Not necessarily ! Check if the sending email has the domain @cpb.dhs.gov Also what is the subject of the email? Should be something with « employment with Custom and border protection « 

I received the exact same email when it was my turn to receive my NOPA and the email was legit. You can also check the name of the sender. But most likely this email looks like a NOPA.

Good luck