: In addition to meeting the Basic Requirements as shown above, applicants must also meet the Specialized Experience requirements as shown below. If qualifying based on experience, your application or resume must clearly show that you possess the specialized experience requirements. Specialized experience is defined as experience that is typically in or related to the work of the position to be filled and has equipped you with the particular knowledge, skills, and abilities to successfully perform the duties of the position.

At the GS-12: Qualifying experience for GS-12 includes one year of specialized experience comparable to GS-11 which is directly related to the work of this position and which has equipped the applicant with the knowledge, skills, and abilities to perform successfully the duties of the position. For this position, specialized experience is performing all of the following: applying requirements, methods, and techniques of security incident investigation, to include fact-finding, analysis, risk assessment, resolution of security problems; performing system administration on cyber defense applications and systems; and, evaluating and monitoring user activity data for insider risks.


Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

There is no education substitute for specialized experience at the GS-12 level.

Additional information

Direct Hire Authority: This announcement is issued under the direct-hire authority to recruit for positions for which there is acritical need. Selectee(s) will receive a career or career-conditional appointment in the competitive service and may be required to serve a one-year probationary period. Category rating, veteran's preference and traditional rating and raking of applicants do not apply to this public notice.

Career Transition Assistance Plan (CTAP), Reemployment Priority List (RPL), or Interagency Career Transition Assistance Plan (ICTAP): Visit the OPM website for information on how to apply as a CTAP, RPL, or ICTAP eligible. To exercise selection priority for this vacancy, CTAP/RPL/ICTAP candidates must meet the basic eligibility requirements and all selective factors. CTAP/ICTAP candidates must be rated and determined to be well qualified (or above) based on an evaluation of the competencies listed in the How You Will Be Evaluated section. When assessed through a score-based category rating method, CTAP/ICTAP applicants must receive a rating of at least 85 out of a possible 100.

This is a Testing Designated Position (TDP). Selectee must submit to a urinalysis to screen for illegal drug use prior to appointment and random testing thereafter. Final appointment and continued employment is conditional on negative results for illegal drug use.

In the event of an emergency, USDA's Office of Homeland Security (OHS) employees may be subject to 24 hour on-call availability. This service may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites that require functioning under intense physical and mental stress.

Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.

How you will be evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

Under the provisions of the Direct Hire Authority (DHA), veteran's preference does not apply. While veterans' preference does not apply to the DHA, veterans are encouraged to submit their documentation.

Applicants who meet the minimum qualification requirements, and who are otherwise eligible to apply for the position, will be referred for selection consideration. For more information on OPM's authorization for DHA, please visit https://www.opm.gov/policy-data-oversight/hiring-information/direct-hire-authority/.

Applicants who are displaced Federal employees within the local commuting who are requesting priority consideration under the Interagency Career Transition Assistance Program (ICTAP) or Career Transition Assistance Program (CTAP) must be determined Well Qualified using the below evaluation criteria.

Well Qualified- Meets the minimum qualifications of the position and is proficient in some, but not all, of the relevant competencies.
Qualified- Meets the minimum qualifications of the position but is not proficient in the relative competencies to a substantive degree.

Competencies:
Computer Network Defense
Cybersecurity Management
Data Systems

Your application, including the online Assessment Questionnaire, will be reviewed to determine if you meet (a) minimum qualification requirements and (b) the resume supports the answers provided to the job-specific questions. Your resume must clearly support your responses to all the questions addressing experience and education relevant to this position. Those determined to be in the qualified category will be referred to the selecting official for consideration.

Note: Any selections made under this notice will be processed as new appointments to the civil service. Current Federal employees would therefore, be given new appointments to the civil service.

Please follow all instructions carefully. Errors or omissions may affect your rating. Providing inaccurate information on Federal documents could be grounds for non-selection or disciplinary action up to including removal from the Federal service.Clicking the link below will present a preview of the application form; i.e. the online questionnaire. The application form link below will only provide a preview and does not initiate the application process. To initiate the online application process, click the "Apply" button to the right.

To view the application form, visit: https://apply.usastaffing.gov/ViewQuestionnaire/12793314

Your session is about to expire!

Your USAJOBS session will expire due to inactivity in 8 minutes. Any unsaved data will be lost if you allow the session to expire. Click the button below to continue your session.