InfoSec (Digital Forensics)
TOUGH WORK. VITAL MISSION. Challenge yourself! You have the power to help combat drug trafficking. Be a part of DEA! It’s tough work, but a vital mission. Whatever your background or expertise, your work at DEA will be tremendously rewarding because it will have a daily impact on national security and the quality of life of all Americans.
These positions are located in the Office of Forensic Sciences, Digital Evidence Laboratory, Lorton, Virginia and Riverton, Utah. The incumbent will be responsible for the following:
-Performs document conversion and extraction in support of an investigation.
-Develops new methods and procedures for digital forensic analysis.
-Use established protocols to conduct digital forensic examinations of computers, servers, smart phones, DVRs GPS devices, flash drives, tablets, digital cameras and other electronic devices.
-Tests new forensic software, creating test data sets, and test scripts and documents findings.
-Presents findings as testimony or in affidavits regarding chain of custody, processing and analysis of digital evidence.
Conditions of Employment
- Must be a U.S. Citizen
- Must be able to obtain and maintain a Background and/or Security Clearance
- Males born after 12-31-59 must be registered for Selective Service
- Drug testing designated position
- Successful completion of an one-year probationary period is required (unless already completed).
GS-09: Must have one year of specialized experience equivalent to at least the GS-07 Federal grade level performing such duties as imaging digital evidence using forensic best practices; writing detailed notes that accurately present the forensic process; writing summary reports of findings; reviewing, assessing, and troubleshooting common problems, such as malfunctioning computer systems; and applying standard examination techniques in reviewing findings/results and determining applicability to investigations. OR
A master’s degree or equivalent graduate degree; or 2 full years of progressively higher level graduate education leading to such a degree or LL.B. or J.D., if related. OR
A combination of both, experience and education.
GS-11: Must have one year of specialized experience equivalent to at least the GS-09 Federal grade level in performing such duties assisting in inspecting, analyzing and evaluating standard computer systems for files or other data; extracting readily accessible data from computer equipment and data storage media; conducting searches of specialized databases; gathering and disseminating technical information. OR
A Ph.D. or equivalent doctoral degree; or 3 full years of progressively higher level graduate education leading to such a degree or LL.M, if related. OR
GS-12: Must have one year of specialized experience equivalent to at least the GS-11 Federal grade level performing such duties as preserving evidence and creating long-term storage archives using established methods, techniques, and lab-defined protocols; conducting digital forensic examinations and documenting the findings; preparing written reports of findings; testing new forensic software, creating test data sets, testing scripts; documenting the findings; and testifying before judges, courts of law, or other triers of fact in reference to routine chain-of-custody of evidence all with minimal supervision.
GS-13: Must have one year of specialized experience equivalent to at least the GS-12 Federal grade level performing such duties as preserving evidence and creating long-term storage archives using established methods, techniques, and lab-defined protocols; maintaining chain-of-custody through established evidence handling procedures; conducting digital forensic examinations and documenting the findings; preparing written reports of findings; testifying regarding chain-of-custody and the processing and analysis of digital evidence; testing new forensic software, creating test data sets and test scripts and documenting the findings; testifying before judges, courts of law, or other triers of fact in reference to routine chain-of-custody of evidence; serve as a subject matter expert and serve as a technical lead.
Competencies: Your qualifications will be evaluated on the basis of your level of competencies in the following areas:
- Attention to Detail
- Customer Service
- Evidence Collection
- Oral Communication
- Problem Solving
- Technical Competence
- Technology Awareness
Applicants must have IT-related experience demonstrating each of the four competencies listed below.
1. Attention to Detail – Is thorough when performing work and conscientious about attending to detail.
2. Customer Service – Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.
3. Oral Communication – Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.
4. Problem Solving – Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
All academic degrees and coursework must be completed at a college or university that has obtained accreditation or pre-accreditation status from an accrediting body recognized by the U.S. Department of Education. For a list of schools that meet this criteria, click here.
ARE YOU USING YOUR EDUCATION TO QUALIFY? You MUST provide transcripts or other documentation to support your educational claims. Unless otherwise stated: (1) official or unofficial transcripts are acceptable, or (2) you may submit a list with all of your courses, grades, semester, year, and credit for the course. All materials must be submitted by the closing date of the announcement.
PASS/FAIL COURSES: If more than 10 percent of your undergraduate course work (credit hours) were taken on a pass/fail basis, your claim of superior academic achievement must be based upon class standing or membership in an honor society.
GRADUATE EDUCATION: One academic year of graduate education is considered to be the number of credits hours your graduate school has determined to represent one academic year of full-time study. Such study may have been performed on a full-time or part-time basis. If you cannot obtain your graduate school’s definition of one year of graduate study, 18 semester hours (or 27 quarter hours) should be considered as satisfying the requirement for one year of full-time graduate study.
FOREIGN EDUCATION: If you are using education completed in foreign colleges or universities to meet the qualification requirements, you must show the education credentials have been evaluated by a private organization that specializes in interpretation of foreign education programs and such education has been deemed equivalent to that gained in an accredited U.S. education program; or full credit has been given for the courses at a U.S. accredited college or university. For further information, click here.