JOB SUMMARY
The Digital Forensic Examiner in the Office of Inspector General (OIG) is responsible for assisting special agents with investigations related to computer crime through the forensic collection, recovery, processing, preservation, analysis, storage, maintenance, and/or presentation of digital evidence. The role involves using sophisticated IT systems and tools for data mining and statistical analyses. The incumbent conducts, coordinates, and guides the development and application of advanced computer and statistical techniques and assists in providing the Information System needs of OIG. The Digital Forensic Examiner assists with the analysis of all cyber-related crimes and will also participate in meetings with WMATA Chief Information Security Officer (CISO), cybersecurity task forces, and other stakeholders within the cyber investigative community. The incumbent works under the supervision of the Manager, Cyber and Forensic Operations.
JOB DUTIES
Principal Job Duties
•Assists in conducting data mining and statistical analyses, particularly related to complaints and/or allegations of fraud, waste, and abuse. Performs computer forensics, such as imaging of computers and forensic analysis. Helps extract emails and conducts mobile device forensic analysis in support of investigations.
•Evaluates the validity, accuracy, and reliability of a broad array of electronic data and information for translation into business intelligence relevant to the work of OIG.
•Provides technical assistance to OIG teams conducting complex IT investigations and reviews to enhance knowledge of all WMATA IT systems.
•Conducts assessments of complex IT issues in a dynamic environment where the scope of efforts may involve risk-based approach to assessing IT controls, policies, practices, and degree(s) of vulnerability.
•Supports cybersecurity investigations and reviews by collaborating in the effort to establish incident reporting for WMATA IT leadership.
•Ensures appropriate security measures and firewalls are in place and maintains the OIG case management systems for investigations, audits and special projects.
•Works in conjunction with OIG staff and helps to ensure that information technology systems functions are executed effectively and efficiently.
•Evaluates to ensure investigations and reviews of IT systems adequately exhibits the effectiveness of technical controls, are in accordance with established criteria and are in conformity with industry best practices.
Other Duties
•Maintains and promotes awareness and accountability with safety policies and procedures while performing job functions. Promotes a positive safety culture and encourages reporting of safety concerns consistent with our Agency Safety Plan, other regulatory requirements within the Safety Management System and just culture principles.
*The functions listed are not intended to limit specific duties and responsibilities of any particular position. Nor is it intended to limit in any way the right of managers and supervisors to assign, direct and control the work of employees under their supervision.*
QUALIFICATIONS
Minimum Education
•Bachelor’s degree Computer Science, Information Technology, Digital Forensics, or related field
Minimum Experience
•A minimum of (3) years’ experience in information technology and investigations. Demonstrated knowledge in computer hardware and software to include multiple forensics software and hardware components
EVALUATION CRITERIA
Consideration will be given to applicants whose resumes demonstrate the required education and experience. Applicants should include all relevant education and work experience.
Evaluation criteria may include one or more of the following:
•Skills and/or behavioral assessment
•Personal interview
•Verification of education and experience (including certifications and licenses)
•Criminal Background Check (a criminal conviction is not an automatic bar to employment)
•Review of a current motor vehicle report
MISSION ESSENTIAL DESIGNATION:
In accordance with the Washington Metropolitan Area Transit Authority’s Continuity of Operations Plan (COOP) this job has been identified as critical to mission essential functions. Incumbents in this role may be required to report to or continue to work in the event of authorized office closings or service suspensions due to severe weather, natural disaster, fire, operational emergencies or related events.
Closing
WMATA is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other status protected by applicable federal law.
This posting is an announcement of a vacant position under recruitment. It is not intended to replace the official job description. Job descriptions are available upon confirmation of an interview.
