Cyber Counter Intelligence Analyst

Summary The DCSA Counterintelligence (CI) Operating Component Cyber Mission Center is seeking a GG-0132-13 Cyber Counterintelligence Analyst. Develops, promotes, and integrates DCSA cyber counterintelligence initiatives to identify, assess, and mitigate cyber foreign intelligence threats. Responsibilities As a Cyber Counter Intelligence Analyst you will be responsible for the following duties: Serve as a cyber counterintelligence analytic subject matter expert, providing cyber-enrichment and analysis to DCSA CI activities and reporting. Conduct log analysis to identify cyber incidents, threats, and vulnerabilities and make recommendations for improvements and changes. Identify, research and validate indicators of compromise and counterintelligence-related cyber threat activities to establish attribution and evaluate the level of threat posed. Enhance counterintelligence-related cyber threat and vulnerability awareness among internal and external consumers. Present analytic findings in oral and written communications. As a recognized subject matter expert the employee fully utilizes classified and unclassified databases, software applications, and other intelligence research tools to identify, assess and evaluate cyber adversary capabilities and intentions, methodologies, methods and motives of those who may conduct CNE (computer network exploitation) and CNA (computer network attacks) against designated systems and information. Requirements Conditions of Employment Qualifications The experience described in your resume will be evaluated and screened from the Office of Personnel Management's (OPMs) basic qualifications requirements. See: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/0100/intelligence-series-0132/ for OPM qualification standards, competencies and specialized experience needed to perform the duties of the position as described in the MAJOR DUTIES and QUALIFICATIONS sections of this announcement by 10/19/2026 Applicant must have directly applicable experience that demonstrates the possession of the knowledge, skills, abilities and competencies necessary for immediate success in the position. Qualifying experience may have been acquired in any public or private sector job, but will clearly demonstrate past experience in the application of the particular competencies/knowledge, skills and abilities necessary to successfully perform the duties of the position. You must have specialized experience sufficient to demonstrate that you have acquired all the competencies necessary to perform at a level equivalent in difficulty, responsibility, and complexity to the next lower grade GG/GS 12 in the Federal service and are prepared to take on greater responsibility. Generally, this would include one year or more of such specialized experience. Specialized experience for this position includes: Conducts Cyber CI analysis and coordinates those activities across DCSA and national-level agencies; provides cyber-enrichment and analysis to DCSA CI activities and reporting; conducts analysis of various cyber data (e.g. logs) to identify cyber incidents, threats, and vulnerabilities; conducts in-depth research, compilation, and analysis of a wide range of complex and sensitive information; presents analytic findings in oral and written communications. Specifically you will be evaluated on the following competencies: 1. Oral Communication: Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. 2. Partnering: Develops networks and builds alliances; collaborates across boundaries to build strategic relationships and achieve common goals. 3. Technical Competence: Uses knowledge that is acquired through formal training or extensive on-the-job experience to perform one's job; works with, understands, and evaluates technical information related to the job; advises others on technical issues. 4. Writing: Recognizes or uses correct English grammar, punctuation, and spelling; communicates information (for example, facts, ideas, or messages) in a succinct and organized manner; produces written information, which may include technical material that is appropriate for the intended audience. 5. Researching: Identifies a need for and knows where or how to gather information. Obtains, evaluates, organizes, and maintains information. Education Substitution of education may not be used in lieu of specialized experience for this grade level. Additional Information VETERANS PREFERENCE/CURRENT OR FORMER FEDERAL In accordance with DoD Instruction 1400.25, Volume 2005, veterans preference is not required to be applied when considering candidates with prior Federal competitive or excepted service who have completed a probationary or trial period and have not been separated for cause. Therefore, veterans preference will not be applied to applicants with current federal service, or former federal civilian service meeting the above criteria. Re-employed Annuitant: This position does not meet criteria for re-employed annuitant. The DoD criteria for hiring Re-employed Annuitants can be found at: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/140025/1400.25-V300.pdf Applicants selected from this announcement may be required to serve a two-year trial period. If selected, Federal employees currently serving in the competitive service must acknowledge that they will voluntarily leave the competitive service by accepting an offer of employment for a DCIPS excepted service positions. If selected, non-DCIPS candidates must acknowledge in writing that the position they have been selected for is in the excepted service and covered by DCIPS. All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statue, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status. For more information on the DCIPS occupational structure click here. For more information about career advancement in DCIPS click here. This position is subject to an initial drug screening, and random testing thereafter. A negative drug test result must be received by HR within 30 calendar days after the EOD (i.e., start date). The selectee's inability successfully pass; or refusal to conduct the test may result in: 1) the tentative or FJO being withdrawn during the recruitment process; or 2) subsequently being removed from Federal service for failure to meet a condition of employment. You may be required to sign a "Drug Test Statement of Understanding" if you are selected for this position.