Insider Threat Investigator

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Must preserve all substantive info, remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning). Also remove duplicated lines, application instructions. Must not include sections with filler like "commensurate with experience". Must not create Pay/Schedule/Benefits unless posting actually states them. The posting includes benefits description under "Our generous benefits package includes:" So we can include Benefits section. Pay? Not mentioned. Schedule? Not mentioned (though mentions flexible schedules and time off (PTO) under benefits). So schedule not separate. So we can have sections: About the role (maybe from first paragraph), Responsibilities (the list after "In this position, you will:"), Requirements (minimum job requirements), Qualifications (desired qualifications), Skills (maybe communication and interpersonal skills, analysis etc). Could combine some. But we need to follow rule: prefer few substantive sections over many thin ones. Could combine Requirements and Qualifications into one? But they ask to use headings for those categories if content exists. We'll decide to include About the role, Responsibilities, Requirements, Qualifications, Benefits. Possibly Skills as part of Requirements/Qualifications. But we can include Skills if there is distinct content: there is "Analysis, Reports, and Briefings", "Communication And Interpersonal Skills". Those could be Skills. However we might combine them into Requirements. To avoid many thin sections, we could have: About the role, Responsibilities, Requirements (includes minimum job requirements, desired qualifications, analysis, communication skills), Benefits. That's four sections. We must not include filler like "Position commitment: Regular appointment employees..." that's maybe not needed? It's substantive but maybe not a section. Could be included in About the role or Requirements? It's about eligibility. Might be considered part of Requirements? Could be included in About the role as note. But we need to preserve all substantive info. We'll embed that info in About the role or Requirements as a paragraph. We must remove boilerplate: EEO, equal opportunity, drug test, clearance details? Clearance is substantive (required). Should keep. The note about citizenship restrictions is substantive. We'll keep that in Requirements or About the role. We must not include application instructions like "Note to Applicants: With your application..." That's application instructions, should be removed. Also "Although the position will not ordinarily require extensive travel..." that's maybe not application instruction but could be considered job detail; it's about travel requirement. Might be kept as part of Responsibilities or About the role. It's not application instruction. We'll keep. We must not include duplicated lines. We'll ensure no repeats. Now craft HTML. Structure:

About the role

... paragraphs summarizing role description, location, commitment, etc.

Responsibilities

• ... each bullet from "In this position, you will:" list.

Requirements

... combine minimum job requirements, desired qualifications, analysis, communication skills, clearance, citizenship restrictions, position commitment, etc.

Benefits

• ... each benefit from list.

We must not include Pay or Schedule sections. Now write content. About the role: include opening paragraphs: "This position is open for external candidates only to apply. Are you an experienced insider threat or counterintelligence professional? Are you interested in joining a dedicated team of professionals working to safeguard Los Alamos National Laboratory (LANL), its people, information, and mission? If so, we invite you to learn more about our opening for an Insider Threat Investigator 3. The Insider Threat Investigator 3 will support the identification, assessment, investigation, and mitigation of potential insider threats to LANL. The successful candidate will work across counterintelligence, security, cybersecurity, human resources, legal, and management functions to evaluate concerning activity while appropriately protecting employee privacy, due process, and organizational assets. This position requires a seasoned investigator with strong investigative and analytical skills, sound judgment, discretion, and demonstrated ability to objectively assess complex information and distinguish anomalous or legitimate workplace activity from behaviors that may warrant further inquiry. LANL investigative efforts support national counterintelligence and insider threat goals and objectives under the direction of the Foreign Immigration, Visits and Analysis (FVA) Group Leader and the Office of Counterintelligence (OCI) Director. Work Location: The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management. Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 year." We might also include note about travel: "Although the position will not ordinarily require extensive travel, the successful candidate must be able to travel domestically on occasion to accommodate training or operational needs." Could be in About the role. Now Responsibilities: list each bullet from "In this position, you will:": - Conduct and support investigations involving suspected insider threat activity, including unauthorized disclosures, misuse of information or systems, data exfiltration, security violations, fraud, sabotage, and other potentially harmful activity. - Collect, review, analyze, and correlate information from authorized counterintelligence, cybersecurity, personnel security, physical security, investigative, and other relevant sources. - Develop investigative strategies, plans, timelines, leads, and documented findings. - Conduct investigative interviews and coordinate investigative activities with appropriate internal and external stakeholders. - Identify and assess behavioral, technical, and other indicators that may warrant additional inquiry or assessment. - Evaluate investigative information objectively, distinguish anomalous activity from substantiated risk, and develop well-supported findings and recommendations. - Prepare clear, concise, and factual investigative reports, briefings, referrals, and case documentation for technical and senior-level audiences. - Maintain investigative records in accordance with applicable laws, policies, privacy requirements, and records-management standards. - Collaborate with counterintelligence, cybersecurity, legal, human resources, employee relations, physical security, personnel security, and other organizational functions, as appropriate. - Support insider threat assessments and develop proportionate, risk-informed recommendations for mitigation. - Identify investigative trends, recurring indicators, and lessons learned that can strengthen LANL's insider threat posture, security controls, and prevention efforts. - Handle sensitive, controlled, and classified information with discretion and professionalism. Now Requirements: combine minimum job requirements, desired qualifications, analysis, communication skills, clearance, citizenship restrictions, etc. We need to preserve all substantive info. Let's draft a paragraph that includes: Minimum Job Requirements: - Counterintelligence And/or Insider Threat Investigative Experience: Demonstrated extensive experience conducting complex, end-to-end investigations, including investigative planning, information collection, interviewing, analysis of qualitative and quantitative information, development of findings, and preparation of investigative reports. - Demonstrated knowledge of investigative principles and practices, evidence handling, privacy and civil liberties considerations, records management, and information-protection requirements. - Knowledge of insider threat concepts, indicators, investigative methodologies, organizational roles, and relevant policies and authorities, such as Executive Order 13587 and DOE Order 470.5A. - Familiarity with cybersecurity and insider threat capabilities such as data loss prevention (DLP), security information and event management (SIEM), user and entity behavior analytics (UEBA), or related security technologies. - Analysis, Reports, and Briefings: Demonstrated experience analyzing complex and potentially conflicting information, developing defensible findings and recommendations, and preparing professional investigative reports and other written products. - Demonstrated experience briefing investigative findings, assessments, and recommendations to decision-makers, including senior management. - Communication And Interpersonal Skills: Demonstrated ability to build productive working relationships and collaborate effectively across organizational and functional boundaries. Ability to interact professionally with personnel throughout LANL, the Department of Energy Office of Intelligence and Counterintelligence (DOE-IN), other DOE counterintelligence and insider threat field elements, and external liaison partners, as appropriate. Demonstrated ability to represent OCI professionally on working groups, investigative teams, and other collaborative forums. Excellent written and verbal communication skills, including the ability to communicate complex or sensitive information clearly, objectively, and appropriately for the intended audience. - Education/Experience: Position typically requires a bachelor's degree in criminal justice, cybersecurity, intelligence studies, security management, behavioral science, or a related discipline and a minimum of eight years of related experience, or an equivalent combination of education and experience. At this level, postgraduate coursework may be desirable. - Desired Qualifications: - DOE Insider Threat Experience supporting or working within the DOE Insider Threat Program, including familiarity with DOE insider threat policies, processes, investigative practices, and organizational responsibilities. - Insider threat professional certification or equivalent training is preferred. A successful candidate who does not possess required insider threat professional certification upon hire will be expected to obtain applicable certification as soon as practicable. - DOE Counterintelligence Experience supporting the DOE Counterintelligence Program, including knowledge of foreign intelligence service methods, counterintelligence principles and practices, and nontraditional foreign intelligence collection methodologies. - US Intelligence Community Experience: Substantial experience within or supporting the U.S. Intelligence Community and familiarity with relevant intelligence and counterintelligence authorities, policies, organizations, missions, and roles, including Executive Order 12333 and other applicable Intelligence Community policy. - Classification: Current Derivative Classifier certification is desired. A successful candidate who is not certified upon hire will be expected to obtain applicable Derivative Classifier certification as soon as practicable. - Language: Professional proficiency in a foreign language relevant to national security or counterintelligence missions is desired. - Clearance: An active DOE Q clearance and Sensitive Compartmented Information (SCI) access are preferred. Candidates must possess the ability to obtain and maintain all clearances and accesses required for the position. - Citizenship restrictions: Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China - including the special administrative regions of Hong Kong and Macau - as well as citizens of the Islamic Republic of Iran, the Democratic People's Republic of North Korea, and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities that support the mission, functions, and operations of national security laboratories and nuclear weapons production facilities, which includes Los Alamos National Laboratory. - Clearance note: Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance. and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad. Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information. - New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer. - Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status. We need to ensure we don't include boilerplate like EEO etc. We removed that. Now Benefits: list from "Our generous benefits package includes:": - PPO or High