Intelligence Operations Specialist (Cyber)

As a INTELLIGENCE OPERATIONS SPECIALIST (CYBER) at the GGsome of your typical work assignments may include:

• Conducts defensive Counterintelligence (CI) Cyber activities as delineated in DoD Directive 5240-2 and DoD Instruction S-5240.23 and in accordance with National Counterintelligence Executive (NCIX) DoD and DTRA published standards.
• Conducts CI Cyber analysis CI Incident Assessments (CIIAs) and operations to detect deter and defeat foreign intelligence cyber threats against DTRA information information systems and personnel.
• Routinely collects analyzes and disseminates information of value to DTRA Combat Commanders Law Enforcement and the IC answering information gaps for these customers. Drafts prepares and reviews specific operations and intelligence reports.
• Routinely conducts research and analysis on matters of CI or security concern. Identifies trends and conducts analysis on CI cyber threats and vulnerabilities. Periodically conducts CI and cyber threat assessments of DTRA and DoD facilities and programs worldwide.
• Provides advice and recommendations as needed to improve security measures and protect critical information.
• Independently plans prepares and conducts CI and security briefings for DTRA personnel on related cyber matters. Applies knowledge of foreign intelligence and security services (FISS) operations and terrorist modus operandi in formulating briefings and providing recommendations to senior department officials on cyber threats related to their programs. Briefs top level agency officials about issues that could impact the agencys mission planning or personnel.
• Establishes and conducts regular liaison with members of law enforcement and intelligence communities to facilitate the exchange of cyber threat information and maintain contacts required to support the mission. Represents DTRA and participates in intra- and inter-agency conferences and symposia.
• Conducts cyber threat hunting activities in support of defensive CI Cyber mission using tools and datasets; including logging tools network traffic analyzers and various information systems logs.
• Determines the CI involvement resulting from network intrusion events and coordinates with internal and external cyber and CI elements routinely and as needed.
• Works closely with cybersecurity entities within DTRA and its partners such as Cyber Security Service Provider (CSSPs) teams Information Assurance elements and other cybersecurity groups to assess cyber-related incidents and threats for CI and foreign intelligence indicators.
• Provides guidance and recommendations to DTRA IT to deter potential foreign cyber threats to DTRA information and information systems.
• Extracts interprets and analyzes digital evidence from various information systems; including computers mobile devices and network assets using forensic methodology in support of CI activities assessments operations and support to national-level investigative agencies.
• Supports DTRA Security and Cybersecurity elements in cases involving digital media information and network systems; and other cyber-related issues and incidents.
• Examines and analyzes CI evidence and interprets scientific observations and data to render conclusions form opinions and produce reports using a full range of electronic search methods and forensic examination techniques.
  

Conditions of employment

• Must be a U.S. Citizen
• Occasional Travel - Travel to perform temporary assignments may be required up to 25% of duty time CONUS/OCONUS
• Work Schedule: Full-time
• Males born aftermust be registered for Selective Service
• Suitable for Federal employment determined by a background investigation
• May be required to successfully complete a probationary period
• Tour of Duty: Flexible
• Recruitment Incentives: May Be Authorized
• Fair Labor Standards Act (FLSA): GG-13: Exempt
• Financial Disclosure: Not Required
• Telework Eligibility: This position is an in-person position at facilities located at Fort Belvoir position may be eligible for limited situational telework subject to supervisory approval and not to exceed current Agency guidelines.
• Must be able to obtain and maintain a TOP SECRET/SCI security clearance.
• Overtime/compensatory time may be required to accommodate operational needs of the organization.
• May be subject to random DoD counterintelligence scope polygraph if assigned to programs or duty locations requiring such.
• Position is a (DCIPS) position in the Excepted Service under U.S.C. 1601
• Must be a credentialed CI agent or successfully completed a CI credentialing course within one year of appointment per DoD Directive S-5240.02 to obtain DTRA CI Emblem and Credentials.
• Must consent to and pass pre-employment drug testing and be subject to periodic random drug testing thereafter
• Valid passport required

Qualifications

The experience described in your resume will be evaluated and screened from the Office of Personnel Managements (OPMs) basic qualifications requirements. See: i.e. for positions with no IOR: for OPM qualification standards competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 02/16/2026

Applicant must have directly applicable experience that demonstrates the possession of the knowledge skills abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job but will clearly demonstrate past experience in the application of the particular competencies/knowledge skills and abilities necessary to successfully perform the duties of the position. Such experience is typically in or directly related to the work of the position to be filled.

You may qualify at the GG -13 if you fulfill the following qualifications:

A. One year of specialized experience equivalent to the GG/GS-12 grade level in the Federal service as listed below:

• Conducting cyber threat hunting activities in support of defensive CI Cyber mission using tools and dataset as a credentialed CI agent.
• Managing defensive CI activities in support of cybersecurity operations AND/OR plans and policies.
• Conducting measures to detect respond and/or protect information systems and networks from foreign intelligence threats operating in cyberspace.
• Applying digital forensics methodologies tools and techniques used in data recovery and/or preservation of electronic evidence in support of CI activities.