Intelligence Research Specialist

This is an Excepted Service position. This appointment will not confer Competitive Service career-conditional or career tenure status. This means that if you are selected you would have to compete with other applicants in open competition to meet requirements for another Federal position unless you meet the requirements for reinstatement. Applicants who voluntarily convert from the competitive service Senior Executive Service or other pay systems to a non-time limited appointment under this excepted service authority are not afforded fallback rights to the pay system previously assigned prior to conversion.

As a GS-13 Intelligence Research Specialist you will:

• Researches and analyzes all-source intelligence reporting to evaluate adversary tactics techniques procedures and malicious activity targeting Department of Energy (DOE) and U.S. energy sector critical infrastructure networks.
• Drafts and disseminates strategic tactical and technical threat assessments reports and long-range estimates adhering to Intelligence Community (IC) analytic tradecraft standards.
• Partners with DOE leadership national laboratories National Nuclear Security Administration (NNSA) program offices the Intelligence Community and energy industry stakeholders to integrate specialized expertise into comprehensive analyses.
• Prepares and delivers clear written briefings and oral presentations translating complex cyber and technical data for policymakers senior IC leaders congressional staff and operational personnel.
• Identifies gaps in current reporting and develops targeted intelligence collection requirements to support cyber and energy security mission needs.
• Serves as a technical subject-matter expert on review panels and working groups to justify negotiate and defend organizational intelligence assessments.

• You must be a U.S. Citizen or National.
• This employer participates in the e-Verify program.
• If you are a male applicant born after December 31 1959 you must certify that you have registered with the Selective Service System or are exempt from having to do so under the Selective Service Law. See .
• If selected your appointment may be subject to a suitability or fitness determination as determined by a completed background investigation.
• If selected you may be required to complete a one year probationary period.
• This position is not remote the selectee will be expected to report to the duty station(s) listed. If selected military spouses veteran caregivers and spouses of foreign service employees may be eligible for applicable workplace flexibilities.
• This position has been designated as Special-Sensitive (High Risk) and requires a security clearance at the Q level. The incumbent is required to obtain and maintain this clearance; failure to do so may result in separation from federal service.
• In addition the incumbent is required to obtain and maintain a Sensitive Compartmented Information (SCI) security clearance prior to entrance on duty; failure to do so may result in separation from federal service.
• This position is a Testing Designated Position (TDP) subject to applicant testing and random drug testing thereafter. Failure to test or a positive result on random drug tests conducted after appointment may result in removal from Federal employment.
• Situational telework may be approved at the discretion of the supervisor.
• This position is not included in a Bargaining Unit.

SPECIALIZED EXPERIENCE REQUIREMENTS: A qualified candidates online application and resume must demonstrate at least one year of specialized experience equivalent to the next lower grade level in the Federal service.

1. Analyzing cyber threat intelligence data by reviewing multi-source technical information to identify adversary tactics techniques and procedures (TTPs) and assess potential risks to computer networks or critical infrastructure systems.
2. Drafting finished intelligence reports or assessments that synthesize complex technical data into clear written findings and projections tailored for decision-makers and non-technical stakeholders.
3. Identifying intelligence or data collection gaps and coordinating with internal teams or external organizations to define information requirements and support cyber threat mitigation efforts.

1. Gathering evaluating and interpreting all-source technical data and cyber threat reports to identify adversary tactics techniques and procedures (TTPs) and assess potential risks to enterprise IT networks operational technology (OT) or critical infrastructure.
2. Writing and publishing clear structured threat intelligence assessments technical summaries or advisory reports that explain complex cyber threats draw logical conclusions and provide actionable findings for both technical and non-technical audiences.
3. Collaborating across internal teams or with external industry/government partners to share actionable threat indicators identify gaps in current threat information and request or route specific intelligence-gathering needs.

1. Researched evaluated and correlated all-source data or technical network reporting to identify adversary tactics techniques and procedures (TTPs) threat capabilities and vulnerabilities affecting critical infrastructure information technology (IT) or operational technology (OT) systems.
2. Authored finished objective intelligence reports technical threat assessments or risk evaluations that synthesized complex data addressed intelligence gaps and forecasted potential adversary actions under tight deadlines.
3. Communicated complex cyber threat assessments and technical findings to both technical experts and non-technical decision-makers through written briefings or presentations to recommend mitigation strategies or inform operational decisions.