Officer – Digital Forensics

National Crime Agency

Summary
The Intelligence Directorate works collaboratively with the NCA Investigations Directorate and partners to deliver a unified crime fighting response.

Serious and organised crime (SOC) is one of the recognised national security threats, estimated at costing the UK economy over £37 billion every year.

In the Intelligence Directorate we collect, record and enhance intelligence to build a picture of that SOC, sharing this with partners in the UK and abroad. Then, through the exploitation of intelligence, we flex law enforcement’s collective resources against these dynamic threats. We are continuously looking for new opportunities to enhance traditional capabilities to increase the quantity and quality of available intelligence and maximise its potential for exploitation.
Job description
To be successful in this role, you will be able to demonstrate a good working knowledge of digital forensics processes and procedures within the laboratory or scene environments.

We are seeking candidates who are experienced at working within a laboratory or scene to acquire and examine an array of digital evidence, and able to preserve and secure digital evidence at crime scenes and witnesses premises alike.

We are advertising for three different Digital Forensic roles at G5 Officer level, each of which has differing requirements and criteria.

Please Note (Cyber and Scene roles only):
• Successful candidates in both the Cyber and Scene roles will be expected to pass a five day Officer Safety Training course (OST) during their probationary period or during their first 12 months in the Agency (Civil Service transfers). Failure to do so would mean you are not able to continue in the operational forensic role and we would seek to find you an alternative non-operational role within the agency.
• The OST comprises of cognitive input, armed and unarmed defence theory and practical techniques, and as such requires a level of physical exertion due to the nature of the repetitive drills. The practical techniques include use of body weapons, movement and positioning, strikes (armed/unarmed), blocks, restraint and control. We will expect officers attending the course to have a standard of physical fitness. Progressive full body warm ups are conducted each day to minimise risk of injury to the officer. It is expected the officers is capable of ground descent and ascent, unaided and within a reasonable time frame. This is important individually and in team tactics.
• Candidates must also be able to complete and pass partial powers training and examination within 3 months of start date
• These roles are required to work an on-call rota (on average 1 in every 4 weeks, although this will decrease as our numbers increase). This on-call pattern is for a period of 7 days, commencing and concluding at 08.00 hours on a Monday morning – with a compensation of approx. £180 per week on-call (overtime once deployed is paid in addition). Please note – the on-call system is currently under review and may be subject to future change.

Responsibilities
Key Responsibilities – Cyber Role (Warrington and Tamworth)

• Ensure the integrity and continuity of exhibits by correct handling, storage and documentation
• Conduct laboratory based forensic acquisitions of digital media in order to obtain optimum intelligence/evidence, in line with relevant legislation and accreditation standards
• Conduct scene based collection of digital evidence
• Engage with third parties to identify digital evidential sources and subsequent preservation and collection
• Collection and analysis of volatile memory
• Provide specialist advice and guidance on a range of digital investigation opportunities
• Demonstrate and maintain a portfolio of technical competencies
• Work to Quality Management standards in order to achieve and maintain appropriate regulated standards
• Provide support to core investigative functions including disclosure, exhibit handling/management, presentation of written and oral evidence.
• Ensure the quality, secure handling and dissemination of intelligence and evidential material; maintaining confidentiality, sensitivity and duty of care
• Support the Technical Managers with compliance to accredited and regulated activities and requirements

Key Responsibilities – Digital Forensic Scene (Crawley, Gatwick, Kingston Upon Thames and Fareham)

• Conduct scene based forensic acquisition of items in order to obtain optimum intelligence/evidence recovery
• Work to ISO 17020 standards for scene based forensics
• Ensure the integrity and continuity of items by correct handling, storage and documentation
• Provide specialist advice and guidance on a range of digital investigation related opportunities
• Provide support to core investigative functions including disclosure, exhibit handling/management, presentation of written and oral evidence
• Triage and acquisition of a variety of digital media in an array of scene locations
• Ensure the quality, secure handling and dissemination of intelligence and evidential material, maintaining confidentiality, sensitivity and duty of care
• Conduct case management, and create, maintain and update departmental records, including operational or programme activity spreadsheets, case files and monthly reports.
• Build and maintain good working relationships with both internal and external partners.
• Work to Quality Management principals in order to achieve and maintain appropriate regulated standards.

Key Responsibilities – Digital Forensics Laboratory (Kingston Upon Thames and Warrington)

• Ensure the integrity and continuity of exhibits by correct handling, storage and documentation
• Conduct laboratory based forensic acquisitions of digital media in order to obtain optimum intelligence/evidence, in line with relevant legislation and accreditation standards
• Process digital media in preparation of investigative review
• Provide specialist advice and guidance on a range of digital investigation opportunities
• Examine digital media for intelligence gathering and evidential reporting
• Witness statement and evidential report writing as a result of forensic acquisition and examination
• Demonstrate and maintain a portfolio of technical competencies
• Conduct case management, including operational or programme activity spreadsheets, case files and monthly reports
• Work to Quality Management standards in order to achieve and maintain appropriate regulated standards
• Provide support to core investigative functions including disclosure, exhibit handling/management, presentation of written and oral evidence.
• Ensure the quality, secure handling and dissemination of intelligence and evidential material; maintaining confidentiality, sensitivity and duty of care
• Support the Technical Manager in compliance to accredited and regulated activities and requirements

***All NCA officers must hold SC Enhanced upon entry as a minimum. To meet the National Security Vetting requirements for this role you will need to have resided in the UK for a minimum of 3 out of the past 5 years. For more information please see the Candidate information Pack***
Licences
• Full driving licence valid for driving in the UK for duration of time in role (check DVLA website for guidance)
Qualifications
The following qualifications/skills are essential to the role and proof will be required at interview:

• Foundation digital forensics certification/computer forensics degree or relevant digital forensics work experience.
• ISO 17020/17025 awareness.

Please ensure the dates of any accreditations you are relying on, are entered on to the CV.

Should you progress to the assessment stage of the process, you will be required to provide a copy of the original certificate.

Failure to provide evidence at interview may result in your application not progressing to the next stage.
Behaviours
We’ll assess you against these behaviours during the selection process:

Making Effective Decisions
Delivering at Pace
Technical skills
We’ll assess you against these technical skills during the selection process:

Experienced in digital forensic working practices, including the ability to use digital forensic hardware and software competently.
A good understanding of disclosure and exhibit handling procedures
Understanding of relevant standards in relation to the Forensic Science Regulators Code of Practice and Conduct and experience of working in an accredited environment, supporting customer requirements
Experienced in obtaining volatile digital evidence and the ability to disassemble and assemble digital devices (such as computers, laptops and mobile devices).
Benefits
If you are an active police pension member immediately prior to joining the NCA, you can continue your membership throughout your employment with us as if you were a serving police officer. If you do remain an active member and subsequently return to a police force, you should be able to continue your membership there too.

All officers in the NCA are members of the UK Civil Service. You will be eligible for:
• Civil Service pension scheme
• 26 days annual leave rising to 31 on completion of 5 years continuous service
• Training and development opportunities
• Cycle2work scheme

We take the welfare of NCA officers very seriously. All staff have access to Occupational Health services and there are a number of staff representative groups. We also have a range of sporting and other activities on offer.

We can provide flexible working arrangements if the role in question is suitable. These include flexi-time, job sharing and compressed hours (working contracted hours over a shorter period).

To apply for this job please visit www.civilservicejobs.service.gov.uk.


You can apply to this job and others using your online resume. Click the link below to submit your online resume and email your application to this employer.

  • Senior Officer – Digital Forensics

    Tamworth, Warrington

    National Crime Agency

    • Full Time
  • Security Engineer

    Auckland Region, New Zealand

    Health Alliance

    • Full Time