Financial Intelligence Analyst

Treasury, Financial Crimes Enforcement Network•Vienna, VA

About The Position

The Financial Intelligence Analyst works in the Research and Analysis Division, Office of Cyber and Emerging Technologies, at the Financial Crimes Enforcement Network (FinCEN). The official classification is Intelligence Research Specialist (Cyber Threat Analyst). The role focuses on researching and analyzing illicit financial activity, including online child sexual exploitation and human trafficking, and supporting efforts to prevent and detect terrorist financing, money laundering, and other financial crime. The position may be filled at GS-09, GS-11, GS-12, or GS-13; duties and qualifications vary by grade, with training provided to employees selected below GS-13. The analyst evaluates cyber threats, cybercrime, cryptocurrency systems, emerging payment technologies, and cyber-enabled financial crime. The work includes analyzing relevant information and preparing responses, intelligence products, and other written materials; engaging with other Treasury offices, regulators, law enforcement agencies, and intelligence communities; and identifying topics for potential analysis and investigation to support tactical and strategic initiatives. The analyst also advises or interacts with FinCEN and Treasury employees on appropriate regulatory enforcement actions under the Bank Secrecy Act and U.S. Patriot Act. The position requires eligibility for a Top Secret clearance with Sensitive Compartmented Information access, a Tier 5 background investigation, and ongoing personnel vetting. Employees are subject to periodic reinvestigation and other suitability and security requirements. Telework and flexible work schedules are available. The role may require a probationary period and compliance with federal ethics, disclosure, identity verification, and drug-testing requirements.

Requirements

Meet the specialized experience requirements for the grade level sought (GS-09, GS-11, GS-12, or GS-13), or qualify through the stated education substitution or combination provisions where applicable.
For GS-13, have one year of specialized experience equivalent to GS-12, including identifying and evaluating topics involving illicit use of emerging payment technologies or cyber-enabled financial crimes; analyzing specified cyber, financial, or technical information to develop written threat intelligence products; and either assessing developments and threats related to cyber-enabled financial crimes or emerging payment systems, or analyzing large Bank Secrecy Act datasets to develop actionable written findings.
For GS-12, have one year of specialized experience equivalent to GS-11, including composing and briefing analytical assessments on emerging payment technologies or cyber threat topics, particularly cyber-enabled financial crimes, and either conducting intelligence research on malicious cyber actors' financial networks and TTPs or using financial and cybersecurity threat tools and data sources for research.
For GS-11, have one year of specialized experience equivalent to GS-09 analyzing financial or cyber threat information for tactical or strategic studies and experience with anti-money laundering/countering financing of terrorism, fraud, or big-data analytics investigations or policies. Alternatively, qualifying graduate education or a combination of education and experience may be used as specified.
For GS-09, have one year of specialized experience equivalent to GS-07 analyzing financial or cyber threat information for tactical or strategic studies and producing intelligence reports, investigative memoranda, evidentiary packages, or other written materials. Alternatively, a related master's or equivalent graduate degree, two years of progressively higher-level graduate education, a related LL.B. or J.D., or a qualifying combination of education and experience may be used.
Obtain and maintain eligibility for a Top Secret clearance with Sensitive Compartmented Information access and meet the requirements of a Tier 5 background investigation.
Complete personnel vetting, including enrollment in Continuous Vetting and the FBI Rap Back service, and meet continuing suitability and security requirements.
Successfully complete a background investigation and any required probationary or trial period.
Complete a Declaration for Federal Employment when requested and undergo income tax verification.
Use Direct Deposit/Electronic Funds Transfer for salary payments.
If applicable, meet Selective Service registration requirements.
Complete the Personal Identity Verification process and provide two forms of identification from the Form I-9.
Obtain and use a Government-issued charge card for business-related travel.
File a Confidential Financial Disclosure Report within 30 days of appointment and annually thereafter, and comply with federal ethics laws.
Submit to a drug test before appointment and random drug testing while occupying the position.
A writing sample may be required during the evaluation process.
Education used to qualify must generally be from an accredited or pre-accredited institution recognized by the U.S. Department of Education; qualifying foreign education requires credential evaluation.

Responsibilities

Research and analyze illicit financial activities, including online child sexual exploitation and human trafficking.
Analyze issues and prepare responses to queries or situations using creative thinking, problem-solving, decision-making, and subject-matter knowledge.
Serve as a subject matter expert on cyber threats, cybercrimes, and cryptocurrency systems when interacting with other agencies and stakeholders.
Identify and evaluate topics for potential analysis and investigation involving illicit use of emerging payment technologies, cybercrime, or cyber-enabled crime.
Develop material for tactical and strategic support to FinCEN and stakeholder initiatives and activities.
Advise or interact with FinCEN and other Treasury employees to support appropriate regulatory enforcement actions under the Bank Secrecy Act and U.S. Patriot Act.
Depending on grade, analyze cyber threat intelligence, indicators of compromise, malware forensics, blockchain transactions, law enforcement information, financial data, or other technical data and develop written threat intelligence products.
Depending on grade, compose and brief analytical assessments, conduct intelligence research on malicious cyber actors' financial networks and tactics, or use financial and cybersecurity threat tools and data sources.
Depending on grade, analyze financial or cyber threat information for tactical or strategic studies and produce intelligence reports, investigative memoranda, evidentiary packages, or other written materials.

Benefits

Flexible work schedules and alternate work schedules.
Telework opportunities.
11 paid holidays.
Financial subsidies for employees who use public transportation to commute.
In-house training.
Fitness center reimbursement.
Eligibility for performance awards.
Health, life, and long-term care insurance programs; employee health insurance contributions are pre-tax.
Retirement plan, including a pre-tax retirement contribution program with matching funds or, as applicable, continuation in the Civil Service Retirement System.
Comprehensive federal employee benefits for eligible employees.