Digital Forensic Analyst

Summary

The Division of Enforcement (ENF) is seeking an Information Technology Specialist (Forensics) (Digital Forensic Analyst) in Office of Technical Services (OTS). As a Digital Forensic Analyst, you will serve as an information technology advisor and consultant, providing digital forensic expertise and technical support to ENF investigative staff.

Duties

As a Digital Forensic Analyst, you will be responsible for: Conducting all phases of digital forensic examinations, including evidence acquisition, analysis, documentation, reporting, and disposition, while maintaining the integrity and accountability of digital evidence through established chain-of-custody procedures. Performing digital forensic examinations involving the identification, preservation, collection, processing, analysis, and presentation of electronically stored information (ESI) from a variety of digital devices, systems, applications, and environments. Developing, validating, testing, and enhancing forensic methodologies, software, hardware, and laboratory tools using scientific, engineering, mathematical, and statistical principles. Analyzing digital evidence and technical investigative findings and conducing research on discovery, evidentiary, litigation support, and other forensic issues associated with complex investigations and emerging technologies. Analyzing complex file systems, operating systems, applications, databases, and data formats to determine appropriate methodologies for the collection, extraction, processing, review, and production of digital evidence. Preparing forensic reports, exhibits, and demonstrative evidence, and providing expert testimony regarding forensic methodologies, findings, and conclusions in administrative and judicial proceedings. Providing technical briefings, fostering collaborative partnerships with other Federal agencies and external stakeholders, and maintaining expertise in emerging technologies, cybersecurity, and digital forensic practices. Qualifications

Time-in-grade for this announcement is one year at the GS/SK-12 level. Applicants are responsible for confirming all required materials are submitted by the closing date of the announcement. Please check the How You Will Be Evaluated and Required Documents sections carefully, as missing documents will render the application incomplete and ineligible for review. Qualifying experience may be obtained in the private or public sector. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. All qualification requirements must be met by the closing date of this announcement. BASIC REQUIREMENT: Applicant must possess IT related experience demonstrating each of the four competencies: reviewing work to ensure it is in line with established standards or to identify deficiencies (Attention to Detail); collaborating with customers to identify their information technology forensic needs or to resolve their hardware and software problems (Customer Service); explaining technical information orally to non-technical audiences (Oral Communication); and evaluating alternatives to recommend solutions to hardware or software problems (Problem Solving). MINIMUM QUALIFICATION REQUIREMENT: In addition to meeting the basic requirement, applicants must also meet the minimum qualification requirement SK-13: Applicant must have at least one year of specialized experience equivalent to the GS/SK-12 level: Collecting, preserving, extracting, or analyzing electronically stored information from electronic devices, enterprise systems, or cloud/internet-based platforms in accordance with applicable evidence-handling and documentation procedures; AND Performing substantive forensic examination or analysis in at least one of the following areas: Mobile Device Forensics: Acquiring and analyzing data from mobile devices; examining device artifacts; recovering relevant data; and documenting and reporting forensic findings using recognized forensic tools and methods. Internet and Cloud Forensics: Preserving, collecting, and analyzing data from cloud services, websites, online applications, networks, domains, or online accounts; and applying open-source intelligence techniques and tools to support investigations. ACCOMPLISHMENT RECORD COMPETENCIES: Your Accomplishment Record narratives should address the following competencies. See the How You Will Be Evaluated section below for more information: Competency 1: Computer Forensics - Applies tools and techniques used in forensics investigations (i.e., Case Intake, Acquisition, Analysis, Presentation, and Disposition), including data recovery and preservation of electronic evidence. Competency 2: Technology Expertise - Knowledge of the principles and methods of specialized technologies, tools, and delivery systems, including security, risk management, governance, functionality, and user interface in area of expertise (e.g., programming languages, server, web, applications, network) Competency 3: Technology Awareness - Uses knowledge of technological developments, new requirements, and new applications of information technology (hardware, software, and telecommunications) to evaluate and implement their integration into business processes to meet organizational requirements. Competency 4: Technical Communication -Translates technical information into non-technical terms and accurately convey technical information to end users (e.g., staff, management) and outside parties, including the technical documentation of applications, systems, Standard Operating Procedures, etc.

How You Will Be Evaluated

You will be evaluated for this position based on how well you meet the qualifications listed in this announcement. Your resume and application package will first be reviewed to determine whether you meet the minimum qualification requirements outlined in the announcement. Please do not submit an Accomplishment Record at this time. If you are found minimally qualified, the Office of Human Resources will contact you to request an Accomplishment Record. You will have 3 business days from the date of the request to submit it. Failure to submit the Accomplishment Record on time will remove you from further consideration. A response is required even if an Accomplishment Record was submitted at time of application. Because of the short turnaround time, you are strongly encouraged to begin preparing your Accomplishment Record in advance. Once your Accomplishment Record is received, a rating panel will review both your resume and your narrative responses. Your Accomplishment Record must clearly demonstrate your proficiency in the competencies listed in the Qualifications section. Click here for guidance on writing your Accomplishment Record. Your resume must provide evidence that supports the claims in your Accomplishment Record. Each narrative must describe one specific, relevant example from your experience or training. Responses are limited to 300 words per competency; any text beyond this limit will not be reviewed. Accomplishment Record Format: Competency Title Position title and dates from your resume that this experience was obtained Describe the situation (i.e., the challenged faced, the problem solved) Describe the specific actions you took State the outcome, results, or long-term impact of your accomplishment Name and email address of someone who can verify this information Reference checks may be conducted as part of the final selection process, and you will be notified before any contacts are made. Basis for Rating: The rating panel will evaluate applicants' accomplishment records and resume, then place them into one of the following categories: Highly Qualified - Meets the minimum qualification requirements and has extensive skills and experience in most of the job related competencies. Well Qualified - Meets the minimum qualification requirements and has a moderate amount of skills and experience in most of the job related competencies. Qualified - Meets the minimum qualification requirements, but may have a limited amount of experience in several of the job related competencies. Top ranked applicants will be referred to the hiring office for further review and consideration. The hiring office may directly contact recommended candidates for interview(s). To preview the Questionnaire, click https://apply.usastaffing.gov/ViewQuestionnaire/13111751 Other Information

Supplementary vacancies may be filled in addition to the number stated in this announcement and may be filled from any division or office within the agency. SEC COMPENSATION PROGRAM: Total salary (base pay + locality) is dependent upon duty location. The overall salary range listed above is provided for informational purposes; a selectee's initial pay will be established below the maximum rate of the range. The pay for current SEC employees will be determined according to the procedures specified in the agency's policy. Please visit the agency's Compensation Overview page for more information. Disability Employment: For information on disability appointments, click here. IMPORTANT INFORMATION FOR SURPLUS OR DISPLACED FEDERAL EMPLOYEES: If you have never worked for the federal government, you are not I/CTAP eligible. To receive selection priority for this position, you must: (1) meet CTAP or ICTAP eligibility criteria; the questionnaire asks you to identify your ICTAP/CTAP eligibility (2) be rated well-qualified; and, (3) submit the appropriate documentation to support your CTAP or ICTAP eligibility. View information about I/CTAP eligibility on OPM's Career Transition Resources website. Veterans Employment Opportunity Act (VEOA): To be eligible for a VEOA appointment under Merit Promotion procedures, you must be a preference eligible or a Veteran separated after 3 years or more of continuous active service performed under honorable conditions. LAND MANAGEMENT WORKFORCE FLEXIBILITY ACT (LMWFA): The LMWFA provides current or former temporary or term employees of federal land management agencies opportunity to compete for permanent competitive service positions. Individuals must have more than 24 months of service without a break between appointments of two or more years. Service must be in the competitive service and have been at a successful level of performance or better. For more information, click here. Noncompetitive Appointment Authorities: For more information on noncompetitive appointment authority eligibility requirements: Persons with Disabilities-Schedule A Special Hiring Authorities for Veterans Special Hiring Authority for Certain Military Spouses Other Special Appointment Authorities Reasonable Accommodation: If you are an applicant who needs a reasonable accommodation to participate in the SEC application process due to a medical disability, please contact [email protected]. For religious-based accommodations, please contact [email protected] . Please be sure to submit your request at least 5 business days in advance of the date you need the requested accommodation. Equal Employment Opportunity (EEO) Information for SEC Job Applicants: For more information, please click here. The Fair Chance Act prohibits specific inquiries concerning an applicant's criminal or credit background unless the hiring agency has made a conditional offer of employment to the applicant. An applicant may submit a complaint, or any other information, to the agency within 30 calendar days of the date of alleged non-compliance by contacting the Legal and Policy Office in the Office of Human Resources at [email protected].