Digital Forensic Analyst

The Division of Enforcement (ENF) is seeking an Information Technology Specialist (Forensics) (Digital Forensic Analyst) in Office of Technical Services (OTS). As a Digital Forensic Analyst, you will serve as an information technology advisor and consultant, providing digital forensic expertise and technical support to ENF investigative staff.

Major duties

As a Digital Forensic Analyst, you will be responsible for: Conducting all phases of digital forensic examinations, including evidence acquisition, analysis, documentation, reporting, and disposition, while maintaining the integrity and accountability of digital evidence through established chain-of-custody procedures. Performing digital forensic examinations involving the identification, preservation, collection, processing, analysis, and presentation of electronically stored information (ESI) from a variety of digital devices, systems, applications, and environments. Developing, validating, testing, and enhancing forensic methodologies, software, hardware, and laboratory tools using scientific, engineering, mathematical, and statistical principles. Analyzing digital evidence and technical investigative findings and conducing research on discovery, evidentiary, litigation support, and other forensic issues associated with complex investigations and emerging technologies. Analyzing complex file systems, operating systems, applications, databases, and data formats to determine appropriate methodologies for the collection, extraction, processing, review, and production of digital evidence. Preparing forensic reports, exhibits, and demonstrative evidence, and providing expert testimony regarding forensic methodologies, findings, and conclusions in administrative and judicial proceedings. Providing technical briefings, fostering collaborative partnerships with other Federal agencies and external stakeholders, and maintaining expertise in emerging technologies, cybersecurity, and digital forensic practices.

Qualifications

Time-in-grade for this announcement is one year at the GS/SK-12 level. Applicants are responsible for confirming all required materials are submitted by the closing date of the announcement. Please check the How You Will Be Evaluated and Required Documents sections carefully, as missing documents will render the application incomplete and ineligible for review. Qualifying experience may be obtained in the private or public sector. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement.

BASIC REQUIREMENT: Applicant must possess IT related experience demonstrating each of the four competencies: reviewing work to ensure it is in line with established standards or to identify deficiencies (Attention to Detail); collaborating with customers to identify their information technology forensic needs or to resolve their hardware and software problems (Customer Service); explaining technical information orally to non-technical audiences (Oral Communication); and evaluating alternatives to recommend solutions to hardware or software problems (Problem Solving).

MINIMUM QUALIFICATION REQUIREMENT: In addition to meeting the basic requirement, applicants must also meet the minimum qualification requirement SK-13: Applicant must have at least one year of specialized experience equivalent to the GS/SK-12 level: Collecting, preserving, extracting, or analyzing electronically stored information from electronic devices, enterprise systems, or cloud/internet-based platforms in accordance with applicable evidence-handling and documentation procedures; AND Performing substantive forensic examination or analysis in at least one of the following areas:

• Mobile Device Forensics: Acquiring and analyzing data from mobile devices; examining device artifacts; recovering relevant data; and documenting and reporting forensic findings using recognized forensic tools and methods.
• Internet and Cloud Forensics: Preserving, collecting, and analyzing data from cloud services, websites, online applications, networks, domains, or online accounts; and applying open-source intelligence techniques and tools to support investigations.

ACCOMPLISHMENT RECORD COMPETENCIES: Your Accomplishment Record narratives should address the following competencies. See the How You Will Be Evaluated section below for more information:

• Competency 1: Computer Forensics - Applies tools and techniques used in forensics investigations (i.e., Case Intake, Acquisition, Analysis, Presentation, and Disposition), including data recovery and preservation of electronic evidence.
• Competency 2: Technology Expertise - Knowledge of the principles and methods of specialized technologies, tools, and delivery systems, including security, risk management, governance, functionality, and user interface in area of expertise (e.g., programming languages, server, web, applications, network)
• Competency 3: Technology Awareness - Uses knowledge of technological developments, new requirements, and new applications of information technology (hardware, software, and telecommunications) to evaluate and implement their integration into business processes to meet organizational requirements.
• Competency 4: Technical Communication - Translates technical information into non-technical terms and accurately convey technical information to end users (e.g., staff, management) and outside parties, including the technical documentation of applications, systems, Standard Operating Procedures, etc.