Senior Officer – Digital Forensics

National Crime Agency

Summary
The Intelligence Directorate works collaboratively with the NCA Investigations Directorate and partners to deliver a unified crime fighting response.

Serious and organised crime (SOC) is one of the recognised national security threats, estimated at costing the UK economy over £37 billion every year.
In the Intelligence Directorate we collect, record and enhance intelligence to build a picture of that SOC, sharing this with partners in the UK and abroad. Then, through the exploitation of intelligence, we flex law enforcement’s collective resources against these dynamic threats. We are continuously looking for new opportunities to enhance traditional capabilities to increase the quantity and quality of available intelligence and maximise its potential for exploitation.
You will manage and co-ordinate multifunctional forensic capabilities and staff, providing advice and support to all types of investigations, including cyber enabled and dependant crime investigations in the case of the cyber role. As an integral decision maker between operational forensic activity, our partners and customers, you will demonstrate a robust attitude to forensic activity, evidencing value for money balanced against delivering bespoke forensic strategies.

We are seeking candidates who are experienced in acquiring and examining an array of digital evidence, and an ability to preserve and secure digital evidence at crime scenes and witness premises alike.

We are advertising for five different Digital Forensic roles at G4 Senior Officer level, each of which has differing requirements and criteria.
Job description
To be successful in these roles, you will be able to demonstrate a good working knowledge of digital forensics processes and procedures within the laboratory or scene.

You will manage and co-ordinate multifunctional forensic capabilities and staff, providing advice and support to all types of investigations, including cyber enabled and dependant crime investigations in the case of the cyber role. As an integral decision maker between operational forensic activity, our partners and customers, you will demonstrate a robust attitude to forensic activity, evidencing value for money balanced against delivering bespoke forensic strategies.

• The Cyber, Scene and Digital Technical Manager roles will require successful candidates to pass a five day Officer Safety Training Course (OST) during their probationary period or during their first 12 months in the Agency (Civil Service transfers). Failure to do so would mean you are not able to continue in the operational forensic role and we would seek to find you an alternative non-operational role within the agency.
• The OST comprises of cognitive input, armed and unarmed defence theory and practical techniques, and as such requires a level of physical exertion due to the nature of the repetitive drills. The practical techniques include use of body weapons, movement and positioning, strikes (armed/unarmed), blocks, restraint and control. We will expect officers attending the course to have a standard of physical fitness. Progressive full body warm ups are conducted each day to minimise risk of injury to the officer. It is expected the officers is capable of ground descent and ascent, unaided and within a reasonable time frame. This is important individually and in team tactics.

• Applicants for the Cyber, Scene and Technical Manager roles must also be able to complete and pass partial powers training and examination within 3 months of start date

• The Cyber and Scene roles are also required to work an on-call rota (on average 1 in every 4 weeks, although this will decrease as our numbers increase). This on-call pattern is for a period of 7 days, commencing and concluding at 08.00 hours on a Monday morning – with a compensation of approx. £180 per week on-call (overtime once deployed is paid in addition). Please note – the on-call system is currently under review and may be subject to future change.

Responsibilities
Key Responsibilities – Cyber (Tamworth)
• Supervising a team of cyber digital forensics officers
• Deputising for the laboratory manager
• Co-ordinate and complete digital forensic response to cyber incidents, ensuring evidential recovery and providing incident response guidance
• Ensure self and team competency levels, and progress the learning and development framework.
• Manage and co-ordinate operations and service delivery processes through the assessment and triage of forensic submissions
• Risk management of submission assessment for digital forensic support
• Tactical support to internal and external partners
• Conduct laboratory based forensic acquisitions of digital media in order to obtain optimum intelligence/evidence, in line with relevant legislation and accreditation standards
• Examine digital media for intelligence gathering and evidential reporting
• Demonstrate and maintain a portfolio of technical competencies
• Work to Quality Management standards in order to achieve and maintain appropriate regulated standards, supporting the Technical Manager as required
• Provide support to core investigative functions including disclosure, exhibit handling/management, presentation of written and oral evidence.

Key Responsibilities – Digital Scene (Birmingham, Nottingham, Tamworth, Bristol, Exeter, Bridgend, Warrington, Chorley, Kent and Dover)
• Supervising a team of digital forensics scene- based officers
• Manage and co-ordinate operations and service delivery processes through the assessment and triage of forensic submissions
• Co-ordinate digital forensic officer taskings and resourcing requests to attend crime scenes
• Support the pursuit, maintenance and continuous improvement of ISO accreditation and forensic regulation for scene based forensic activity
• Demonstrate and maintain a portfolio of technical competencies
• Co-ordinate/conduct reactive and proactive investigations, gather evidence and intelligence in accordance with legislation, risk management and NCA policy
• Triage and acquisition of digital media in a variety of scene locations
• Participate in tasked operations, projects and investigations, gathering information, intelligence and evidence in order to disrupt and degrade criminal capability
• Develop existing services and technical capabilities
• Provide digital forensic advice to NCA Investigation Teams and develop digital forensic strategies to support operations.

Key Responsibilities – Digital Laboratory (Warrington, Tamworth and Kingston Upon Thames)
• Supervising a team of digital forensics laboratory officers
• Deputising for the laboratory manager
• Manage and co-ordinate operations and service delivery processes through the assessment and triage of forensic submissions
• Risk management and submission assessment for digital forensic support
• Conduct laboratory based forensic acquisitions of digital media in order to obtain optimum intelligence/evidence, in line with relevant legislation and accreditation standards
• Provide specialist advice and guidance on a range of digital investigation opportunities
• Demonstrate and maintain a portfolio of technical competencies
• Participate in tasked operations, projects and investigations, gathering information, intelligence and evidence in order to disrupt and degrade criminal capability.
• Work to Quality Management standards in order to achieve and maintain appropriate regulated standards
• Provide support to core investigative functions including disclosure, exhibit handling/management, presentation of written and oral evidence.
• Ensure the quality, secure handling and dissemination of intelligence and evidential material; maintaining confidentiality, sensitivity and duty of care
• Support the Technical Manager in compliance to accredited and regulated activities and requirements

Key Responsibilities – ISO17020/17025 Technical Manager (Warrington, Bristol, Kingston Upon Thames or Tamworth)

• Development and maintenance of ISO17025 and ISO17020 policy and procedures to ensure they are fit for purpose;
• Completion of internal audits against lab and scene-based DF working practices;
• Root cause analysis and problem resolution when scientific/technical issues arise;
• Development and maintenance of validation, verification and test/calibration processes for DF hardware, software and examination methods;
• Work on the team that maintains and continues to design and improve the security of the NCA’s digital forensics network.
• Identification and co-ordination of DF participation in Proficiency Testing and Inter-laboratory Testing; and Monitor, configure and manage network designs
• Provide technical expertise and guidance to the Quality Management team in relation to all aspects of DF activity.

***All NCA officers must hold SC Enhanced upon entry as a minimum. To meet the National Security Vetting requirements for this role you will need to have resided in the UK for a minimum of 3 out of the past 5 years. For more information please see the Candidate information Pack***
Licences
-Full driving licence valid for driving in the UK for duration of time in role (check DVLA website for guidance)
Qualifications
The following qualifications/skills are essential to the role and proof will be required at interview:

• Intermediate/Advanced computer and mobile device forensic training
• Intermediate/Advanced level computer forensics training, or a minimum of four years experience in the field

Please ensure the dates of any accreditations you are relying on, are entered on to the CV.

Should you progress to the assessment stage of the process, you will be required to provide a copy of the original certificate.

Failure to provide evidence at interview may result in your application not progressing to the next stage.
Behaviours
We’ll assess you against these behaviours during the selection process:

Making Effective Decisions
Delivering at Pace
Technical skills
We’ll assess you against these technical skills during the selection process:

Proven knowledge of relevant standards in relation to the Forensic Science Regulators Code of Practice and Conduct and experience of working in an accredited environment (ISO17020/17025), supporting customer requirements
Experience in leading and managing a technical team to deliver against strict deadlines
A proven knowledge of key legislation affecting the ability to obtain digital evidence and intelligence from a range of sources and environments
Experience in collection and analysis of evidence from digital devices either laboratory based and/or at crime scenes, and working with forensic intelligence
Benefits
If you are an active police pension member immediately prior to joining the NCA, you can continue your membership throughout your employment with us as if you were a serving police officer. If you do remain an active member and subsequently return to a police force, you should be able to continue your membership there too.

All officers in the NCA are members of the UK Civil Service. You will be eligible for:
• Civil Service pension scheme
• 26 days annual leave rising to 31 on completion of 5 years continuous service
• Training and development opportunities
• Cycle2work scheme

We take the welfare of NCA officers very seriously. All staff have access to Occupational Health services and there are a number of staff representative groups. We also have a range of sporting and other activities on offer.

We can provide flexible working arrangements if the role in question is suitable. These include flexi-time, job sharing and compressed hours (working contracted hours over a shorter period).

  • Officer – Digital Forensics

    Bristol, Crawley, Fareham, Kingston-upon-Thames, Tamworth, Warrington

    National Crime Agency

    • Full Time
  • March 8, 2021