Senior Criminal Forensic Investigative Analyst

Website WMATA OIG

WMATA OIG

Job Description

Minimum Qualifications

Education

Bachelor’s degree in Computer Science, Information Technology, Digital Forensics, or related field
Experience

A minimum of seven (7) years’ experience in Information technology and investigations
Demonstrate proficiency in computer hardware and software including multiple forensics software and hardware components
Demonstrate knowledge of basic cybersecurity terminology, experience working in a cyber environment
Certification/Licensure

Technical certification/license in one or more of the following: EnCE, SANS, GCIH/GCFA, FLETC DEASTP/SCERS, IACIS, CFCE, ISFCE, FBI DEXT/CART, Certified E-discovery specialist
Certified Information Systems Security Professional (CISSP)
Preferred

Professional certifications preferred in digital forensics discipline, digital forensics software, or IT networks
Familiarity with passenger rail operations and/or transportation operations
Medical Group

Satisfactorily complete the medical examination for this position, if required.  The incumbent must be able to perform the essential functions of this position either with or without reasonable accommodations.

Job Summary

The Senior Criminal Forensic Investigative Analyst will serve as the cybersecurity specialist, knowledgeable of and works with various cyber standards to include, but not limited to, the National Institute of Standards and Technology (NIST). This position will also serve as an expert in computer forensic investigations, e-discovery and is one of the principle IT advisors to OIG. This position has responsibility for managing the collection, review, interpretation, evaluation, and integration of large volumes of data from multiple sources, uses sophisticated IT systems and tools for data mining and statistical analyses. Conducts, coordinates, and guides the development and application of advanced computer and statistical techniques. The employee also supervises and coordinates the information system needs of the OIG.  The incumbent will serve as the OIG’s point of contact on all cyber related crimes and will also coordinate meetings with WMATA Chief Information Security Officer, (CISO), Cybersecurity taskforces and other stakeholders within the cyber investigative community. The employee works independently under general guidelines and supervision of the Deputy Inspector General for Investigations and Special Projects.

Essential Functions

Conducts data mining and statistical analyses, particularly related to complaints and/or allegations of fraud, waste, and abuse. Performs computer forensics, such as imaging of computers and forensic analysis.  Extracts emails and conducts mobile device forensic analysis in support of investigations.  Oversees the work of subordinate analysts conducting data mining and other computer related analyses and data matching activities.
Evaluates the validity, accuracy, and reliability of a broad array of electronic data and information for translation into business intelligence relevant to the work of the OIG.
Provides technical assistance to OIG teams conducting complex information technology investigations and reviews.
Provides assessments of complex IT issues in a dynamic environment where the scope of efforts may involve risk-based approach to assessing IT controls, policies, practices, and degree(s) of vulnerability.
Plays an integral part in cybersecurity investigations and reviews.  Works closely to establish incident reporting coordination with WMATA IT leadership.
Establishes and maintains procedures related to the Authority’s network interface with the OIG servers. Ensures appropriate security measures and firewalls are in place and maintains the OIG case management systems for investigations, audits and special projects.
Works in conjunction with OIG staff and makes certain that information systems functions are executed effectively and efficiently.
Ensures investigations and reviews of IT systems adequately assess the effectiveness of technical controls, are in accordance with established criteria and are in conformity with industry best practices.
Gains an understanding of all WMATA IT systems and becomes a subject matter expert in this area.
The essential duties listed are not intended to limit specific duties and responsibilities of any particular position. Nor is it intended to limit in any way the right of managers and supervisors to assign, direct and control the work of employees under their supervision.

Evaluation Criteria

Consideration will be given to applicants whose resumes demonstrate the required education and experience. Applicants should include all relevant education and work experience.

Evaluation criteria may include one or more of the following:

Skills and/or behavioral assessment
Personal interview
Verification of education and experience (including certifications and licenses)
Criminal Background Check (a criminal conviction is not an automatic bar to employment)
Medical examination including a drug and alcohol screening (for safety sensitive positions)
Review of a current motor vehicle report
Closing

WMATA is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other status protected by applicable federal law.

This posting is an announcement of a vacant position under recruitment.  It is not intended to replace the official job description.  Job descriptions are available upon confirmation of an interview

To apply for this job please visit careers.wmata.com.