Digital Forensics Lab - Digital Forensic Analyst

The Role
 

Provide digital forensic investigation services on a wide variety of data sources / digital devices, such as personal computers, digital storage devices, mobile phones, corporate computer networks and cloud hosted content. Produce reports containing fact or expert opinion and interpretation of material of relevance in a format acceptable for use at court / client purposes. Responsible for all levels of digital investigations including complex digital investigations.
 

Responsibilities:

• Provide expert advice and guidance to clients and related contacts such as CPS, Court, partner agencies, and internally within CACI, in relation to best practice and procedures for investigating digital devices in accordance with the UK law, international standards, legislation and published formal guidance. 
• Utilise forensic hardware and software to perform digital forensic acquisition, processing and examination of devices/data within a laboratory environment and at scene/client locations, in compliance with procedures and policies. Produce findings in high quality forensic reports / statements while conducting quality control checks on other investigators work to ensure compliance and that quality products are produced for clients.
• Act as the lead digital forensic investigator responsible for fulfilling service requirements while mentoring others within the laboratory and deliver training inputs to ensure the highest knowledge and standards for all staff and our clients.
• Conduct grading of various types of illegal media, including CSAM, while liaising with the client Victim ID leads to maximise opportunities for Victim Identification from CSE investigations and employ proactive steps and processes to identify Victims of CSE during digital investigations you conduct.
• Ensure compliance with organisational and departmental security and quality management systems.  Working in compliance with ISO/IEC 27001, ISO/IEC 17043, ISO/IEC 17025, FSR Codes of Practice and Conduct and ILAC G19.  Deputise Technical or Quality Management roles and provide cover during periods of absence.
• Comply with CACI confidentiality, information security and expected conduct policies.
• Perform/assist with activities relating to the upkeep of the laboratory’s technical infrastructure, data protection and information security activities. Represent the company at CPS / Client Case Conferences, liaise with Prosecution and Defence legal teams, Defence Experts, and members of Judiciary. Attend court proceedings when required in the capacity of the Digital Forensic Analyst and Digital Forensic subject matter specialist witness to explain evidence produced and the investigation processes utilised in order to confirm the validity of the evidence found.
• Actively contribute to the continual improvement of the QMS, assisting with quality and technical compliance activity, such as procedure/policy update, test device creation, validation activity, audit, corrective and preventative actions, risk and opportunity, peer review and quality control to ensure the accuracy of results produced by the Laboratory.
• Actively perform environmental horizon scanning, research and development into digital forensic methods, tools, risks and opportunities. Attend conferences and training to ensure that we are class leaders in digital forensics services and emerging issues.
• Provide assistance and support to the sales teams in supporting any pre-sales and post-sales activity in relation to any digital forensic opportunities that they may present. This could include supporting on bid responses, attendance at client meetings and providing technical assistance as and when required.  

Qualifications:

• Educated to Degree level in a Digital Forensic based discipline and/or significant experience of working within a Digital Forensic environment and having completed significant training in these areas.
• Advanced knowledge and experience of common operating systems, file systems (Android, iOS, Windows, MacOS & Linux), applications and networking technologies
• Experience of managing and conducting large and complex digital investigations, using a range of forensic hardware and software tools, applications and techniques.
• Has experience in preparing complex digital examination reports and is able to present digital evidence in a clear and professional manner within Court proceedings.
• Knowledge and understanding of the definitions of Abusive Imagery categorisation (Sentencing Council Definitive Guidelines), Victim ID processes, and the CAID system.
• Knowledge and understanding of established principles and best practices, Forensic Science Regulators Codes of Practice and Conduct, BS EN ISO/IEC17025:2017, ILAC G19 and other related guidance documents applicable to Digital Forensics, as well as relevant criminal laws, judicial processes and legislations.
• Full current UK / European driving license. Willingness and ability to travel for business purposes.
• Willingness to participate in an out-of-hours call-out rota, and ability and willingness to work flexibly where required to meet departmental and organisational need and demand
• Has directly contributed to the successful conviction of offenders through the investigation of Online CSE sharing of child sexual abuse material and a variety of other offence types.
• Ability to multitask and manage several projects at any given time.

Role Demands:

• Applicants should be aware that this role may involve the regular viewing of images containing the sexual abuse of children and other images of an extremely offensive and distressing nature.
• The post holder must be willing to undergo regular Psychological Assessments.
• Normal demands associated within an office environment; ability to work on computer for long periods and communicate with individuals by phone, email and face to face.
• Ability to cope working under pressure and time constraints in this uniquely challenging environment.
• Agility and coordination in handling equipment and evidence as required. May be required to lift a variety of computer items and sit/stand for extended periods of time.