Cybersecurity Investigations Analyst
What you'd do
The mission of TIGTA's Office of Investigations is to protect the Internal Revenue Service (IRS) from internal and external threats and corruption that could negatively impact the IRS' administration of tax laws. We detect and deter waste, fraud and abuse in IRS programs and operations and protect the IRS against internal misconduct, corruption and external attempts to corrupt or threaten employees. We provide independent oversight to Treasury on IRS activities & IRS Office of Chief Counsel.
Major duties
This position is located at the Treasury Inspector General for Tax Administration, Office of Investigation (OI) - Region 3, Cybercrimes Investigations Division, Cyber Analysis Branch. As a Cybersecurity Investigations Analyst, you will: Serve as a cybersecurity information technology specialist investigating unusual problems, questions, or conditions that impact major Information Technology systems across organizational, geographic, or programmatic lines. Conduct information assurance evaluations of computer systems and logs, information technology methods, controls and strategies, or policies and procedures to ensure confidentiality, integrity, and availability of systems and make recommendations to top level cyber security management on cyber security and investigative matters related to IRS Programs and systems. Participate in the development of new Information Technology Programs or emerging technologies, providing insight or recommendations to protect systems from unauthorized access, use, disclosure, disruption, and modification of taxpayer data. Prepare briefing documents and presents findings of vulnerabilities to TIGTA, IRS, and Treasury cybersecurity executives, IT personnel, and non-IT personnel and recommends changes to policy, procedures, and requirements for IT Security systems Treasury Wide. Promote awareness and alerts of cyber security issues among OI management and ensures sound security principles are reflected in the development of IRS applications and networks.
What you need to qualify
You must meet the following requirements by the closing date of this announcement. Specialized Experience: For the GS-13, you must have one year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes: Conducts cybersecurity evaluations of Treasury Programs or IT systems to ensure data being processed will support cybercrime investigations; AND Conducts analysis on potential cybersecurity breaches, to include testing and validating application audit trails for accuracy and completeness, makes recommendations to top level management; AND Conducts data mining activities related to Security Information and Event Management (SIEM) software to include data retrieval and analysis; AND Correlates data from various sources used to identify potential cybersecurity breaches in Treasury systems. In addition to meeting specialized experience, individuals must meet proficiency levels in each of the following competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, and Technical Competence. A structured interview will be used to determine if you meet the required proficiency levels, wherein you will be interviewed about past experience or hypothetical situations. For the required proficiency levels and competency definitions, please see the following link: Competency-Based Qualification Standard for the Information Technology Management Series, 2210 Time-in-Grade: In addition to the above requirements, you must meet the following time-in-grade requirement, if applicable: For the GS-13, you must have been at the GS-12 level for 52 weeks. Time After Competitive Appointment: Candidates who are current Federal employees serving on a non-temporary competitive appointment must have served at least three months in that appointment.
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.