Investigations Specialist - Des Moines, United States - Department Of Transportation

Description

Summary

This position is located within the Office of Security and Hazardous Materials Safety (ASH) and may be assigned to a geographical location under the purview of the Office of Investigations. The mission of ASH is to ensure aviation safety, support national security, and promote an efficient airspace system through the development and administration of policies and programs.

Duties

Primary responsibility is to serve as a Investigations Specialist (Digital Forensics) for AXI in the Technical Investigations Division, Cyber Investigations Branch, performing a mixture of routine, multiple, and varying assignments related to cyber investigations under the limited direction of a manager or more experienced technical specialist. He/she applies experience and detailed technical knowledge of digital forensics and cyber investigations to accomplish routine tasks and assignments, and regularly conducts digital media analysis providing assistance to Federal, state, local, tribal, and territorial law enforcement agencies.

Typical duties include but are not limited to:

Supports internal investigations within the Federal Aviation Administration (FAA) by planning and performing digital forensic examinations of digital, electronic, and mobile device data from a variety of sources with the goal of developing forensically sound evidence.

Coordinates with managers and other investigators on digital forensics issues to identify methods and procedures for recovery, preservation, and presentation of digital evidence; provide consultation throughout investigations on matters relating to digital evidence or digital investigative analysis.

Conducts digital forensics examinations, creates and reviews digital/computer forensics analysis reports, and documents procedures and policies in support of ASH, the Office of Investigations, FAA Cyber, Insider Threat Detection Mitigation Program (ITDMP), Defensive Counterintelligence Program (DCIP), and other LOB/SO.

Applies sound digital forensic solutions to assignments and investigative tasks related to cyber investigations to include host based forensics, network based forensics, mobile forensics, and other investigative analysis.

Incorporates various forensics techniques to analyze memory, network, mobile, and host based artifacts.

Researches and applies additional data sources and techniques to augment the effectiveness of the cyber investigations program.

Demonstrates some independence in planning time and using assigned resources to accomplish assignments and small projects. Established policies/procedures provide guidance for most assignments, but allows some discretion to select the most appropriate approach.

Work is reviewed periodically during assignments and at completion to ensure timeliness and technical compliance with the requirements of the project or other work activity. Frequently refers difficult problems and work issues to a manager or more experienced technical specialist when guidelines are not available or applicable.

Responsibilities at the I-band

The incumbent will perform multiple, varying, and complex assignments as an Investigations Specialist (Digital Forensics) for AXI within the Technical Investigations Division. Applies experience and advanced technical knowledge of Information Technology (IT) from enterprise resources while independently performs tasks and assignments related to Cyber investigations to include host based forensics, network based forensics, mobile forensics, memory forensics, and other investigative analysis.

Typical duties include, but are not limited to:

Established policies/procedures provide guidance for most assignments, but allow considerable discretion to select the most appropriate approach or to recommend new approaches. Assignments typically require solutions that are to be derived by interpreting and extrapolating from situations that were faced in the past. Provides recommendations to improve work processes.

Resolves most problems independently, but consults with the Manager when existing guidelines are not available or applicable to unusual or complex situations. Supports the implementation of the Cyber Investigations Program and execution of all Cyber Investigations policies.

Performs other duties as assigned.