Washington Metropolitan Area Transit Authority – Washington D.C.

Senior Criminal Forensic Investigative Analyst

Minimum Qualifications


  • Bachelor’s degree in Computer Science, Information Technology, Digital Forensics, or related field


  • A minimum of seven (7) years’ experience in Information technology and investigations
  • Demonstrate proficiency in computer hardware and software including multiple forensics software and hardware components
  • Demonstrate knowledge of basic cybersecurity terminology, experience working in a cyber environment


  • Technical certification/license in one or more of the following: EnCE, SANS, GCIH/GCFA, FLETC DEASTP/SCERS, IACIS, CFCE, ISFCE, FBI DEXT/CART, Certified E-discovery specialist
  • Certified Information Systems Security Professional (CISSP)


  • Professional certifications preferred in digital forensics discipline, digital forensics software, or IT networks
  • Familiarity with passenger rail operations and/or transportation operations

Medical Group

Satisfactorily complete the medical examination for this position, if required.  The incumbent must be able to perform the essential functions of this position either with or without reasonable accommodations.

Job Summary

The Senior Criminal Forensic Investigative Analyst will serve as the cybersecurity specialist, knowledgeable of and works with various cyber standards to include, but not limited to, the National Institute of Standards and Technology (NIST). This position will also serve as an expert in computer forensic investigations, e-discovery and is one of the principle IT advisors to OIG. This position has responsibility for managing the collection, review, interpretation, evaluation, and integration of large volumes of data from multiple sources, uses sophisticated IT systems and tools for data mining and statistical analyses. Conducts, coordinates, and guides the development and application of advanced computer and statistical techniques. The employee also supervises and coordinates the information system needs of the OIG.  The incumbent will serve as the OIG’s point of contact on all cyber related crimes and will also coordinate meetings with WMATA Chief Information Security Officer, (CISO), Cybersecurity taskforces and other stakeholders within the cyber investigative community. The employee works independently under general guidelines and supervision of the Deputy Inspector General for Investigations and Special Projects.

Essential Functions

  • Conducts data mining and statistical analyses, particularly related to complaints and/or allegations of fraud, waste, and abuse. Performs computer forensics, such as imaging of computers and forensic analysis.  Extracts emails and conducts mobile device forensic analysis in support of investigations.  Oversees the work of subordinate analysts conducting data mining and other computer related analyses and data matching activities.
  • Evaluates the validity, accuracy, and reliability of a broad array of electronic data and information for translation into business intelligence relevant to the work of the OIG.
  • Provides technical assistance to OIG teams conducting complex information technology investigations and reviews.
  • Provides assessments of complex IT issues in a dynamic environment where the scope of efforts may involve risk-based approach to assessing IT controls, policies, practices, and degree(s) of vulnerability. 
  • Plays an integral part in cybersecurity investigations and reviews.  Works closely to establish incident reporting coordination with WMATA IT leadership.
  • Establishes and maintains procedures related to the Authority’s network interface with the OIG servers. Ensures appropriate security measures and firewalls are in place and maintains the OIG case management systems for investigations, audits and special projects.
  • Works in conjunction with OIG staff and makes certain that information systems functions are executed effectively and efficiently.
  • Ensures investigations and reviews of IT systems adequately assess the effectiveness of technical controls, are in accordance with established criteria and are in conformity with industry best practices.
  • Gains an understanding of all WMATA IT systems and becomes a subject matter expert in this area.

The essential duties listed are not intended to limit specific duties and responsibilities of any particular position. Nor is it intended to limit in any way the right of managers and supervisors to assign, direct and control the work of employees under their supervision.

Evaluation Criteria

Consideration will be given to applicants whose resumes demonstrate the required education and experience. Applicants should include all relevant education and work experience.

Evaluation criteria may include one or more of the following:

  • Personal Interview
  • Skills Assessments
  • Verification of education and experience
  • Criminal Background Check
  • Credit history report for positions with fiduciary responsibilities
  • Successful completion of a medical examination including a drug and alcohol screening
  • Review of a current Motor Vehicle Report


Washington Metropolitan Area Transit Authority, a Federal contractor, is an Equal Opportunity / Affirmative Action employer.  All qualified applicants receive consideration for employment without regard to race, color, creed, religion, national origin, sex, gender, gender identity, age, sexual orientation, genetic information, physical or mental disability, or status as a protected veteran, or any other status protected by applicable federal law, except where a bona fide occupational qualification exists.  Our hiring process is designed to be accessible and free from discrimination.

This posting is an announcement of a vacant position under recruitment.  It is not intended to replace the official job description.  Job Descriptions are available upon confirmation of an interview.

Apply here: