Digital Forensic Analyst (Forensic Computer Specialist 1)
The Bureau of Workers’ Compensation (BWC) is a dynamic organization that offers career opportunities across many different disciplines. We value the richness of a skilled, diverse and engaged workforce. We’re committed to fostering and embracing an environment of inclusion and diversity to achieve our mission. Please click this link to read more, then come back to this job posting to submit your application!
This position shall be filled in accordance with the provisions of the OCSEA Collective Bargaining Agreement. BWC bargaining unit members have selection rights before non-bargaining unit members. All other applications will only be considered if an internal bargaining unit applicant is not selected for this position.
Under general supervision of Forensic Intelligence Manager, applies considerable knowledge of computer hardware & software & utilizes information technologies applicable to cyber security & forensics: collects, preserves & examines electronic evidence through use of specialized investigative tools in internal investigations (e.g. Investigatory Interviews regarding actions of BWC employees); recovers deleted evidence & corrupted & protected electronic files in order to expose hidden data; obtains & acquires data from internal & external data sources (e.g. computer data, computers logs, internet & network logs, VOIP & mobile phone records, timesheets, payroll records, emails, calendars, fleet logs) for use in ongoing internal investigations & in support of BWC’s Special Agents (Workers’ Compensation Fraud Investigators) & higher-level Forensic Computer Specialists; attends training sessions as assigned (e.g. IACIS, SANS) & secures certifications & credentials applicable to scope of job function & duties; independently investigates misuse of resources (e.g. internet access) by BWC employees; researches possible &/or alleged intrusion attempts & malicious code incidents, utilizing standard & accepted forensic principles; accompanies other investigative staff as assigned & aids in conducting interviews with parties valuable to ongoing internal investigations; develops, updates & implements procedures relating to seizure & examination of evidence from computer systems; researches & suggests best forensic analysis practices &/or strategies; makes informed suggestions regarding possible updates to policies; reviews procedural suggestions (e.g. received from law enforcement jurisdictions); researches & implements new investigative work tools; works in concert with higher-level Forensic Computer Specialists in determining appropriateness of procedures, policies &/or products; receives, maintains & releases evidence in accordance with accepted evidence-handling procedures; escalates &/or refers investigations to higher-level Forensic Computer Specialists &/or supervisor as appropriate. Prepares reports of findings for submission &/or presentations: prepares duplicate image backup copies; documents findings from electronic investigation activities; assists with offsite search warrants by seizing & imaging devices pertinent to investigations; testifies in case proceedings; provides training to law enforcement agencies as required &/or deemed beneficial. Performs related duties (e.g. maintains electronic & hard copies of evidence transfers): tests computer programs in accordance with procedural specifications; configures & maintains computer hardware for use in case work &/or program development; resolves technical issues involving communications & connectivity; executes verifications on forensic software & methods in order to validate functionality; attends seminars applicable to specialized forensic software applications &/or analysis techniques; actively participates in professional networking forums as assigned.
Qualifications
Unless required by legislation or union contract, starting salary will be set at the lowest rate of the salary range. In most cases successful employees will move up a step in the salary range within six months, with subsequent step increases occurring every year as supported by successful performance evaluation results.
Completion of associate core program in computer forensics (e.g., information technology or related scientific discipline systems administration; network security; internet protocol).
-OR-
24 mos. exp. in computer forensic processing or related specialty area (e.g., systems administration; network security; internet protocol).
Or equivalent of Minimum Class Qualifications for Employment noted above.
Knowledge of Agency, Divisional & departmental policies & standard operating procedures*; International Association of Computer Investigative Specialists (IACIS)*; SANS Information Security training & certification*; established & validated forensic principles; computer systems & technology (e.g. systems administration; network security; internet protocol); interviewing*; human relations*; established evidence-handling procedures*; labor relations (e.g. arbitration procedures, progressive discipline policies, collective bargaining contract provisions & mandates)*. Skill in operation & configuration of personal computer systems & peripheral equipment; written & verbal business communications*. Ability to produce accurate reports; testify in case proceedings (e.g. Investigatory Interviews in presence of Union representatives); deal with many variables, determine specific action & resolve technical issues; gather, collate & classify information; handle sensitive inquiries from & contacts with other law enforcement agencies & members of general public. (*) Developed after employment.
Prior to an offer of employment, the final applicant will be required to sign a background check authorization form and undergo a criminal background check.Criminal convictions do not necessarily preclude an applicant from consideration for a position.
Position requires travel; therefore, persons occupying this position must be able to provide own transportation &/or legally operate a state-owned vehicle.
EDUCATIONAL TRANSCRIPT REQUIREMENT:
BWC requires an official transcript for any applicant claiming to meet the minimum qualifications based on educational achievement. A transcript is only considered “official” if it is verifiable through the educational institution that awarded it (e.g., contains institution watermark, ink stamp, embossed stamp, registrar contact information). If provided from an on-line transcript clearinghouse the transcript must contain clearinghouse contact information so that it can be verified. Printouts of course information available to the student through the institution’s website are NOT considered an official transcript. In order for education to be taken into consideration during the application screening process, BWC employees must have an official transcript on file with the Personnel & Benefits department by the deadline date on the job posting. Applicants not currently employed by BWC must attach a copy of the transcript(s) to their application, however, an official transcript will be required if invited to interview for the job opening.
You can check the status of your application online by signing in to your profile. Questions not pertaining to your application status can be directed to: a77509@bwc.state.oh.us.
Applicants experiencing technical issues should send an email to careers@ohio.gov for assistance.
Apply here:
https://dasstateoh.taleo.net/careersection/oh_ext/jobdetail.ftl?job=1900052M