InfoSec (Digital Forensics)
Summary
The Office of Inspector General (OIG) is an independent office within the Department of the Interior whose mission is to promote excellence, integrity, and accountability throughout DOI. The OIG conducts investigations, evaluations, and audits in order to enhance effectiveness and efficiency and to prevent and detect waste, fraud, and mismanagement in DOI programs and operations.
Responsibilities
A relocation or recruitment incentive may be authorized.
The position is located in the Office of Investigations (OI). The Office of Investigations manages, supervises, coordinates, and conducts investigations relating to DOI programs and operations, including, but not limited to, investigations of fraud, waste, abuse and mismanagement in such programs and operations and actual or suspected criminal activity or other wrongdoing by DOI employees, contractors, grantees, lessees, or any other persons or entities doing business with the DOI. The incumbent serves as an Information Technology (IT) Specialist in the Computer Crimes Unit (CCU) and reports directly to the Special Agent in Charge (SAC) of the Computer Crimes Unit.
- Serves as an IT Specialist responsible for providing a wide variety of technical tasks to assist with the operation of the OIG’s digital forensics and computer crimes program, provides coordination and technical support for the investigation of network intrusion and cybersecurity incidents, and implements a variety of programs in support of the investigative and audit missions.
- Provides a wide variety of forensic and scientific support to assist in criminal, civil, and administrative investigations, coordinating and performing a wide range of specialized activities required in addressing technology crimes and digital evidence issues; and collects, preserves and analyzes electronic records from multiple sources in a forensically sound manner.
- Utilizes specialized equipment and techniques to discover and analyze deleted or “hidden” information that may serve as useful evidence in a criminal, civil or administrative case; handling, identifying, and collecting computer-related evidence; determining other avenues of technical or professional help available; and determining whether data recovery or media analysis activities merit further technical assistance.
- Examines digital evidence to find potentially relevant information, writes clear technical reports to document findings, testifies in court as needed as a digital forensics expert; assists in the acquisition of appropriate hardware and software; troubleshoots and makes recommendations for workflow and process improvement, follows and supports CCU in refining the Quality Assurance Program (QAP) to ensure digital forensic activities are performed in a scientifically valid manner.
- Testifies in court, as needed, as a digital forensics expert.
Travel Required
Occasional travel – Less than 15%
Conditions of Employment
- U.S. Citizenship is required
- Males born after 12-31-59 must be registered for the Selective Service
- Successful completion of a background investigation
- Position is subject to initial and random drug testing
- OGE-450, Confidential Statement of employment is required
- May be required to complete a one-year probationary period
A background investigation will be required for this position. Continued employment will be subject to the applicant’s successful completion of a background security investigation and favorable adjudication. Failure to successfully meet these requirements will be grounds for termination.
Qualifications
To qualify for the GS-14 level, you must possess at least one year (52 weeks) of specialized experience in all of the following areas listed below:
1). Gathering evidence related to forensic data recovery and IT intrusions;
2). Providing digital forensic support to investigations in the form of evidence seizure, and digital forensic analysis;
3). Performing investigative functions in Windows, OSX, Linux and mobile operating systems architecture; and
4). Evaluating requests for subpoenas and search warrants in connection with the production or seizure of digitally stored evidence;
5). Writes clear technical reports to document findings, testifies in court as needed as a digital forensics expert.
NOTE: If a determination is made that qualifications and/or experience have been inflated, your score will be adjusted to more accurately reflect your abilities.