Digital Forensic Examiner

Serious Fraud Office

Please note that this role is being advertised concurrently with the Band C Senior Digital Forensic Examiner. If you are interested in applying to both of these roles, you will need to submit a separate online application for each one. You cannot be considered for or offered the role of Senior Digital Forensic Examiner if you have only applied for this role

The SFO supports the UK’s prosperity and global market position by promoting stable business conditions through investigating and prosecuting serious and complex fraud, bribery and corruption and money laundering. Our mission is to reduce the harm caused by high level economic crime, and preserve and enhance the reputation of the UK as a safe place to do business. We do that by taking on a selected number of large complex cases for investigation and, where appropriate, prosecution or judicially supervised disposal. We also pursue criminals for recovery of unlawful financial gains. We are unique in that we both investigate and prosecute offenders and have special legal powers to enable us to do this.
Job description
The Digital Forensic Unit (DFU) is responsible for the processing and analysis of all digital evidence seized by or provided to the Serious Fraud Office. This includes the collection of evidence on site, forensic extraction of any items seized or received, and the processing of these items into a medium that Case Teams can access through the SFO eDiscovery Systems. The DFU works closely with the Case Teams to ensure that required material is delivered in a timely and appropriate manner.

Digital Forensic Examiners are required to be subject matter experts on a range of digital forensic matters and processes in order to process, analyse and report on Digital Forensic casework and to give guidance to non-technical staff in order that digital material can be obtained and reviewed effectively.

The post holder will have responsibility for the management and delivery of day to day tasks undertaken by technicians on a variety of digital media and systems, providing clear and concise details of progress and findings. They will be required to provide reports and updates to the Head of Unit in a timely manner, including presenting findings, developments and recommendations regarding digital material. They will manage, train and oversee Digital Forensic Technicians and contribute to the development of capabilities within the Unit.

• Conduct digital forensic examinations within the confines of ISO 17025 and the Forensic Science Regulator’s Codes of Practice (or equivalent), ensuring continuing compliance and competence

• Provide appropriate technical advice and guidance on Digital Forensic matters to internal and external stakeholders

• Lead, support and guide Digital Forensic Investigators and Analysts with technological/Digital Forensic/eDiscovery issues by sharing knowledge to help build capability and work in collaboration to resolve issues.

• Manage workflows to ensure that all digital material is processed in a cost effective and timely manner. Monitoring resources and making recommendations towards the tasking of Band E team members.

• Provide regular reports and updates to the Head of Unit and internal stakeholders, including presenting findings, developments and recommendations regarding digital material

• Ensuring systems are in place and work practices follow approved standards (ISO 17025 and the FSR Code of Conduct) through regular Quality Assurance checks and adhering to (and developing) the SFO DFU Quality
Management System.

• Liaise with Case Teams on Digital Forensic related matters to provide creative, compliant solutions to technical issues and ensure these are in line with case deadlines and processing timescales.

• Line manage Digital Forensic Technicians to monitor performance and development needs against agreed objectives and address performance issues where necessary.

• Assist the Head of DFU to undertake the strategic planning, review and co-ordination of DFU Examiner Training and ensure that all staff are provided with development opportunities according to their needs.

• Act as support on search operations to assist in the seizure and acquisition of digital devices, ensuring the evidential integrity of the data is maintained. Providing advice and guidance to SFO search teams.

• Contribute to specialised projects to advance DFU processes by improving solutions and identifying the need to develop DFU standard operating procedures.

• Provide witness statements and attend Court to give evidence in relation to digital forensic work undertaken.

• Contribute to office-wide initiatives such as policy development, training and other work that supports the strategic development of the SFO
We’ll assess you against these behaviours during the selection process:

Communicating and Influencing
Managing a Quality Service
Making Effective Decisions
Working Together
Delivering at Pace
Changing and Improving
We only ask for evidence of these behaviours on your application form:

Communicating and Influencing
Managing a Quality Service
Option to join the Civil Service pension scheme. For further details, click here

Generous annual leave provision of 25 days which increases to 30 days after five years’ service plus an additional day in recognition of the Queen’s Birthday and the option to buy or sell up to five days’ leave per year. Different terms may apply if you are already a Civil Servant.

Discretionary performance-related bonus scheme.

Interest-free season travel ticket, bicycle loan and cycle to work scheme.

Access to the Rental Deposit Salary Advance Scheme which assists employees in meeting the costs of deposits for privately rented homes.

Opportunities for learning and development.

Flexible working arrangements and family-friendly policies.

Voucher for eyecare and discounted spectacles.

Access to a range of discounts through membership of the Civil Service Sports and Social Club, CSSC Sports and Leisure.

Maternity and paternity leave provision over and above the statutory entitlements.

Access to My CPS Rewards Gateway. My CPS Rewards offers staff a range of rewards and savings including:

• Discounts with high street retailers
• Savings on grocery shopping at a range of supermarkets
• Special salary sacrifice and recognition schemes
• Reloadable gift cards and e-cards
• Instant vouchers

Any move to the Serious Fraud Office from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at
Things you need to know
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check.

See our vetting charter.
People working with government assets must complete basic personnel security standard checks.
Selection process details
This vacancy is using Success Profiles, and will assess your Behaviours and Experience.
As part of the application process you will be required to provide:

• A name blind CV outlining details of job history and qualifications

• A personal statement of no more than 750 words that explains how your skills and experience meet each of the essential experiences as listed on the job description. Please do not exceed 750 words.

• A 250 word example per each behaviour of how you meet the behaviours Communicating & Influencing and Managing a Quality Service for the role at the required level.

The behaviour Communicating & Influencing is a lead behaviour; this behaviour will be assessed first and candidates who do not meet the required standard will not have the remainder of their application considered.

It will not be possible to provide feedback to applicants who are unsuccessful at the application stage.

The interview stage

If you are shortlisted, you will be invited to an interview to explore the following behaviours, essential & desirable experience and technical experiences in more depth.


• Making Effective Decisions
• Working Together
• Delivering at Pace
• Changing and Improving

Essential Experience:

• Experience of forensic acquisition and processing in a specific area of digital forensics (e.g. Computer, Mobile, Network, Business Systems, Cloud Forensics) and delivering data to customers
• Strong knowledge of digital media, operating systems, storage and devices
• Knowledge of ISO17025 standards and ACPO(NPCC) Guidelines and the importance of them to digital forensics
• Experience of liaising with and preparing written reports or summaries for presentation to senior stakeholders

Desirable Experience:

• Knowledge/Experience of contributing to new policies and procedures into a digital forensic environment.
• Experience of working in a Law Enforcement or Criminal Justice environment.
• Experience of managing and developing other members of staff.

Technical Experience:

• Computer and Digital Forensics degree AND/OR more than 1 years’ experience as a Digital Forensic Investigator/Examiner
• Certification (previous/current) AND/OR equivalent experience of using one or more of the following forensic tools: EnCase (EnCE certification), Nuix (NICS), Cellebrite Certification (CCLO or CCPA), XRY, FTK, or similar

Full details of the interview process will be made available to shortlisted candidates in the invite to interview.

Sift to take place from 4th May 2021

Interviews are expected to take place w/c 24th May 2021

All dates are indicative and subject to change.

Feedback will only be provided if you attend an interview.

Feedback will only be provided if you attend an interview or assessment.
Nationality requirements
This job is broadly open to the following groups:

UK nationals
nationals of Commonwealth countries who have the right to work in the UK
nationals of the Republic of Ireland
nationals from the EU, EEA or Switzerland with (or eligible for) status under the European Union Settlement Scheme (EUSS)
relevant EU, EEA, Swiss or Turkish nationals working in the Civil Service
relevant EU, EEA, Swiss or Turkish nationals who have built up the right to work in the Civil Service
certain family members of the relevant EU, EEA, Swiss or Turkish nationals
Further information on nationality requirements
Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission’s recruitment principles.
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
Apply and further information
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Further information
For external competitions there is no appeal against the selection decision. However, individuals have a right to appeal if they feel that the principle of appointment on merit through fair and open competition and the Civil Service Commissioners’ recruitment principles have not been met. Individuals who want to appeal should do this by setting out their grounds for appeal in an email for the attention of Head of HR Operations to If, after an internal appeal, you still believe that the Civil Service Commissioners’ Principles have not been met, then you can contact the Commission directly: Complaints should be sent in writing to: Civil Service Commission, Room G08 ,1 Horse Guards Road, London SW1A 2HQ. Email

To apply for this job please visit

You can apply to this job and others using your online resume. Click the link below to submit your online resume and email your application to this employer.