IT Cybersecurity Specialist (Digital Evidence)

Full Job Description

This position is located in the Drug Enforcement Administration (DEA), Office of Forensic Sciences, Digital Evidence Laboratory.

This primary purpose of this position is to perform as a senior digital forensic examiner, analyzing seized digital evidence, performing on-site acquisition/duplication of digital evidence for DEA, testifying in Federal and state courts as an expert witness, and providing subject matter expertise and advice to both DEA investigators and examiners in the laboratory.

For more information on eligibility requirements see: DEA Employment Eligibility Applicants must meet all of the required qualification requirements described below by the closing of this announcement.

Basic Qualification Requirements: Attention to Detail - Is thorough when performing work and conscientious about attending to detail.

Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately.

Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.

Applicants applying for the GS-13 must meet one of the following requirements: A.

Have at least one full year of qualifying specialized experience that is at least equivalent in difficulty and complexity to work performed at the GS-12 grade level.

Specialized experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social).

Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment.

You will receive credit for all qualifying experience, including volunteer experience.

Qualifying specialized experience must demonstrate the following: 1) preserving and analyzing electronic data using established methods, or 2) conducting digital forensic examinations, documenting actions, and providing written results, or 3) using subject matter expertise in an area of information technology to make correct inferences or draws accurate conclusions about the content or structure of data.

Additional information on the position qualification requirements are located in the Office of Personnel Management's (OPM) Qualifications Standards Handbook. Major Duties:

As a IT Cybersecurity Specialist (Digital Evidence), your typical work assignments may include: Serving as a subject matter expert (SME) within DEA's Digital Evidence Laboratory on the forensic analysis of state-of-the-art emerging digital technologies.

Providing technical expertise for forensic deployments, best practices for preservation of evidence, and forensic analysis support.

Performing live analysis utilizing virtual machines, bootable lab environments, or sandbox environments.

Providing training in a large number of areas such as: evidence identification and handling, evidence examination methods, review tools and methodologies, digital evidence interview needs, digital evidence cases studies, and specialized investigation needs such as drug or chemical diversion or advanced complex conspiracy investigations.

Advising more junior Digital Forensic Examiners and field Digital Evidence Technicians on computer evidence issues such as search strategies, witness interview topics, evidence duplication, computer usage, computer communication, recovered data reliability.