Information Technology Specialist (INFOSEC) / Digital Investigative Analyst

Summary

This position is in the Federal Trade Commission's (FTC) Bureau of Consumer Protection (BCP), Division of Litigation Technology & Analysis (DLTA or Division). The Division plays a central role in the investigation and litigation of consumer protection matters. The applicant serves as a Digital Investigative Analyst responsible for collecting, processing, preserving, analyzing, and presenting computer-related evidence in support of law enforcement investigations.

Duties

The employee will serve as an Information Technology Specialist (INFOSEC) / Digital Investigative Analyst and perform the following duties: Planning, coordinating, and directing forensic science activities in complex cases, including preserving and analyzing digital evidence from electronic devices such as computers, mobile devices, network devices, servers and the cloud. Overseeing and conducting investigations involving digital storage media. Designing and performing complex computer forensic collection activities at target locations. Examining file systems, digital media, and logs from multiple operating system platforms for the purpose of identifying evidence of unlawful activity. Independently preparing reports and briefing papers. Providing expert technical guidance and assistance to others involved in the investigation to ensure that critical precautions are taken to prevent the spoilation of data, ensure the integrity of the evidence, and prevent damage to the defendant's equipment. Negotiating with opposing parties and outside counsel regarding submission of electronically stored information. Serving as a Contracting Officer's Representative (COR) on contracts. Testifying in judicial proceedings. Qualifications

To qualify for the Information Technology Specialist (INFOSEC)/ Digital Investigative Analyst at the GS-14 level, you must meet the following requirements: You must demonstrate in your resume at least one (1) year of qualifying experience equivalent to at least the GS-13 level in the Federal service obtained in either the private or public sector, performing the following types of tasks: planning and coordinating digital forensic activities; collecting, processing, and preserving digital evidence from electronic drives, mobile devices, network devices, servers, and the cloud; examining file systems and logs from multiple operating systems platforms; and providing reports of examination results regarding digital forensic activities. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.

Education

This position does not have a positive education requirement. How You Will Be Evaluated

Once the announcement has closed, your résumé and supporting documentation will be used to determine if you meet the qualifications listed on this announcement. If you are found qualified, your résumé and supporting documentation will be compared to your responses on the assessment questionnaire to determine your level of experience. If you rate yourself higher than is supported by your application package, your responses may be adjusted and/or you may be excluded from consideration for this position. If you are found to be among the top qualified candidates, you will be referred to the selecting official for employment consideration. Your qualifications will be evaluated on the following competencies (knowledge, skills, abilities and other characteristics): Knowledge of advanced IT principles, concepts, methods, standards and practices sufficient to independently conduct complex forensic examinations of digital media, resulting in the acquisition, examination, and presentation of digital evidence for investigations and litigation. Ability to apply interrelationships with multiple IT specialties during onsite collections and other situations. Ability to communicate well with individuals and groups. Ability to plan, organize, and manage complex projects, involving significant logistical challenges, within specified time limits, often simultaneously. Knowledge of chain of custody and proper storage and handling of evidence. Other Information

Career Transition Assistance Programs: These programs apply to employees who have been involuntarily separated from a Federal service position within the competitive service or Federal service employees whose positions have been deemed surplus or no longer needed. To receive selection priority for this position, you must: (1) meet CTAP eligibility criteria; (2) be rated well-qualified for the position with a score of 85 or above; and, (3) submit the appropriate documentation to support your CTAP eligibility. For more information visit: http://www.opm.gov/rif/employee_guides/career_transition.asp.