Supervisory Intelligence Research Specialist

As a Supervisory Intelligence Research Specialist, you will be managing insider threat detection activities within the ITP, supervising a team of insider threat analysts, and serving as the senior reviewer of anomalous data identified through the user activity monitoring (UAM) tool and other applicable data sources.

This job does not have an education qualification requirement. Pursuant to 50 USC 3024 (v), and with concurrence and consultation with the Director of National Intelligence and the Director of the Office of Personnel Management, this position is being established in the excepted service as an element of the Intelligence Community within the Department of the Treasury.

As a Supervisory Intelligence Research Specialist, you will:

• Serve as the senior insider threat analyst and manage insider threat detection activities within the ITP and supervises all insider threat analysts more than 25% of the time. The team of insider threat analysts is comprised of Intelligence Research Specialists at the GS-11 through GS-13 level. Provide oversight and guidance to subordinates during the conduct of insider threat analysis, support to preliminary inquiries, and other insider threat activities.
• Provide assessments on the potential insider threat to and impact on Treasury information technology systems and operations. Make sound, well thought-out recommendations on applicable countermeasures to the insider threat.
• Implement and supervise the insider threat detection and analysis activities, manage the UAM capability and infrastructure, direct support to internal risk management efforts, and support to external analytic working groups, boards, committees, and meetings.
• Provide consultation and advice on broad questions such as scope of problems to be investigated, issues involved, vulnerabilities, risks, pertinent references available, required liaison or joint projects with other organizations, objectives to be sought, and security considerations to be observed. Present Treasury interests and points of view on formal interagency committees, conferences, and work groups.
• Supervise the development of insider threat triggers that will alert the broader ITP when an end-user on a Treasury information technology system has engaged in suspicious, unlawful, or unauthorized activity, and/or has exhibited behavior that has the potential to compromise an automated information technology system and/or classified information. Supervise open and classified source research in support of ITP activities and initiatives.
• Initiate projects, collection requests, and requirements for information; plan and direct collection activities; and plan broad research and analysis. Assess unforeseen developments, new phenomena, and difficulties encountered, and recommend changes in analytic direction and approach of programs. Evaluate the overall effectiveness and adequacy of Treasury’s analytic operations in light of its insider threat mission; conceive and initiate developmental projects to accomplish improvements, such as policy formulation and long range program planning.

You must meet the following requirements by the closing date of this announcement.

Specialized experience for the GS-14 is one year (52) weeks of experience at the GS-13 grade level or equivalent in either public or private sectors, that is directly related to the position as listed in this announcement and which has equipped the candidate with the particular knowledge, skills, and abilities to successfully perform the duties of the position.

Specialized experience for this position is defined as experience:
– Overseeing analysis of user activity monitoring (UAM) data and other applicable sources in support of insider threat programs; supporting CI/insider threat investigations/inquiries; AND
– Managing technical projects related to the identification of potential insider threats; AND
– Applying knowledge of all national-level insider threat policies, directives, and guidance, such as Executive Order 13587, National Insider Threat Policy and Minimum Standards, Intelligence Community Standard (ICS) 700-2, and ICS 500-27.