TITLE: Analyst 2, CyberTipline
LOCATION: Alexandria, VA; Rochester, NY
DATE PREPARED: September 2026
FLSA: Exempt
DIVISION: Exploited Children Division (ECD)
DEPARTMENT: CyberTipline
AREA OF FOCUS: International Processing – Argentina
TRAVEL REQUIREMENT:
Occasional travel for training is required and may include international travel.
HOURS and SCHEDULE:
Basic hours are Monday – Friday, in-office, 9:00am to 5:30pm (37.5 hours within five (5) days per week); unless otherwise required or approved by management. Ability to work flexible schedule to include some weekends and holidays is required. On-call availability and after-hour response for this position is required. Position is not eligible for remote work or telework.
SUPERVISION RECEIVED:
Position reports to the CyberTipline Program Manager and works under the direct supervision of a CyberTipline Supervisor.
SUPERVISION EXERCISED:
None.
RESPONSIBILITY FOR PUBLIC CONTACT:
Position requires daily contact with law enforcement, visitors, external stakeholders, and other interested parties requiring courtesy, discretion, and sound judgment.
LICENSING AND CERTIFICATION:
None.
GENERAL DESCRIPTION:
Position is responsible for providing overall analysis and case related support for CyberTipline reports submitted by Electronic Service Providers (ESPs) and members of the public, including the triage of incoming reports, identifying links between reported information, and making reports available to law enforcement agencies per ECD policy. This position requires flexibility in scheduling, after-hour and weekend response, and collaboration with fellow staff members, particularly pertaining to CyberTipline special projects.
CyberTipline reports may contain graphic pornographic content or links to pornographic content online depicting minors and/or adults. Child sexual abuse material (CSAM) includes images, videos, and text describing child sexual exploitation. Such assistance requires an employee that can handle exposure to sensitive content, demonstrates a high level of accuracy and thoroughness in their work product, and thrives in a fast-paced environment.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Conduct background research on CyberTipline reports received from Electronic Service Providers (ESPs) and/or members of the public, using both internal and external sources of information, in an effort to reduce child sexual exploitation.
Review, triage, and process incoming reports and related information concerning suspected child sexual exploitation, with special attention to time-sensitive details, following established guidelines and make reports available to law enforcement agencies per ECD policy.
Participate in the on-call rotation to handle emergency and after-hour requests for assistance from law enforcement.
Respond to written and verbal requests for Technical Assistance and information from law enforcement, external parties, and other NCMEC divisions, to include answering the CyberTipline phone line and monitoring CyberTipline email accounts.
Review child sexual abuse material submitted to NCMEC’s CyberTipline by Electronic Service Providers for identified children, content and context tagging, victim identification efforts and assistance with survivor services.
Determine methods, techniques, plans, parameters, and approaches to be used in conducting online queries utilizing available databases.
Monitor and maintain electronic files on reports and cases within the CyberTipline.
After becoming certified on CyberTipline Report processing and Technical Assistance Requests, maintain acceptable pace and quality of CyberTipline report processing.
Manage individual queue within the CyberTipline to ensure deadlines are met.
Collaborate with ECD management on special projects and initiatives, including but not limited to: maintaining open source information; identifying possible trends, patterns, or facts relevant to incoming CyberTipline reports and the ECD; maintaining and updating law…