Department: Department of Education
Location(s): Washington, District of Columbia
Salary Range: $169279 - $197200 Per Year
Job Summary: This position is located in the Office of Inspector General (OIG), Investigation Services (IS), Technical Crimes Division (TCD). The Director is responsible for planning, directing, and managing the performance of the TCD and provides expert technical forensics consultation, guidance, and assistance to OIG investigators and senior management in critical evidence retrieval and analysis processes involving information technology systems.
Major Duties:
Qualifications: Basic Experience Requirements: You must possess IT related experience (paid or unpaid experience and/or completion of specific, intensive training (e.g., IT certification), as appropriate) demonstrating each of the four competencies listed below. Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (i.e., any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (e.g., ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (e.g., technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. Minimum Qualification Requirements: You may meet the minimum qualifications for the GS-15 if you possess the specialized experience. Specialized Experience for the GS-15: One year of specialized experience that equipped the applicant with the particular knowledge, skills, and abilities to perform successfully the duties of the position, and that is typically in or related to the work of the position to be filled. To be creditable, specialized experience must have been equivalent to the GS-14 level in the Federal government. One year of experience equivalent to the GS-14 performing all three (3) of the following duties or work assignments: Experience in leading and performing complex digital forensic examinations involving computers, mobile devices, and networked systems; providing expert technical guidance to investigators and attorneys; ensuring evidence handling complies with federal legal standards; and preparing detailed forensic reports and briefings supporting criminal, civil, or administrative investigations. Experience in managing or overseeing a digital forensics or technical investigative program, including developing policies and standard operating procedures, ensuring compliance with federal laws and regulations, coordinating resources, and advising senior leadership on program risks, capabilities, and strategic direction. Experience in supervising or leading multidisciplinary technical staff, conducting performance management activities, coordinating complex investigative support operations, and ensuring quality assurance and operational readiness of forensic processes, tools, and laboratory environments. Knowledge, Skills, and Abilities (KSAs): The quality of your experience will be measured by the extent to which you possess the following knowledge, skills and abilities (KSAs). You do not need to provide separate narrative responses to these KSAs, as they will be measured by your responses to the occupational questionnaire (you may preview the occupational questionnaire by clicking the link at the end of the Evaluations section of this vacancy announcement). Mastery and skill in applying knowledge of OIG organizations, missions, functions, and major issues, as well as the Office of Management and Budget (OMB) Circular A-130 Appendix III (Cybersecurity of Federal Automated Information Systems), Federal Information Security Act (FISMA), OMB Circular A-123 (Internal Control Systems), OMB Memorandum M-14-03, National Institutes of Standards (NIST) IT security policies, procedures, guidance, and schedules. Knowledge also includes OMB, DHS, NIST, North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection standards (CIP), related laws, executive orders, and applicable federal laws and Department of Education regulations and mandatory guidelines. Strong foundation in digital forensics methodologies, evidence handling, and chain-of-custody standards, with familiarity in federal legal frameworks governing digital evidence, including the Federal Rules of Evidence and the Electronic Communications Privacy Act (ECPA). Skilled in incident response, malware analysis, and network forensics, including advanced forensic analysis of computers, mobile devices, and cloud environments, with the ability to prepare technical reports and provide expert testimony. Experience with complex investigations, synthesizing findings into actionable intelligence. Desired certifications include (ISC)2 certifications, such as CISSP or CCSP, SANS Institute GIAC certifications (GCFE, GCFA, GNFA), and CFCE from the International Association of Computer Investigative Specialists. Thorough understanding of federal regulations pertinent to budget management and financial compliance, such as the Office of Management and Budget (OMB) guidelines. Skills in financial analysis, budget forecasting, and expenditure oversight are critical for managing the division's budget while ensuring adherence to policies. Proficiency in conflict resolution and performance management is necessary to make informed decisions about staff training and complaints. Knowledge of organizational behavior and team dynamics supports team building and the identification of opportunities to improve operational practices. Effective communication and leadership abilities are crucial for fostering a positive, functional environment that aligns with the agency's mission and enhances overall operational efficiency. Demonstrates understanding of digital forensic laboratory standards and ISO practices. Familiar with cybersecurity frameworks like the NIST Cybersecurity Framework and NIST SP 800-53 controls. Skilled in establishing forensic quality assurance programs, managing secure IT environments, and ensuring compliance with security and privacy regulations. Capable of maintaining forensic lab readiness, evaluating emerging technologies, and ensuring process integrity. Proficient in assessing operating systems' security and operations, including installation, configuration, updates, and patches, with knowledge of network equipment for effective digital forensics management.
How to Apply: Step 1: Create a USAJOBS account (if you do not already have one) at www.usajobs.gov. Step 2: Create a resume using the USAJOBS resume builder. Ensure that your resume demonstrates your education, experience, training, and accomplishments as it relates to the qualifications for this position and substantiates your responses to the occupational questionnaire. Step 3: Upload any required documents into your USAJOBS account (must be less than 3MB and in one of the following document formats: GIF, JPG, JPEG, PNG, RTF, PDF, or Word (DOC or DOCX)). Step 4: Click "Apply Online" and follow the prompts to complete the occupational questionnaire and attach any required documents. Verify that uploaded documents from USAJOBS transfer into the agency's hiring system. You will have the opportunity to upload any additional required documents in the agency's hiring system. Click “Finish” to submit your application. NOTE: You may update your application or required documents at any time while the announcement is open by logging into your USAJOBS account, clicking on "Application Status," clicking on the position title, clicking "Update Application,” and following the prompts. In order to receive consideration for this position, you must submit your complete application, including all required documents, by 11:59 PM Eastern Time on the closing date of the vacancy announcement. If the vacancy announcement has an application limit, we recommend that you submit your complete application at the time of initial application. We will not accept any required documentation after the closing date of the vacancy announcement. If you have any questions regarding submitting your application, please contact the HR Specialist listed under the Agency Contact Information.
Application Deadline: 2026-03-17