Intelligence Research Specialist

Summary

You will serve as a Cyber Counterintelligence Special Agent/Analyst assigned to NASA’s Counterintelligence & Counter terrorism (CI/CT) Division. You will identify, analyze, and disrupt foreign intelligence threats targeting network infrastructure, programs, systems, personnel, and operations. You will also provide Cyber CI support to research and technology at NASA, provide CI education and awareness, and conduct CI inquiries and investigations with U.S. Government agency partners.

• Serve as a CI Cyber Special Agent/Analyst monitoring networks, endpoints, and cloud environments for indicators of intelligence-driven cyber targeting and analyzing anomalies, persistent threats, insider threats, and foreign intelligence activities.
• Conduct and support cyber and CI investigations through analysis and correlation of technical data, logs, digital forensics, and threat assessments. Develop actionable intelligence products that inform stakeholders of foreign cyber threats.
• Brief executives, mission owners, and other leadership on CI-relevant cyber events. Advise leadership on security posture, gaps, and recommended countermeasures. Produce high-visibility threat and vulnerability assessments and intelligence reports.
• Conduct all-source intelligence research and analysis on technical CI topics of interest and synthesize all-source data to identify patterns, commonalities, and linkages for attribution.
• Establish and maintain liaison with counterpart U.S. agencies such as the FBI and other intelligence, CI, and security organizations; participate in the local and national FBI Cyber Task Force.
• Lead or support cyber‑CI related incident response actions, support mitigation of cyber intrusions tied to foreign actors, and preserve the integrity of digital evidence for counterintelligence and/or law enforcement follow‑on actions.
• Support recommendations of defensive controls, segmentation, monitoring enhancements, and policy updates.

This position is open to U.S. citizens, nationals or those who owe allegiance to the U.S.

This position may require a one‑year probationary/trial period. If selected, the requirement to serve such period will be determined by Title 5 of the Code of Federal Regulations, Part 11. See Additional Information section.

Current Federal employees must meet qualifications, time in grade, and 90 days after competitive appointment requirements by the closing date of the announcement.

Position subject to pre‑employment background investigation.

If selected, you will be required to complete a financial disclosure statement.

To qualify for GS‑14, you must have one year of directly related specialized experience equivalent to the GS‑13 level:

• Conducting cyber operations or cyber analysis in two or more of the following areas: cyber defense, cyber and hybrid cyber threat intelligence analysis, digital forensics, and/or counterintelligence operations.
• Conducting network analysis, endpoint telemetry, packet capture, and using SIEM/SOAR and logging tools, forensic platforms, and/or scripting. Identifying adversary tactics, techniques, and procedures, including foreign profiles and malware groups.
• Analyzing and fusing cyber and human‑based intelligence reporting to create concise assessments and responding to targeted cyber events or supporting cyber investigations.

Your resume must include a clear and detailed narrative description, in your own words, of how you meet the required specialized experience. Experience statements copied from a position description, vacancy announcement or other reference material constitutes plagiarism and may result in disqualification and losing consideration for the job.

NASA prohibits the use of artificial intelligence (AI) or AI‑assisted tool in drafting application and assessment responses. Please visit https://(Use the "Apply for this Job" box below). to review NASA’s guidance on the use of AI tools during the application process.

• Indicate your eligibility when applying for a position. The questionnaire asks you to identify your ICTAP/CTAP eligibility.
• Be well qualified for this position to receive…