Computer Investigative Forensic Specialist

Duties

WHAT IS THE CRIMINAL INVESTIGATION (CI) DIVISION?

A description of the business units can be found at:

Vacancies will be filled in the following specialty areas:
Cyber and Forensics Service, Digital Forensics

The following are the duties of this position at the full working level.

Computer Investigative Forensic Specialist:

-Provides expert digital forensic support through the scientific analysis of electronic evidence by recovering and analyzing electronic evidence associated with investigations of potential breaches of US tax law. Conducts computer and mobile forensic examinations that are consistent with those standards established by IRS-CI, as well as reflective of current trends and techniques within the law enforcement and professional communities. This may include the testing of forensic software and other appropriate automated analytical tools to meet diverse investigative requirements. This can have a material adverse effect on national security.

-Assembles PC workstation components and configures CPU environments to a predetermined scheme or chooses the most appropriate configuration for the investigation being performed. Troubleshoots software problems of moderate difficulty with the common software builds used in the organization. The incumbent would be responsible for assisting on data spills of classified information and the mitigation of such information spills.

-Designs, develops, and manages forensic evidence systems that meet current and future business requirements and apply and extend, enhance, or optimize the existing architecture. Manages assigned projects. Communicates complex technical requirements to non-technical personnel. Prepares and presents briefings to senior management officials on complex/controversial issues.

-Assists in the initial testing of the systems and programs. Performs acceptance tests, integration tests, maintenance, diagnostic tests, and helps analyze system failures as indicated by the different tests. Assists in the resolution of problems as reported by users and detected by monitoring systems.

-Develops and interprets policies and procedures governing computer forensic operations throughout CI.

-Anticipates the effects of changing business requirements and new computer forensic techniques on CI strategic planning. Identifies potential problems in attaining goals and recommends modifications to strategic plans.

Computer Investigative Forensic Analyst:

-Reviews new legislation with a direct or indirect impact on the field of computer forensics. Evaluates the impact upon agency programs and operations and makes recommendations that significantly influence important CI policies, programs, or operations

-Independently determines the need for and conducts research in the assigned specialty area, and on computer forensic related issues in general. Keeps abreast of the latest developments in this complex, rapidly evolving field by researching technical publications, attending technical seminars, networking with outside user groups, etc.

-Develops guidelines for the application of those techniques by CISs.

Some of these positions have career progression. If you are selected at a grade level lower than the full working level, you may be non-competitively promoted as your career progresses. For example, you may be hired as a GS-05, but if the position has career progression to GS-11, then you may move from a GS-05 to a GS-11 in as little as three years.

Requirements
Conditions of Employment

• Must be a U.S. Citizen or National and provide proof of U.S. Citizenship. (Birth certificate showing birth in the U.S; Unexpired U.S. Passport; Certificate of Citizenship or Naturalization; or Report of Birth Abroad of a U.S. Citizen (Form FS-240))

Qualifications

Federal experience is not required. The experience may have been gained in the public sector, private sector or One year of experience refers to full-time work; part-timework is considered on a prorated basis. To ensure full credit for your work experience, please indicate dates of employment by month/year, and indicate number of hours worked per week, on your resume.

You must meet the following requirements by the closing date of this announcement OR time of referral:

SPECIALIZED EXPERIENCE FOR GS-09:

You must have 1 year of specialized experience at a level of difficulty and responsibility equivalent to the GS-07 grade level in the Federal service. Specialized experience for this position includes providing basic Digital Forensic support and the analysis of electronic evidence; conducting computer and mobile forensic examinations per established standards; testing forensic software; using analytical tools on digital media; preparing comprehensive final forensic reports; assisting in the assembling of PC workstations and configuring CPU environments; troubleshooting common software problems and/or referring to higher graded specialists for assistance; planning and carrying out assignments and revising methods and approaches; working with vendors to discuss upgrade and maintenance problems; assist in initial testing of systems and programs; testifying in Grand Juries, courts of law or administrative hearings. You may substitute education for specialized experience as follows: master's or equivalent graduate degree.
OR

two (2) full years of progressively higher-level graduate education leading to a master's or equivalent graduate degree.
OR

an LL.B. or J.D., if related.

SPECIALIZED EXPERIENCE FOR GS-11:

You must have 1 year of specialized experience at a level of difficulty and responsibility equivalent to the GS-09 grade level in the Federal service. Specialized experience for this position includes providing routine digital forensic support and the analysis of electronic evidence; conducting computer and mobile forensic examinations per established standards; testing forensic software; using analytical tools on digital media; preparing comprehensive final forensic reports; assembling PC workstations and configuring CPU environments; troubleshoot software problems of moderate difficulty; planning and carryings out assignments and revising methods and approaches used; interpreting IT policies, standards, and guidelines, conducting analysis and making recommendations within specialty areas; working with vendors to discuss upgrades and maintenance problems; assisting in the initial testing of systems and programs; testifying in Grand Juries, courts of law or administrative hearings. You may substitute education for specialized experience as follows a Ph.D. or equivalent doctoral degree.
OR

Three (3) full years of progressively higher-level graduate education leading to a doctoral degree.
OR

LL.M., if related.

SPECIALIZED EXPERIENCE FOR GS-12:

You must have 1 year of specialized experience at a level of difficulty and responsibility equivalent to the GS-11 grade level in the Federal service. Specialized experience for this position includes providing advanced digital forensic support and analysis of electronic evidence; conducting advanced computer and mobile forensic examinations per established standards; testing forensic software; using analytical tools on digital media, preparing comprehensive final forensic reports; independently assembling PC workstations and configuring CPU environments; troubleshooting software problems of moderate difficulty; designing, developing and managing forensic evidence systems; extending, enhancing, or optimizing existing forensic systems architecture; managing projects; communicating complex technical requirements to non-technical personnel; presenting briefings to senior management; interpreting IT policies, standards and guidelines and conducting analysis and making recommendations within specialty areas assigned; working with vendors to discuss upgrading and maintenance problems; assisting in initial testing of systems and programs; testifying in Grand Juries, courts of law or administrative hearings

SPECIALIZED EXPERIENCE FOR GS-13:

You must have 1 year of specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level in the Federal service. Specialized experience for this position includes: providing expert digital forensic support and analysis of electronic evidence; conducting advanced computer and mobile forensic examinations per established standards; testing forensic software; using analytical tools on digital media; preparing comprehensive final forensic reports; developing program wide policies, procedures, and strategies for forensic analysis of evidence; providing expert technical advice and guidance to program management and stakeholders; Independently assembling PC workstations and configuring CPU environments; troubleshooting software problems of moderate difficulty; designing, developing and managing forensic evidence systems; extending, enhancing, or optimizing existing forensic systems architecture; managing projects; communicating complex technical requirements to non-technical personnel; presenting briefings to senior management; interpreting IT policies, standards and guidelines and conducting analysis and making recommendations within specialty areas; working with vendors to discuss upgrades and maintenance problems; initial testing of systems and programs; testifying in Grand Juries, courts of law or administrative hearings.

SPECIALIZED EXPERIENCE FOR GS-14:

You must have at least one (1) full year of specialized experience at a level of difficulty and responsibility equivalent to the GS-13 grade level in the Federal service. Specialized experience is experience that is related to the work of this position and has provided you with the competencies required for successful job performance. Specialized experience for this position includes: Experience working with computer forensics principles, network operations, and protocols to plan and carry out complex assignments and develop new methods, approaches, and procedures in computer forensics. Experience interacting orally and in writing to provide advice and instruction to industry professionals, local, federal, and state agencies on all aspects of digital forensics. Experience applying laws, regulations, and investigative methods to the analysis of digital evidence. Experience utilizing computer and network equipment, forensic software applications, specialized forensic equipment, programming languages, and computer scripting to support investigative actions. Experience conceiving and identifying innovative new approaches and new concepts, guides, and methodologies to solve unprecedented problems, and then training peers to perform the same procedure.

For more information on qualifications please refer to .

Education

For positions with an education requirement, or if you are qualifying for this position by substituting education or training for experience, submit a copy of your transcripts or equivalent. An official transcript will be required if you are selected.

A college or university degree generally must be from an accredited (or pre-accredited) college or university recognized by the U.S. Department of Education. For a list of schools which meet these criteria, please refer to .

FOREIGN EDUCATION: Education completed in foreign colleges or universities may be used to meet the requirements. You must show proof the education credentials have been deemed to be at least equivalent to that gained in conventional U.S. education program. It is your responsibility to provide such evidence when applying. Click (Section 3, Explanation of Terms) or for Foreign Education Credentialing instructions.

Additional information

• A 1-year probationary period is required. Note: Current Federal employees may be required to serve a new probationary period (5 CFR b)).
• Have your salary sent to a financial institution of your choice by Direct Deposit/Electronic Funds Transfer.
• Submit to a drug test prior to your appointment and random drug testing while you occupy the position. Negative result required.
• We may select from this announcement or any other source to fill one or more vacancies. Additional jobs may be filled.
• This is a non-bargaining unit position.
• Tour of Duty: Day Shift, Start and Stop times between 6:00AM-6:00PM
• Alternative work schedule, staggered work hours or telework may be available.
• In the event that a building is closed due to rent management, new hires may be placed in a local commuting location.
• Telework Eligible Positions: Telework eligible positions do not guarantee telework. Employees must meet and sustain IRS telework eligibility requirements (e.g., reporting at least twice a pay period to your assigned Post of Duty (POD)) and supervisor's approval to participate in the IRS Telework Program. Employees must also be within a 200-mile radius of their official assigned post-of-duty (POD) while in a telework status. As a reminder - If you are selected for a position, you are responsible for reporting to your designated POD (location) on the negotiated start date or as directed by management.
• Relocation expenses - No
• The employment of any candidate selected for this position, including a current employee or a new hire, selected for this position may be conditional upon classification and/or audit of federal tax returns. This audit may include up to 2 years of returns
• File a Confidential Financial Disclosure Report within 30 days of appointment and annually from then on.
• The employment of any candidate, including a current employee or a new hire, selected for this position will be conditional on obtaining and maintaining a High Risk Security Clearance.
• Obtain and use a Government-issued charge card for business-related travel.

Though many locations may be listed, you will be limited to a maximum of 5 location choices. Please consider each location carefully when applying. If you are selected for a position at one of your location selections, that location will become your official post of duty.

This is an open continuous announcement which allows applicants to apply up to the closing date of the announcement, 01/31/2025. This announcement will establish an inventory of applicants. Contingent upon funding and space requirements, one or more vacancies may be filled at the locations listed in this announcement as they come available.

• A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. .
  

  
  

  Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.

  
  
  

Required Documents

The following documents are required and must be provided with your application. All application materials, including transcripts, must be in English.

1. Online Application - Questionnaire
2. Education - See Education Section above
3. Registration/License (If Applicable) - active, current registration/license
4. High School Diploma (or equivalent) - If you are 16 or 17 years of age, you MUST submit documentation of graduation from high school (or equivalent); OR completion of a formal vocational training program; OR statement from school authorities agreeing with your decision to pursue employment rather than continuing your education.

Please note that if you do not provide all required information, as specified in this announcement, you may not be considered for this position (or may not receive the special consideration for which you may be eligible).

How to Apply

This Direct Hire Public Notice is to gather applications that may or may not result in a referral or selection. Your application will remain active through the open period of this Public Notice. Applicants will be referred on a first in, first out basis. Those applicants who are applying earlier in the process will stand a much better chance of being referred for consideration in the selection process.

The following instructions outline our application process. You must complete this application process and submit any required documents by 11:59 p.m. Eastern Time (ET) on 01/31/2025 in this announcement. We are available to assist you during business hours (normally 8:00 a.m. - 4:00 p.m. ET, Monday - Friday). If applying online poses a hardship, please contact us by noon ET on 01/31/2025.
To preview the Application Questionnaire, please click the following link:

• To begin the application process, click the "Apply Online" button.
• You will be re-directed to USA STAFFING to complete your application process; answer the online questions and submit all required documents. (To submit supporting documents, import documents from USAJOBS to the appropriate document types. If the document you need was not imported from USAJOBS, you may upload it directly into this application. To protect your privacy, we suggest you first remove your SSN).
• To complete, you must click the "Submit Application" button prior to 11:59 PM (ET) on 01/31/2025.

To update your application, including supporting documentation, at any time during the announcement open period, return to your USAJOBS account (). There you will find a record of your application, the application status, and an option to Update Application. This option will no longer be available once the announcement has closed.

To verify the status of your application both during and after the announcement open period, log into your USAJOBS account: . All of your applications will appear on the Welcome page. The application record in your USAJOBS account provides an Additional Application Information page that provides information regarding the documentation you submitted and any correspondence we have sent related to this application. The Application Status will appear along with the date your application was last updated. For information on what each Application Status means, visit: .

Agency contact information

(ERC) Employee Resource Center

Phone

Email

Website

Address

CI - Criminal Investigation

1111 Constitution Ave NW

Washington, DC 20224

US

Next steps

Treasury believes in a working environment that supports inclusion; to review reasonable accommodation policies and procedures please visit . We provide reasonable accommodation to applicants with disabilities on a case-by-case basis; contact us if you require this for any part of the application and hiring process.

Once your application package and online questionnaire is received you will receive an acknowledgement email. You are responsible for checking status updates and notifications in USAJOBS. Hard copy notifications will not be sent to you. You may check the status of your application for this position at any time by logging onto the USAJOBS "My Account" tab and clicking on "Application Status." For a more detailed update of your application status, you may click on "more information." Please notify us if your contact information changes after the closing date of the announcement. If your email mailbox is full or blocked (SPAM) you may not receive important communication that could affect your consideration for this position.

Fair & Transparent

The Federal hiring process is set up to be fair and transparent. Please read the following guidance.

---