Skip to main content

This job has expired

Digital Forensic Specialist (Computer and Media Exploitation)

Employer
USAJobs
Location
Sterling, Virginia
Closing date
Jun 24, 2021
Duties

Summary

This position is located in the Office of Field Operations, Special Operations Division, Digital Forensics Branch in Sterling, VA.

The incumbent serves as a Digital Forensic Specialist (DFS) and is an expert in conducting digital device forensics acquisitions, processing and analytics support activities relating to ATF criminal enforcement operations.

Learn more about this agency

Responsibilities

  • Functions as a digital forensic expert, coordinator and advisor. Collects, processes, preserves, analyzes, presents and archives digital evidence including data retrieval, password recovery, and finding deleted and or hidden information; executes verification tests of forensic software and hardware, and methods to independently validate functionality; generates reports of findings to use in the prosecution of offenses; testifies in court.
  • Conducts forensics processes, acquisitions, extractions and examinations of digital evidence; creates forensics images. Creates working copies of evidence for case agents; maintains evidentiary chain of custody and property and property controls; sterilizes storage media; extracts mobile device data; conducts examinations of computer images and mobile device extractions; assists with analytics of all sources of digital evidence; document findings, develops conclusions, produces reports; testifies in court cases as a fact or expert witness.
  • Assists with DFB property inventory management and logistical duties to include shipping and receiving of evidence; document findings, develops conclusions, produces reports; testifies in court cases as a fact or expert witness.
  • Installs, images, configures, troubleshoots, and maintains hardware and software used in forensic digital device examination processes. Operates, modifies, and adapts a variety of computer hardware and software systems and equipment to conduct forensic examinations. Analyzes, evaluates, and recognizes new directions and modifications. Develops new processes to successfully complete a wide variety of complex and frequently unique forensic examinations. Maintains the highest level of competency utilizing complex electronic equipment and computers to support ATF criminal investigations in processing and recovering digital evidence.
  • Occasionally provides advice, assistance, and instruction to special agents and other law enforcement personnel. Prepares, maintains, and safeguards all file documentation, reports and materials.
  • Attends and receives briefings on the objectives of specific investigations, available intelligence on the identified suspects and evidence collection requirements for the activity, which must be documented. At briefings, provides options and recommendations pertaining to forensic digital evidence collection and support. Reviews affidavits and court orders before conducting forensic examinations to ensure legal authority and appropriateness of techniques utilized. Monitors all legislative and judicial actions that impact ATF digital forensic operations, including court decisions, legislative initiatives and conflicting State statutes.


Travel Required

50% or less - Must be available for frequent travel throughout the United States and its territories, as well as international travel, during the course of assignments.

Supervisory status
No

Promotion Potential
13 - This position is at the full performance level.

Requirements

Conditions of Employment

  • Must be a U.S. Citizen or National.
  • May be required to serve a one year probationary period.
  • Pass drug screening and subject to random drug test
  • Must successfully complete a background security investigation
  • Must be registered or exempt from the Selective Service. See www.sss.gov


The qualification requirements listed below must be met by the closing date of the announcement.

MOBILITY PLAN : New employees hired pursuant to this vacancy announcement must sign a mobility agreement. The purpose of ATF's mobility policy is to enhance career development and progression, and achieve mission and business effectiveness. To accomplish these objectives, the mobility plan will facilitate the movement of employees through special short-term assignments or permanent reassignments throughout the Bureau. Applicants who decline to sign a mobility agreement, as required, will be removed from the hiring process.

Qualifications

To qualify for GS-13 candidates must also have at least one year of specialized experience equivalent to the next lower grade level GS-12.

Special Note: Must have certifications in digital forensic disciplines related to mobile devices, computers and storage media. Must have extensive knowledge and experience in the following areas: Computers; storage and media; operating systems; social media warrants; forensic data recovery and extractions; forensic processes and best practices; forensic tools and software; forensic imaging; conducting examinations; preparing reports; and providing testimony.

Preferred experience in cloud-based data management systems, evidence controls, developing and presenting structured training, equipment inventory management, customer service and supply requests.

Specialized experience is demonstrated experience, which has equipped the applicant with the particular knowledge, skills and abilities to perform successfully the duties of this position. Experience must be in the normal line of progression or must be related to the work of the position advertised and must be reflected in resume. Examples of specialized experience include: Providing expert digital forensic service and support related to planning, collecting, examining, and processing of digital evidence for criminal investigations. Gathering evidence through the use of digital forensic techniques that will be admissible in a court of law, corporate security security investigations, administrative actions or military requirements. Contributing to the development of new digital forensic techniques, methods and equipment in support of criminal investigations, corporate security investigations, administrative actions or military requirements. Developing and maintaining contacts in the forensic field, collaborating, planning, coordinating and keeping abreast of technological advances that are used to support a law enforcement mission, corporate security investigations, administrative actions or military requirements.


Please do not cut and paste the position description, specialized experience, or occupational assessment questionnaire from this announcement into your resume, as this will not be considered a demonstration of your qualifications for this position.

The GS-13 salary range starts at ($103, 690.00). If you are a new federal (civil service) employee, your starting salary will be set at the Step 1 for this position and the grade level for which you are selected.

NOTE: Administratively Uncontrollable Overtime (AUO) applies to this position. AUO pay is a substitute form of payment for such irregular, unscheduled work and is paid on an annual basis instead of on an hourly basis.

Career Transition Assistance Plan (ICTAP). The ICTAP provides eligible displaced Federal competitive service employees with selection priority over other candidates for competitive service vacancies. If your agency has notified you in writing that you are a displaced employee eligible for ICTAP consideration, you may receive selection priority if: 1) this vacancy is within your ICTAP eligibility; 2) you apply under the instructions in this announcement; and 3) you are found well-qualified for this vacancy. To be well qualified, you must satisfy all qualification requirements for the vacant position and rate equivalent to the silver or better category using established category rating criteria. You must provide proof of eligibility with your application to receive selection priority. Such proof may include a copy of your written notification of ICTAP eligibility or a copy of your separation personnel action form. Additional information about ICTAP eligibility is at: https://www.usajobs.gov/Help/working-in-government/unique-hiring-paths/federal-employees/career-transition/

The Career Transition Assistance Plan (CTAP) provides eligible surplus and displaced competitive service employees in the Department of Justice with selection priority over other candidates for competitive service vacancies. If your Department of Justice component has notified you in writing that you are a surplus or displaced employee eligible for CTAP consideration, you may receive selection priority if: 1) this vacancy is within your CTAP eligibility, 2) you apply under the instructions in this announcement, and 3) you are found well-qualified for this vacancy. To be well qualified, you must satisfy all qualification requirements for the vacant position and rate equivalent to the silver or better category using established category rating criteria. You must provide a copy of your written notification of CTAP eligibility with your application. Additional information about CTAP eligibility is at: https://www.usajobs.gov/Help/working-in-government/unique-hiring-paths/federal-employees/career-transition/ .

Veteran Preference: If you are entitled to veteran preference, you should indicate the type of veteran preference you are claiming on your résumé.

In order to verify your veteran preference entitlement, please submit a copy of the Member Copy 4 of your DD-214 (Certificate of Release or Discharge from Active Duty); official statement of service from your command if you are currently on active duty; or other official documentation (e.g., documentation of receipt of a campaign badge or expeditionary medal) that shows your military service was performed under honorable conditions.

In addition, if you are a disabled veteran, a Purple Heart recipient, or widow/widower of a veteran, the spouse of a disabled veteran or the natural mother of a disabled or deceased veteran, you must submit the October 2013 Revised Standard Form (SF) 15, "Application for 10-Point Veteran Preference," and the other required documentation identified on the reverse side of the SF-15 to support your preference claim.

Although veteran preference points are not assigned under the category rating procedures described under "How You Will Be Evaluated," veteran preference eligibles are listed ahead of non-veterans within each category for which they are qualified.

Education

Education entered here if applicable:

All academic degrees and coursework must be completed at a college or university that has obtained accreditation or pre-accreditation status from an accrediting body recognized by the U.S. Department of Education. For a list of schools that meet this criteria, see www.ed.gov .

Additional information

Notice to Prospective Employees of Ethical Obligations from ATF's Human Resources Operations Division. Please click on the following link to read important information. DOJ Notice to Prospective Employees of Ethical Obligations

Selective Service: If you are a male applicant born after December 31, 1959, you must certify that you have registered with the Selective Service System, or are exempt from having to do so under the Selective Service Law. See www.sss.gov.

Periodic Reinvestigation: Subject to a 5-year periodic investigation

EEO Statement: The United States Government does not discriminate in employment on the basis of race, color, religion, sex, (including pregnancy, gender identify and sexual orientation), parental status, national origin, age, disability (physical and mental), family medical history or genetic information, political affiliation, military service, retaliation, or other non-merit factor.

Please click on the following link to read important information. Department of Justice EEO Policy Statement https://www.justice.gov/jmd/page/file/1393306/download

Reasonable Accommodation Statement: ATF provides reasonable accommodation to applicants with disabilities. If you need a reasonable accommodation for any part of the job application and hiring process, and you meet the eligibility requirements listed above, please notify the human resources specialist listed on the vacancy announcement, or contact the ATF's Office of Equal Employment Opportunity at (202) 648-8760. The decision on granting a reasonable accommodation is handled on a case-by-case basis.

"Federal Regulations state no ATF employee, his/her spouse, or his/her minor child shall have, directly or indirectly, any financial interest, including compensated employment, stock, or proprietary interest in the alcohol, tobacco, firearms or explosives industries. You should be aware that you may be asked to relinquish any ownership of or interests in the alcohol, tobacco, firearms or explosives industries before a determination can be made whether access to ATF information, information technology systems, and/or facilities can be authorized."

Additional vacancies may be filled from this vacancy announcement.

A one year probationary period is required for new supervisors and managers.

How You Will Be Evaluated

You will be evaluated for this job based on how well you meet the qualifications above.

You will be evaluated for this job based on how well you meet the qualifications above.

We will review your resume https://www.usajobs.gov/Help/faq/application/documents/resume/what-to-include/ and supporting documentation to ensure you meet the minimum qualification requirements. If you meet the minimum qualifications, we will use your responses to the assessment questionnaire to place you in one of three categories based on your experience, education, and/or training. The assessment questionnaire is designed to measure your ability in the following competencies.
  • Mastery knowledge of policies, regulations and forensically sound best practices for digital evidence and the forensic examination of computers, mobile devices, and various sources of digital storage media.
  • Comprehensive knowledge of forensic examination requirements, hardware and software systems in order to install, configure, troubleshoot, and maintain equipment.
  • Knowledge of laws of arrest, search and seizure, and regulations, restrictions, and policies that govern collecting evidence and using digital forensic tools, methods and equipment.
  • Extensive knowledge and experience in computers; storage media; operating systems; social media warrants; forensic data recovery and extractions; forensic processes and best practices; forensic tools and software; forensic imaging; conducting examinations; preparing reports; and providing testimony.
  • Ability to manage multiple tasks efficiently, analyze and interpret data, develop sound conclusions, maintain accurate records and analyze and solve technical problems.
  • Knowledge of the budgetary process, personal property inventory and general inventory requirements, equipment disposal, etc.

If you meet the minimum qualifications, you will be placed in one of the following categories:
  • Gold: Applicants possessing experience that substantially exceeds the minimum qualifications of the position and demonstrate high proficiency in all of the critical competencies, including all Selective Placement Factors (SPF), as determined by the job analysis.
  • Silver: Applicants possessing experience that exceeds the minimum qualifications of the position and demonstrates acceptable proficiency in all of the critical competencies, including all SPF's as determined by the job analysis.
  • Bronze: Applicants possessing experience that meets the minimum qualifications of the position and demonstrate basic proficiency in most of the critical competencies, including all SPFs as determined by the job analysis.

  • If you are best qualified, you may be referred to the hiring manager for consideration and may be called for an interview. Candidates within the Gold category who are eligible for veterans' preference will receive selection priority over candidates without veterans' preference.

    To preview questions please click here .

    Background checks and security clearance

    Security clearance
    Top Secret

    Drug test required
    Yes

    Position sensitivity and risk
    Critical-Sensitive (CS)/High Risk

    Trust determination process
    Suitability/Fitness

    Required Documents

    • Resume showing relevant experience (cover letter optional)
    • Veterans' preference documentation, DD-214 Member 4 Copy, SF-15 Revised October 2013 and VA letter, if applicable.
    • CTAP/ICTAP documentation, if applicable.
    • An unofficial college transcript (Note: If you're selected for this position, official transcript(s) will be required prior to your first day.) (Use if education is being credited for the purpose of meeting minimum qualification requirements or if grade point average is being used to determine superior academic achievement.)
    • It is your responsibility to ensure all documents are received on time and the materials are readable. If applying on-line poses a hardship to any applicant, please contact us at the telephone number listed on this announcement. Applicants MUST CONTACT US PRIOR TO THE CLOSING DATE to speak to someone who can provide assistance for on-line submission. Requests for extensions will not be granted. Paper applications submitted without prior approval from the agency point of contact may be handled as incomplete. IMPORTANT INFORMATION: If your contact information changes after the closing date of this vacancy announcement, update your profile information in MYUSAJOBS as well as contact the Human Resources Specialist listed on this vacancy announcement to ensure you can be contacted throughout the selection process.


    Prior to selection, the candidate may be required to provide an original copy of any supporting/validating documentation as well as other documentation to verify eligibility. All required materials must be uploaded using the supporting documentation instructions described in the announcement.

    Failure to provide the required documentation by the closing date of this announcement will result in elimination of further consideration for this position.

    Get job alerts

    Create a job alert and receive personalized job recommendations straight to your inbox.

    Create alert