Today
Top Secret
Unspecified
Polygraph
IT - Security
(On-Site/Office)
Duties
Limiting Number of Applicants: It is recommended that you apply as soon as possible in order to receive consideration as this announcement will close on November 20, 2025 11:59 p.m. ET or on the day we receive 50 applicants (whichever comes first.)
This position starts at a salary of $105,383 (GS-13, Step 1) to $137,000 GS-13, Step 10). The salary listed reflects the "Rest of U.S." scale and, if applicable, will be adjusted to meet the or cost of living expenses of the duty location upon selection.
This announcement will be utilized to fill Criminal Investigator, GS-1811-13, positions with a specialty in Cyber investigations. While potential duty locations are provided below, the agency retains the flexibility to fill positions at other locations based on mission requirements. You will be asked to indicate your desired location preferences in the announcement questionnaire; however, assignment to a preferred location is not assured.
Potential duty locations may include, but are not limited to:
JBSA Lackland AFB, TX
Duties require use of a mastery of the theories, concepts, principles, practices, laws, and regulations of criminal investigations including constitutional, international, and statutory laws. As a senior criminal investigator, independently plans, organizes, and conducts extremely difficult and complex criminal investigations. Develops criminal investigative reports upon completion of each assignment for use in facilitating determination of appropriate actions and final decisions. Coordinates criminal investigative activity with other federal, state, and local law enforcement agencies such as the Federal Bureau of Investigation (FBI), US Army Criminal Investigation Command (USACIDC), Naval Criminal Investigative Service (NCIS), Defense Criminal Investigative Service (DCIS), US Attorney, or foreign governments on matters related to criminal investigations. Provides expert technical advice, guidance, and recommendations to senior DOD and AF management, investigative personnel, attorneys, and other interested parties on criminal investigative matters.
Requirements
Conditions of employment
To qualify, applicants must have fifty-two (52) weeks of full time specialized or equivalent specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level (or equivalent in other pay systems) in the Federal service.
Specialized Experience: GS-12 level specialized experience required for this position includes:
GS-12 equivalent specialized experience required for this position includes one or more of the following:
1) Criminal investigative expertise and/or other felony-level criminal investigative expertise, gained from experience in federal law enforcement criminal investigations.
2) Tactical operational expertise in law enforcement relevant to criminal investigations associated with unauthorized network access or advanced persistent threat operations, gained from experience in Department of Defense and/or federal law enforcement. Such experience could include penetration testing, proactive hunt operations, information operations, digital forensics, cyber enabled fraud, and other related disciplines. Network defense experience may also be qualifying, depending on the training and experience.
3) Cybersecurity expertise, gained from the private sector (e.g. incident response, Chief Information Security Officer, risk consulting, finance, etc.), the US military and/or the US Intelligence Community.
4) Counterintelligence expertise, gained from experience in a US government counterintelligence role, to include analysis, functional services, collections, investigations and operations. Applicants should make note of any blended cyber counterintelligence experience.
Additional Training and Experience: Highly desired applicants will have current industry standard (or DoD Equivalent) certification portfolio that demonstrates an emphasis on cyber investigations and operations techniques. Examples of such certifications include; DoD Computer Crime Investigator; Vendor-based computer forensic certification, such as EnCase Certified Examiner (EnCE) or Access Data Certified Examiner (ACE); Non-vendor computer forensic certification such as IACIS Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE) or GIAC Certified Forensic Examiner (GCFE); CompTIA certifications A+, Net+, and Sec+, or PenTest+; Offensive Security Certified Professional (OSCP); GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), GIAC Penetration Tester (GPEN), GIAC Defending Advanced Threats (GDAT); or computer science degree with associated investigative experience. Highly desired applicants may also possess certifications relevant to cybersecurity in DoD, US Intelligence Community, and private sector settings. Such relevant certifications include, but are not limited to, Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP). Applicants may also detail other cybersecurity certifications not listed here for consideration.
PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.
OTHER SIGNIFICANT FACTS
EMERGENCY ESSENTIAL PERSONNEL/POSITIONS: This position may be Emergency-Essential (E-E). The incumbent of this position must meet all requirements of E-E positions and may be required as a condition of employment to take a series of vaccinations and annual boosters to immunize against anthrax and other diseases. In the event of a crisis situation, the incumbent or designated alternate must continue to perform the E-E duties until relieved by proper authority. The incumbent or the designated alternate may be required to take part in readiness exercises. The incumbent, as a condition of employment, may be reassigned to any to any geographic location where AFOSI personnel may be assigned and/or required to deploy to support the success of combat operations or the availability of combat essential systems. Failure to deploy may subject the incumbent to administrative action. This position cannot be vacated during a national emergency or mobilization without seriously impairing the capability of the organization to function effectively. Incumbent will be required to sign and acknowledge their understanding of these requirements.
Due to the mission essential nature of EE positions, concurrent membership in the military reserves could conflict with the performance of these duties. If you are selected for an EE position and are also an active reservist, you will be required to transfer to an inactive or standby status or resign/retire from the reserves prior to your appointment.
Law Enforcement Availability Pay (LEAP): LEAP compensates Criminal Investigators for substantial amounts of unscheduled overtime or their availability to work substantial amounts of overtime. Applicants are eligible to receive LEAP upon appointment. To ensure your availability, you will receive extra compensation in the form of LEAP, which is calculated at a flat rate of 25 percent of basic pay (including applicable locality pay).
Lautenberg Amendment: This position is covered by the Domestic Violence Misdemeanor Amendment (30 Sep 96) of the Gun Control Act (Lautenberg Amendment) of 1968, the following standard statement should be added under Other Significant Facts of the SCPD: Position requires access to firearms. Persons convicted of a misdemeanor or felony crime of domestic violence may not occupy this position in accordance with the Gun Control Act of 1968, as amended 30 Sep 96. Employee must sign DD Form 2760, Qualification to Possess Firearms or Ammunition.
Key Position: This position may be designated as a key position IAW AFI 36-507. Duties of this position are essential to the accomplishment of wartime/contingency operations. Incumbents of key positions must be removed from their military recall status if alternative for filling of the position during an emergency are not available.
Mission Essential: This position may be Mission Essential (ME) position performing a Mission Critical Function (MCF) which must continue uninterrupted after the occurrence of an emergency and continued through full resumption of all functions. IAW, DoDI 3020-42, Defense Continuity Programs.
Education
Specialized Training: Successful graduation from the Federal Law Enforcement Training Center's (FLETC) Criminal Investigators Training Program (CITP) or federal equivalent is required . (Qualifying federal CITP equivalents include: Federal Bureau of Investigation New Agent Training, Drug Enforcement Administration Special Agent Training, US Army Criminal Investigation Division Special Agent Course, or United States Air Force Special Investigations Academy (USAFSIA) Special Investigators Course.)
This position requires successful completion of a one-year Probationary Agent Training Program (PATP).
Additional information
Essay Questions: The four narrative questions in the announcement questionnaire provide an opportunity for you to highlight your dedication to public service for the hiring manager and agency leadership (or designee(s)). While your responses are not required and will not be scored, we encourage you to thoughtfully address each question. Please provide a response of 200 words or less to each question. You will be asked to certify that you are using your own words and did not use a consultant or artificial intelligence (AI) such as a large language model (LLM) like ChatGPT or Copilot.
MAXIMUM ENTRY AGE: IAW DoDI 1400.25 Volume 336, "The maximum entry age (MEA) for covered primary law enforcement officer positions is 37. Persons not appointed by the last day of the month in which they become age 37 shall not be originally appointed or assigned to these positions." The Agency will waive MEA requirements for otherwise qualified applicants with veterans' preference and may choose to waive MEA requirements for those applicants with prior Federal civilian special LEO retirement-covered service.
Employed Annuitants (Reemployed Annuitants): Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants. Click for more information.
If you have questions regarding this announcement and have hearing or speech difficulties click
Tax Law Impact for PCS: On 22-Dec-2017, Public Law 115-97 - the "Tax Cuts and Jobs Act of 2017" suspended qualified moving expense deductions along with the exclusion for employer reimbursements and payments of moving expenses effective 01-Jan-2018 for tax years 2018 through 2025. When you perform a Civilian Permanent Change of Station (PCS) with the government, the Internal Revenue Service (IRS) considers the majority of your entitlements to be taxable. Visit GSA Bulletin FTR 20-04 for additional information.
Direct Deposit: All federal employees are required to have direct deposit.
Excepted Service: AFOSI's Criminal Investigators are excepted service positions. Applicants who currently hold Competitive Service status and are offered a Criminal Investigator position with AFOSI, will be appointed under AFOSI's Schedule A authority under Excepted Service. Competitive Service applicants who are Career and have completed the three year service requirement permanent tenure (SF-50, block 24 reflects "1") are eligible for lifetime reinstatement rights. Competitive Service applicants who are Career Conditional and have not completed the three year service requirement (SF-50, block 24 reflects "2") are eligible for three year reinstatement rights.
Trial Period: As a condition of employment for accepting this position, you may be required to serve a 1 to 2-year trial period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider:
- your performance and conduct;
- the needs and interests of the agency;
- whether your continued employment would advance organizational goals of the agency or the Government; and
- whether your continued employment would advance the efficiency of the Federal service.
Limiting Number of Applicants: It is recommended that you apply as soon as possible in order to receive consideration as this announcement will close on November 20, 2025 11:59 p.m. ET or on the day we receive 50 applicants (whichever comes first.)
This position starts at a salary of $105,383 (GS-13, Step 1) to $137,000 GS-13, Step 10). The salary listed reflects the "Rest of U.S." scale and, if applicable, will be adjusted to meet the or cost of living expenses of the duty location upon selection.
This announcement will be utilized to fill Criminal Investigator, GS-1811-13, positions with a specialty in Cyber investigations. While potential duty locations are provided below, the agency retains the flexibility to fill positions at other locations based on mission requirements. You will be asked to indicate your desired location preferences in the announcement questionnaire; however, assignment to a preferred location is not assured.
Potential duty locations may include, but are not limited to:
JBSA Lackland AFB, TX
Duties require use of a mastery of the theories, concepts, principles, practices, laws, and regulations of criminal investigations including constitutional, international, and statutory laws. As a senior criminal investigator, independently plans, organizes, and conducts extremely difficult and complex criminal investigations. Develops criminal investigative reports upon completion of each assignment for use in facilitating determination of appropriate actions and final decisions. Coordinates criminal investigative activity with other federal, state, and local law enforcement agencies such as the Federal Bureau of Investigation (FBI), US Army Criminal Investigation Command (USACIDC), Naval Criminal Investigative Service (NCIS), Defense Criminal Investigative Service (DCIS), US Attorney, or foreign governments on matters related to criminal investigations. Provides expert technical advice, guidance, and recommendations to senior DOD and AF management, investigative personnel, attorneys, and other interested parties on criminal investigative matters.
Requirements
Conditions of employment
- All male applicants born after December 31, 1959 must have registered for the Selective Service.
- Applicants and employees are subject to counterintelligence scope polygraph examinations as determined by AFOSI. Failure to successfully complete a polygraph examination could result in non-selection or disciplinary action.
- Disclosure of Political Appointments.
- Employees must be able to work substantial amounts of unscheduled overtime or be available to work substantial amounts of unscheduled overtime on evenings, weekends, and/or holidays. May also be required to work regular scheduled overtimes as needed.
- Initial relocation expenses may or may not be authorized.
- Must successfully pass a pre-employment medical examination (including vision, hearing, cardiovascular and mobility of extremities) and be determined physically able to perform duties without being a hazard to themselves or others.
- Position is designated by the Air Force as a testing designated position under the Air Force Civilian Drug Testing Program and is subject to random drug testing.
- Requires occasional travel away from the normal duty station. Travel may include international locations, via various military or commercial means.
- This position is subject to a two-year trial period during the first two years of the employee's permanent federal appointment.
- This position requires a mobility agreement of which the employee may be assigned anywhere in the U.S. or overseas. In addition, employees may be required to work in areas of unrest or in war zones.
- This position requires a Top-Secret security clearance.
- This position requires the favorable completion of an Agent Suitability Investigation, including a successful criminal background check, prior to an offer of employment.
- This position requires the incumbent to legally possess and carry a firearm.
- This position requires the incumbent to drive a motor vehicle. Incumbent must possess and maintain a valid state driver's license.
- U.S. Citizenship required.
To qualify, applicants must have fifty-two (52) weeks of full time specialized or equivalent specialized experience at a level of difficulty and responsibility equivalent to the GS-12 grade level (or equivalent in other pay systems) in the Federal service.
Specialized Experience: GS-12 level specialized experience required for this position includes:
- Planning and conducting highly complex criminal investigations, independently as a lead investigator or as a team member
- Apprehending or detaining suspected violators of criminal laws of the U.S.
- Conducting interviews with suspects, witnesses, and informants in case development
- Recruiting and utilizing witnesses
- Planning, organizing, and conducting surveillance
- Preparing interim and comprehensive final investigative reports for prosecutors and management officials
- Participating in joint task forces
- Briefing management and DoD officials on the progress of current investigations
- Testifying before Grand Juries, proceedings in criminal trials, and/or administrative hearings
- Coordinating criminal investigative activity with other Federal, state, and local agencies and foreign governments and resolving jurisdictional issues
GS-12 equivalent specialized experience required for this position includes one or more of the following:
1) Criminal investigative expertise and/or other felony-level criminal investigative expertise, gained from experience in federal law enforcement criminal investigations.
2) Tactical operational expertise in law enforcement relevant to criminal investigations associated with unauthorized network access or advanced persistent threat operations, gained from experience in Department of Defense and/or federal law enforcement. Such experience could include penetration testing, proactive hunt operations, information operations, digital forensics, cyber enabled fraud, and other related disciplines. Network defense experience may also be qualifying, depending on the training and experience.
3) Cybersecurity expertise, gained from the private sector (e.g. incident response, Chief Information Security Officer, risk consulting, finance, etc.), the US military and/or the US Intelligence Community.
4) Counterintelligence expertise, gained from experience in a US government counterintelligence role, to include analysis, functional services, collections, investigations and operations. Applicants should make note of any blended cyber counterintelligence experience.
Additional Training and Experience: Highly desired applicants will have current industry standard (or DoD Equivalent) certification portfolio that demonstrates an emphasis on cyber investigations and operations techniques. Examples of such certifications include; DoD Computer Crime Investigator; Vendor-based computer forensic certification, such as EnCase Certified Examiner (EnCE) or Access Data Certified Examiner (ACE); Non-vendor computer forensic certification such as IACIS Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE) or GIAC Certified Forensic Examiner (GCFE); CompTIA certifications A+, Net+, and Sec+, or PenTest+; Offensive Security Certified Professional (OSCP); GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), GIAC Penetration Tester (GPEN), GIAC Defending Advanced Threats (GDAT); or computer science degree with associated investigative experience. Highly desired applicants may also possess certifications relevant to cybersecurity in DoD, US Intelligence Community, and private sector settings. Such relevant certifications include, but are not limited to, Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP). Applicants may also detail other cybersecurity certifications not listed here for consideration.
PART-TIME OR UNPAID EXPERIENCE: Credit will be given for appropriate unpaid and or part-time work. You must clearly identify the duties and responsibilities in each position held and the total number of hours per week.
OTHER SIGNIFICANT FACTS
EMERGENCY ESSENTIAL PERSONNEL/POSITIONS: This position may be Emergency-Essential (E-E). The incumbent of this position must meet all requirements of E-E positions and may be required as a condition of employment to take a series of vaccinations and annual boosters to immunize against anthrax and other diseases. In the event of a crisis situation, the incumbent or designated alternate must continue to perform the E-E duties until relieved by proper authority. The incumbent or the designated alternate may be required to take part in readiness exercises. The incumbent, as a condition of employment, may be reassigned to any to any geographic location where AFOSI personnel may be assigned and/or required to deploy to support the success of combat operations or the availability of combat essential systems. Failure to deploy may subject the incumbent to administrative action. This position cannot be vacated during a national emergency or mobilization without seriously impairing the capability of the organization to function effectively. Incumbent will be required to sign and acknowledge their understanding of these requirements.
Due to the mission essential nature of EE positions, concurrent membership in the military reserves could conflict with the performance of these duties. If you are selected for an EE position and are also an active reservist, you will be required to transfer to an inactive or standby status or resign/retire from the reserves prior to your appointment.
Law Enforcement Availability Pay (LEAP): LEAP compensates Criminal Investigators for substantial amounts of unscheduled overtime or their availability to work substantial amounts of overtime. Applicants are eligible to receive LEAP upon appointment. To ensure your availability, you will receive extra compensation in the form of LEAP, which is calculated at a flat rate of 25 percent of basic pay (including applicable locality pay).
Lautenberg Amendment: This position is covered by the Domestic Violence Misdemeanor Amendment (30 Sep 96) of the Gun Control Act (Lautenberg Amendment) of 1968, the following standard statement should be added under Other Significant Facts of the SCPD: Position requires access to firearms. Persons convicted of a misdemeanor or felony crime of domestic violence may not occupy this position in accordance with the Gun Control Act of 1968, as amended 30 Sep 96. Employee must sign DD Form 2760, Qualification to Possess Firearms or Ammunition.
Key Position: This position may be designated as a key position IAW AFI 36-507. Duties of this position are essential to the accomplishment of wartime/contingency operations. Incumbents of key positions must be removed from their military recall status if alternative for filling of the position during an emergency are not available.
Mission Essential: This position may be Mission Essential (ME) position performing a Mission Critical Function (MCF) which must continue uninterrupted after the occurrence of an emergency and continued through full resumption of all functions. IAW, DoDI 3020-42, Defense Continuity Programs.
Education
Specialized Training: Successful graduation from the Federal Law Enforcement Training Center's (FLETC) Criminal Investigators Training Program (CITP) or federal equivalent is required . (Qualifying federal CITP equivalents include: Federal Bureau of Investigation New Agent Training, Drug Enforcement Administration Special Agent Training, US Army Criminal Investigation Division Special Agent Course, or United States Air Force Special Investigations Academy (USAFSIA) Special Investigators Course.)
This position requires successful completion of a one-year Probationary Agent Training Program (PATP).
Additional information
Essay Questions: The four narrative questions in the announcement questionnaire provide an opportunity for you to highlight your dedication to public service for the hiring manager and agency leadership (or designee(s)). While your responses are not required and will not be scored, we encourage you to thoughtfully address each question. Please provide a response of 200 words or less to each question. You will be asked to certify that you are using your own words and did not use a consultant or artificial intelligence (AI) such as a large language model (LLM) like ChatGPT or Copilot.
MAXIMUM ENTRY AGE: IAW DoDI 1400.25 Volume 336, "The maximum entry age (MEA) for covered primary law enforcement officer positions is 37. Persons not appointed by the last day of the month in which they become age 37 shall not be originally appointed or assigned to these positions." The Agency will waive MEA requirements for otherwise qualified applicants with veterans' preference and may choose to waive MEA requirements for those applicants with prior Federal civilian special LEO retirement-covered service.
Employed Annuitants (Reemployed Annuitants): Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants. Click for more information.
If you have questions regarding this announcement and have hearing or speech difficulties click
Tax Law Impact for PCS: On 22-Dec-2017, Public Law 115-97 - the "Tax Cuts and Jobs Act of 2017" suspended qualified moving expense deductions along with the exclusion for employer reimbursements and payments of moving expenses effective 01-Jan-2018 for tax years 2018 through 2025. When you perform a Civilian Permanent Change of Station (PCS) with the government, the Internal Revenue Service (IRS) considers the majority of your entitlements to be taxable. Visit GSA Bulletin FTR 20-04 for additional information.
Direct Deposit: All federal employees are required to have direct deposit.
Excepted Service: AFOSI's Criminal Investigators are excepted service positions. Applicants who currently hold Competitive Service status and are offered a Criminal Investigator position with AFOSI, will be appointed under AFOSI's Schedule A authority under Excepted Service. Competitive Service applicants who are Career and have completed the three year service requirement permanent tenure (SF-50, block 24 reflects "1") are eligible for lifetime reinstatement rights. Competitive Service applicants who are Career Conditional and have not completed the three year service requirement (SF-50, block 24 reflects "2") are eligible for three year reinstatement rights.
Trial Period: As a condition of employment for accepting this position, you may be required to serve a 1 to 2-year trial period during which we will evaluate your fitness and whether your continued employment advances the public interest. In determining if your employment advances the public interest, we may consider:
- your performance and conduct;
- the needs and interests of the agency;
- whether your continued employment would advance organizational goals of the agency or the Government; and
- whether your continued employment would advance the efficiency of the Federal service.
group id: DOAF
