computer forensics investigator

State of Alaska

JOB
 This recruitment is exempt from the Hiring Freeze (Administrative Order 358).This recruitment is open to Alaska Residents only. Applicants must meet Alaska Residency Requirements to be considered for employment at this time.What You Will Be DoingThe MFCU investigator conducts high level, complex investigations of medical professional service providers who are suspected or known to have committed Medicaid fraud, patient abuse and/or misappropriation of recipient assets. The investigator is expected to develop and manage all investigative aspects of complex cases involving Medicaid fraud and any other white-collar crime that may be associated with the case. These complex cases can be difficult to prove and are generally document-intensive and often extremely voluminous in nature and typically involve multiple suspects, surveillance and consultation with subject matter experts.Mission and CultureThe Medicaid Fraud Control Unit (MFCU) is a federally mandated and funded investigative and prosecutorial unit consisting of attorneys, criminal investigators, a forensic accountant, a paralegal, and a law office assistant. The mission of the unit is to investigate and criminally or civilly prosecute fraud by healthcare providers, health care facilities, pharmaceutical manufacturers, pharmacies and other healthcare related provider types that illegally divert Medicaid funds. The MFCU is responsible for investigating and prosecuting abuse, neglect or financial exploitation of patients in any licensed facility and abuse, neglect and financial exploitation of any Medicaid Recipient by their caregiver. The MFCU investigator is expected to work closely with the unit’s staff along with both state and federal investigators from various agencies. The investigator must be able to adapt to a wide variety of investigative scenarios, demonstrate good judgment, be a critical thinker, highly self-motivated, flexible and be both a team player and an independent worker with minimum supervision and direction.Benefits of Joining Our TeamThere is constantly a variety of activities happening each day within the office. Along with your own caseload, you will be working with other MFCU investigators and staff on various other case projects and operations. You will participate and have a close-up view of case progression from the complaint intake to it’s adjudication or resolution.As a member of the MFCU you will gain self-satisfaction in knowing that you are part of a unit whose mission is to serve the public by enforcing and upholding healthcare related laws geared towards protecting Alaskans from fraud, waste and abuse by Medicaid providers. Medicaid has a limited funding source and the efforts put forth by the MFCU ensure that less fortunate Alaskans continue to get the health care services they need and deserve.The Working Environment You Can ExpectThe office environment is friendly, fast paced, with cases that are almost always interesting. Although our primary mission is Medicaid Fraud Prosecutions, many of these cases are unique. In fact, most likely you would explore avenues of investigation that you have never done before and will have the opportunity to participate in a type of criminal prosecution that may have never been seen before in Alaska. The Medicaid Fraud Control Unit is in downtown Anchorage near 3rd and K Street. Parking is provided. The downtown location provides a variety of eating options, entertainment, and various seasonal activities, such as Fur Rondy and various street festivals and fairs. The downtown location also provides easy access to parks, walking and biking trails.Who We Are Looking ForCriminal Investigation: Knowledge of the guidelines, regulations, and procedures associated with criminal investigation, including evidence detection and handling and drawing appropriate factual inferences and conclusions. Creative Thinking: Uses imagination to develop new insights into situations and applies innovative solutions to problems; designs new methods where established methods and procedures are inapplicable or are unavailable.Criminal Law: Knowledge of state and Federal criminal laws, including procedures, regulations, guidelines, and precedents related to admissibility of evidence and prosecution
 
EXAMPLE OF DUTIES
 Any combination of education and/or experience that provides the applicant with competencies in Accountability: Holds self and others accountable for measurable high-quality, timely, and cost-effective results. Determines objectives, sets priorities, and delegates work. Accepts responsibility for own actions and decisions. Complies with established control systems and rules. Analytical Thinking/Problem Solving: uses a logical, systematic, sequential approach to address problems or opportunities or manage a situation by drawing on one’s knowledge and experience base and calling on other references and resources as necessary. Integrity/Honesty: Contributes to maintaining the integrity of the organization; displays high standards of ethical conduct and understands the impact of violating these standards on an organization, self, and others; is trustworthy. Investigation: Knowledge of the guidelines, regulations, and procedures associated with investigation, including interviewing, evidence detection, locating, gathering, and handling, and drawing appropriate factual inferences and conclusions. Provide oral or written reports of findings. Presenting evidence and providing testimony. Law: Knowledge of State and federal laws, including legal and court procedures, regulations, guidelines, precedents, admissibility of evidence, case preparation, and/or settlements for applicable areas of law practiced or supported. Equivalent to those typically gained by: Any combination of preparatory post-secondary education and/or progressively responsible investigative work experience performing duties such as locating and gathering information, evidence and/or testimony to be used in civil or criminal proceedings, administrative actions, or governmentally regulated activities which included preparing reports in support of attorneys or agencies engaged in administrative adjudication, and/or detecting and verify suspected fraud, licensing violations, and other violations of state law.Definitions: “Competencies” means a combination of interrelated knowledge, skills, abilities, and behaviors that enable a person to act effectively in a job or situation. “Typically gained by” means the prevalent, usual method of gaining the competencies expected for entry into the job. “Training” and “education” in this guidance are synonyms for the process of acquiring knowledge and skills through instruction. It includes instruction through formal and informal methods (such as classroom, on-line, self-study, and on-the-job), from accredited and unaccredited sources, and long-duration (such as a post-secondary degree) and short-duration (such as a seminar) programs. “Progressively responsible” means indicating growth and/or advancement in complexity, difficulty, or level of responsibility. Special Note: Some positions in this class may require eligibility for commission as a Special Officer with the State of Alaska as a condition of hire. Some positions require applicants pass a background investigation, which includes a criminal record check for conviction of felony or misdemeanor crimes, as a prerequisite to employment. Some positions require incumbents possess an Alaska driver's license and operate a motor vehicle.
 
SUPPLEMENTAL INFORMATION
 For specific information about this position, please contact the hiring manager at the following: Quinten WarrenMedicaid Fraud Chief Investigator(907) 269-6250quiten.warren@alaska.gov

MFCU Investigator PCN 031310

help AG

<div>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist (U.A.E National) who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you. 
Responsibilities:<ul><li>
Lead incident response engagements in unknown environments until all threats are remediated.</li><li>
Develop custom incident response plans tied to specific environments and customer situations.</li><li>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</li><li>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</li><li>
Reverse engineer malicious software and develop signatures and indicators of compromise.</li><li>
Actively develop incident response tools, scripts, and various detection content.</li><li>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</li><li>
Articulate and execute common Incident Response methods (e.g. SANS).</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Work on-site as required with clients during Live Security Incidents.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</li><li>
Create and present customer reports to ensure quality, accuracy and value to the client.</li><li>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</li><li>
Perform other essential duties as assigned.</li></ul> 
Qualifications &amp; Skills:<ul><li>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</li><li>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</li><li>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</li><li>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</li><li>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</li><li>
Should have at least one of the below ACTIVE certifications as a mandatory requirement:</li></ul>
CREST Certified Registered Intrusion Analyst (CRIA) 
GIAC Cloud Forensics Responder (GCFR) 
GIAC Certified Forensic Analyst (GCFA)
CREST Certified Host Intrusion Analyst (CC-HIA) 
CREST Certified Network Intrusion Analyst (CC-NIA)
CREST Certified Incident Manager (CC-IM)
CREST Certified Threat Intelligence Manager (CC-TIM) 
GIAC Reverse Engineering Malware (GREM)<ul><li>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</li><li>
Deep TCP/IP knowledge, networking and security product experience.</li></ul><ul><li>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</li><li>
Rapid development in scripting languages: Python/PowerShell /Bash.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</li><li>
Demonstrable experience in analysing and interpreting system, security and application logs.</li><li>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</li><li>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</li><li>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</li><li>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li></ul>
Benefits:<ul><li> 
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul> 
About Us: 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

Corporate Research and Investigations Limited

<div><div>Since 1990, Corporate Research and Investigation Limited &quot;CRI Group&quot; has safeguarded businesses from fraud and corruption, providing integrity due diligence, employment background screening, third-party risk management and compliance and other professional investigative research services. CRI Group is a global firm with experts and resources located in key regional marketplaces across Asia Pacific, South Asia, the Middle East, North Africa, Europe and North America. The international nature of business today dictates an increasing demand for proactive measures designed to reduce the exposure of organizations to economic crime and civil wrongs, particularly in the financial, government and multinational business sectors. 
 
The Due Diligence Specialist conducts various analyses and investigative research services, including but not limited to public record research. The Investigative Analyst will complete all-source research, gather pertinent data, review intelligence gaps, prepare records and files, and complete associated investigations and reporting requirements. 
 
Job Responsibilities:</div><ul><li>
Gather intelligence information by field observation, confidential information sources, or public records.</li><li>
Establish and maintain professional relationships with government agencies that provide public information.</li><li>
Collect, assimilate, analyze and evaluate extensively the results of research and investigations.</li><li>
Identify red flags in reports such as court cases, politically exposed persons, sanctions list, adverse media, inflated job titles, incorrect employment periods, forged qualifications, etc.</li><li>
Write well-structured, logical and objective reports regarding assessments on the status, legitimacy, general background, and overall reputation of a company and its principals, or subject individuals.</li><li>
Manage multiple due diligence, background screening and insurance claim investigations cases through the completion.</li><li>
Track progress and ensure timely completion of cases.</li><li>
Produce accurate, high-quality written reports.</li><li>
Ensure necessary follow-up actions to external stakeholders.</li><li>
Assist in document management that supports analyses performed.</li><li>
Coordinate with international team members and vendors to complete required scopes of work.</li><li>
Demonstrate excellent judgment and be driven by professional excellence and a commitment to the organization&rsquo;s vision.</li><li>
Must have experience in Financial Crime Investigations, Coporate /field investigations and Forensic Investigations skills</li></ul><div> 

Qualifications and Requirements:</div><ul><li>
Must have a bachelor&rsquo;s degree majoring in Media, Journalism, Law, International Relations/Affairs or other related areas of study.</li><li>
Having at least 1-3 years of relevant experience.</li><li>
Prior work experience in due diligence, research, legal, investigations or risk management field will be preferred.</li><li>
Additional qualifications may be specified and receive preference, depending upon the nature of the position.</li><li>
Must have experience in Finacial Crime Risk Identification- Identify assess and document fraud, bribery or corruption indicators, recognize red flags.</li><li>
Must be willing to participate in the Company&rsquo;s pre-employment screening process, including drug testing and background investigation.</li><li>
Must have experience in Coporate/field Investigations -Manage on ground investigations, interviews, evidence and collections and case reporting.</li><li>
Must have experience in Forensic Investigations Skills - Evidence handling, Digital forensics, chain of custody and audit documentation.</li></ul></div>

Forensic Investigator - Financial Crime Investigations & Due Diligence

Valencia Shelter Services

Scope of Work:A Forensic Interviewer conducts developmentally and age-appropriate interviews of children who are alleged victims of sexual and/or physical abuse or witnesses to violent crimes when requested by law enforcement, child protective services, or the prosecuting attorney. The Forensic Interviewer is a neutral person who is called upon to solicit details of the alleged abuse, or screen children who may be at-risk for abuse, as part of the investigative process. When not assigned as the Forensic Interviewer on a case, the person in this position may assist with coordinating follow-up services for abuse victims and non-offending family members, reviewing notifications of abuse and neglect, scheduling forensic interviews, or providing other support to co-workers and team members as needed. The Forensic Interviewer is also responsible for tracking client statistical data, consulting with members of the multidisciplinary team, participating in monthly case review team meetings, and testifying in court when subpoenaed. Evening and weekend hours may be required occasionally.Qualifications:<ul><li>Associates degree from an accredited university in child development, psychology, social work, or related field.</li></ul><ul><li>Forensic Interview Training/Certification required to be completed in first year.</li></ul><ul><li>Bilingual (English &amp; Spanish) proficiency highly preferred.</li></ul><ul><li>Basic knowledge of child development, memory, recall, trauma, cultural awareness, and linguistics.</li></ul><ul><li>Must relate and communicate well with children of diverse ages, races, and backgrounds, possess a basic knowledge of child protection and legal systems, and have excellent facilitation skills.</li></ul><ul><li>Must be team-focused and work exceptionally well with co-workers and partner agency members.</li></ul><ul><li>The ideal candidate will be detail-oriented with excellent computer skills, passionate about helping children and families overcome abuse, and committed to the mission of the Valencia Shelter Services CAC.</li></ul><ul><li>Must be available to travel out-of-town for training or other work-related purposes and work irregular hours as needed.</li></ul><ul><li>Must be able to complete all required NMCSAP/NMCADV/NMCSVANW/CVRC/CYFD training before assisting survivors</li></ul><ul><li>Maintains good physical and emotional wellbeing.</li></ul><ul><li>Demonstrates personal qualities such as good judgment, responsibility, and an ability to relate effectively with clients and family members.</li></ul><ul><li>Must be able to pass a background check.</li></ul>Primary responsibilities include:<ul><li>Conduct sensitive and thorough recorded forensic interviews with children (or adults with developmental delays or mental challenges) regarding allegations of abuse;</li></ul><ul><li>Foster an environment that is sensitive to a child&rsquo;s cognitive, emotional, and psychological development;</li></ul><ul><li>Ensure information from the interview is entered into secure data tracking system;</li></ul><ul><li>Consult with the multidisciplinary team about child abuse interviews as necessary;</li></ul><ul><li>Testify in court when subpoenaed to clarify information obtained during forensic interviews;</li></ul><ul><li>Participate in the multidisciplinary team case review meetings;</li></ul><ul><li>Assist with training and supervising volunteers;</li></ul><ul><li>Maintain strict confidentiality and cross-cultural awareness in the performance of all duties;</li></ul><ul><li>Attend local, out-of-town, or overnight specialized training and peer review meetings as needed to stay current on best practices and trends;</li></ul><ul><li>Adhere to professional ethics and standards in the performance of all duties at all times;</li></ul><ul><li>Participate in community awareness events and abuse prevention presentations when necessary;</li></ul><ul><li>Data entry, filing, answer phones, and other general office duties;</li></ul><ul><li>Other duties to be assigned as needed</li></ul>Job Type: Full-timePay: From $20.00 per hourExpected hours: No more than 40 per weekBenefits:<ul><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Application Question(s):<ul><li>How many years of experience do you have working with children and youth?</li><li>Have you been previously trained for Forensic Interviews?</li><li>Are you flexible to come in if there is an Emergency Forensic Interview needed by law enforcement?</li><li>Are you comfortable testifying if you are subpoena in a case?</li></ul>Experience:<ul><li>Social work: 2 years (Preferred)</li></ul>Work Location: In person

CAC Forensic Interviewer

Queens District Attorney's Office

The Office of the Queens County District Attorney (QDA) is seeking a Digital Forensic Laboratory Director to oversee the daily operations of QDA's digital forensic laboratory, ensuring the effective, secure, and legally compliant handling of digital evidence. The Director will lead the laboratory team in providing forensic analysis, technical expertise, and specialized services in criminal investigations, cybercrime cases, and other related matters. The Director is responsible for maintaining high standards in forensic practices, ensuring adherence to legal procedures, and promoting a culture of professionalism and accountability.
 
The Director's duties will include, but are not limited to, the following:
 
<ul>
<li>Laboratory Management:</li>
<li>Oversee and manage the digital forensic laboratory's operations.</li>
<li>Supervise forensic examiners, technicians, and other laboratory staff, providing guidance, training, and performance evaluations.</li>
<li>Develop and maintain laboratory policies and procedures for the processing, storage, and analysis of digital evidence.</li>
<li>Ensure the laboratory's compliance with all applicable laws, regulations, and accreditation standards.</li>
<li>Forensic Analysis:</li>
<li>Conduct and oversee forensic examinations of digital devices, including computers, smartphones, and tablets.</li>
<li>Lead or consult on complex digital investigations related to cybercrimes, fraud, identity theft, child exploitation, and other criminal activities.</li>
<li>Prepare and maintain detailed reports on forensic findings, including chain of custody documentation, evidence handling procedures, and analysis results.</li>
<li>Case Support and Testimony:</li>
<li>Provide expert testimony in court regarding forensic findings and the methods used in investigations, as needed.</li>
<li>Serve as a subject matter expert on digital forensics during criminal investigations and collaborate with law enforcement agencies and prosecutors to advance cases.</li>
<li>Training and Development:</li>
<li>Lead training programs for laboratory staff, and other law enforcement personnel about emerging trends in digital forensics, evidence handling, and best practices.</li>
<li>Stay up to date with advancements in digital forensic tools, techniques, and legal considerations, and ensure the laboratory is equipped with state-of-the-art technology.</li>
<li>Budget and Resource Management:</li>
<li>Develop and manage the laboratory's budget, ensuring the efficient allocation of resources for personnel, equipment, and technology.</li>
<li>Assess and recommend new forensic tools, software, and hardware to maintain laboratory capabilities.</li>
<li>Collaboration and Reporting:</li>
<li>Foster strong working relationships with other law enforcement agencies, prosecutors, and external forensic specialists to ensure the successful completion of investigations.</li>
<li>Provide regular status reports to Chief Investigator on laboratory activities, case progress, and emerging trends in digital crime.</li>
</ul>
Preferred Education and Qualification Requirements: 
1. A baccalaureate degree from an accredited college or university in Computer Science, Criminal Justice or related field and at least ten years of full-time experience in law enforcement, including at least five years of full-time experience in computer crime and two years of administrative or managerial experience in Criminal Justice or a related field.
 
2. Education and/or experience equivalent to “1” above. However, all candidates must have the two years of administrative or managerial experience in Criminal Justice or a related field as described in “1” above.
 
Certifications (Preferred): 
<ul>
<li>Certified Computer Examiner (CCE), Certified Forensic Computer Examiner (CFCE), or similar certification.</li>
</ul>
Skills: 
<ul>
<li>In-depth understanding of digital forensics, including data recovery, analysis, and reporting methodologies.</li>
<li>Strong knowledge of relevant legal standards, such as evidence handling, chain of custody, and courtroom procedures.</li>
<li>Proven expertise in forensic examination of computers, and mobile devices including experience with forensic software such as Cellebrite.</li>
<li>Experience in managing or overseeing forensic laboratories, including knowledge of industry accreditation processes.</li>
<li>Excellent leadership and personnel management skills.</li>
<li>Strong written and verbal communication skills, including the ability to communicate complex technical findings to non-technical stakeholders.</li>
<li>Ability to manage multiple projects and prioritize competing demands in a fast-paced environment.</li>
<li>Strong problem-solving abilities and attention to detail.</li>
</ul>
Work Environment: 
The Director will work primarily in a laboratory environment, with occasional fieldwork as needed. The position may require on-call availability for urgent investigations or case support.
 
Application Information: 
Salary: $165,000 - $175,000; commensurate with experience.
 
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
 
To apply, please submit a cover letter and resume, by clicking the link below:

Director, Digital Forensic Laboratory

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
 
 Work as a DFIR consultant in DTS Solution supporting our 800-HACKED program </li>
 <li>
 
 Work as a consultant for many Incident Retainer Program </li>
 <li>
 
 Cyber breach investigations including forensic and malware analysis. Identifies network computer intrusion evidence and perpetrators. </li>
 <li>
 
 Strong understanding on threat hunting methodologies. </li>
 <li>
 
 Strong experience in post-compromise assessment. </li>
 <li>
 
 Ability to perform detailed forensics investigations; </li>
 <li>
 
 Knowledge on DFIR tools Autospy, Encase, Access Data, FTK+, IDA etc. </li>
 <li>
 
 Examines and performs comprehensive technical analysis of computer-related evidence and information stored on a device(s) during the conduct of an investigation or litigation. </li>
 <li>
 
 Proactively advise teams/hunt for and research potential malicious activity and incidents across multiple platforms using advanced threat network and host-based tools. </li>
 <li>
 
 Use both internal and external threat intelligence to build indicators of compromise into monitoring tools, can integrate these tools with one another to provide data enrichment. </li>
 <li>
 
 Use strong TCP/IP networking skills to perform network analysis to isolate and diagnose potential threats and anomalous network behavior. </li>
 <li>
 
 Ensures chain of custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. </li>
 <li>
 
 Report common and repeated problems (trend analysis) to management and propose process and technical improvements. </li>
 <li>
 
 Provide resolution plans for system and network issues. </li>
 <li>
 
 Provide support in the detection, response, mitigation, and reporting of real or potential cyber threats to the environment and assist in the automation of the processes. </li>
 <li>
 
 Provides oral and written communication to staff personnel concerning findings of fact, results of examination(s), and legal declarations, and testify in court as to the procedures and methodology used to recover and identify relevant evidence. </li>
 <li>
 
 Ability to write Incident Response Reports in accordance to international standards. </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 6+ years of experience of network/security and analyzing digital evidence and investigate computer security incidents </li>
 <li>
 
 Expert knowledge on DFIR tools such as Access Data, IDA Pro, FTK+, Encase </li>
 <li>
 
 Expert knowledge on threat hunting tools commercial and open source </li>
 <li>
 
 Familiarity with network tools such as Wireshark, tcpdump, libpcap. </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 GCIA, GCIH, or CISSP Certifications </li>
 <li>
 
 SANS Certified Forensic Examiner (GCFE) </li>
 <li>
 
 Forensic/ Incident Response Professional </li>
 <li>
 
 Industry Certification on Digital Forensics Tool </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div> </div></div><div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Digital Forensics and Incident Response Consultant

Information Technology Senior Management Forum

<div><div>Posted Date
10/24/2025
</div><div>Description
<div>Anti-Money Laundering (AML) Sr. Investigator - Transaction Monitoring Operations (TMO)
The Anti-Money Laundering (AML) Sr. Investigator I supports various AML processes, which might include suspicious activity investigations, currency transaction reporting, global sanctions screening, enhanced due diligence or other AML processes. The AML Sr Investigator I will work closely with AML Process Managers to perform other critical functions.
Responsibilities:<ul><li>
Build and maintain awareness of the broader context and implications of the various types of risk affecting the business (e.g., financial, legal, reputation, etc.)</li><li>
Review system generated alerts, assess impact to AML processes, conduct research as required, and document results in written format</li><li>
Write suspicious activity reports, files CTR's, address sanctions alerts, and other applicable AML processes in accordance with regulations and time limitations</li><li>
Provide feedback on alert rule effectiveness and partner with management and analysts to design new rules</li><li>
Provide insight into various commercial banking products and services</li><li>
Handle issues as appropriate for advanced investigation and analysis</li><li>
Support team supervisors in executing certain responsibilities</li><li>
Perform special projects as needed</li></ul>
Basic Qualifications:<ul><li>
High School Diploma, GED or equivalent certification</li><li>
At least 1 year of fraud, investigative or compliance experience</li><li>
At least 1 year of experience with Microsoft Office or Google Suite</li></ul>
Preferred Qualifications:<ul><li>
Bachelor's Degree in Criminal Justice, Fraud Prevention or Homeland Security</li><li>
2+ years fraud, investigative or compliance experience</li><li>
3+ years of experience in Anti-Money Laundering</li><li>
3+ years of experience in the Financial Services industry</li></ul>
Are you looking for a challenging role that includes the convenience of working virtually at home? Then a Capital One Anti-Money Laundering Investigator role may be the role for you! You must be within 50 miles driving distance from our Capital One hub in Wilmington, DE / Richmond, VA / New Orleans, LA / Plano, TX / Jericho, NY / Chicago, IL / McLean, VA / Riverwoods, IL.
Work From Home Technology Requirements:<ul><li>
A secure home office environment that is free from background noise and distractions</li><li>
A reliable private internet connection that is not supplied by use cellular data (hot spot)</li><li>
Cable or fiber connections are preferred</li><li>
Internet service download speeds must be at least 5 mbps, with 10+ mbps preferred - check your download speed using a speed test. A sample one can be found here. To test your home internet from your personal computer at home, type www.speedtest.net into the web browser of your personal computer.</li><li>
Sustained ability to maintain latency less than 250 ms in voice calls is required</li><li>
Hard wired connectivity is preferred, any use of wireless connectivity must be Private (non-public) and password protected through WPA2-PSK (AES) encryption. If you have any questions about your encryption, please consult with your internet provider</li><li>
A private network is password protected where you have ownership or line of site to every device on the network</li><li>
Capital One reserves the right to request proof of internet provider, speed and service package from the associate</li><li>
Requirements are subject to change, as new systems and technology is delivered. Capital One reserves the right to modify internet service requirements with sixty (60) days notice.</li></ul>
Work from Home Living Requirements:<ul><li>
Candidates must live within 50 miles driving distance of one of the hub locations based in Wilmington, DE / Richmond, VA / New Orleans, LA / Plano, TX / Jericho, NY / Chicago, IL / McLean, VA / Riverwoods, IL and be comfortable coming in person whenever required with no less than 24 hours notice.</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Chicago, IL: $72,800 - $83,100 for AML Sr. Investigator I 

Jericho, NY: $87,400 - $99,700 for AML Sr. Investigator I 

McLean, VA: $80,100 - $91,400 for AML Sr. Investigator I 

New Orleans, LA: $72,800 - $83,100 for AML Sr. Investigator I 

Plano, TX: $72,800 - $83,100 for AML Sr. Investigator I 

Richmond, VA: $72,800 - $83,100 for AML Sr. Investigator I 

Riverwoods, IL: $72,800 - $83,100 for AML Sr. Investigator I 

Wilmington, DE: $72,800 - $83,100 for AML Sr. Investigator I 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Anti-Money Laundering (AML) Sr. Investigator - Transaction Monitoring Operations (TMO)
The Anti-Money Laundering (AML) Sr. Investigator I supports various AML processes, which might include suspicious activity investigations, currency transaction reporting, global sanctions screening, enhanced due diligence or other AML processes. The AML Sr Investigator I will work closely with AML Process Managers to perform other critical functions.
Responsibilities:<ul><li>
Build and maintain awareness of the broader context and implications of the various types of risk affecting the business (e.g., financial, legal, reputation, etc.)</li><li>
Review system generated alerts, assess impact to AML processes, conduct research as required, and document results in written format</li><li>
Write suspicious activity reports, files CTR's, address sanctions alerts, and other applicable AML processes in accordance with regulations and time limitations</li><li>
Provide feedback on alert rule effectiveness and partner with management and analysts to design new rules</li><li>
Provide insight into various commercial banking products and services</li><li>
Handle issues as appropriate for advanced investigation and analysis</li><li>
Support team supervisors in executing certain responsibilities</li><li>
Perform special projects as needed</li></ul>
Basic Qualifications:<ul><li>
High School Diploma, GED or equivalent certification</li><li>
At least 1 year of fraud, investigative or compliance experience</li><li>
At least 1 year of experience with Microsoft Office or Google Suite</li></ul>
Preferred Qualifications:<ul><li>
Bachelor's Degree in Criminal Justice, Fraud Prevention or Homeland Security</li><li>
2+ years fraud, investigative or compliance experience</li><li>
3+ years of experience in Anti-Money Laundering</li><li>
3+ years of experience in the Financial Services industry</li></ul>
Are you looking for a challenging role that includes the convenience of working virtually at home? Then a Capital One Anti-Money Laundering Investigator role may be the role for you! You must be within 50 miles driving distance from our Capital One hub in Wilmington, DE / Richmond, VA / New Orleans, LA / Plano, TX / Jericho, NY / Chicago, IL / McLean, VA / Riverwoods, IL.
Work From Home Technology Requirements:<ul><li>
A secure home office environment that is free from background noise and distractions</li><li>
A reliable private internet connection that is not supplied by use cellular data (hot spot)</li><li>
Cable or fiber connections are preferred</li><li>
Internet service download speeds must be at least 5 mbps, with 10+ mbps preferred - check your download speed using a speed test. A sample one can be found here. To test your home internet from your personal computer at home, type www.speedtest.net into the web browser of your personal computer.</li><li>
Sustained ability to maintain latency less than 250 ms in voice calls is required</li><li>
Hard wired connectivity is preferred, any use of wireless connectivity must be Private (non-public) and password protected through WPA2-PSK (AES) encryption. If you have any questions about your encryption, please consult with your internet provider</li><li>
A private network is password protected where you have ownership or line of site to every device on the network</li><li>
Capital One reserves the right to request proof of internet provider, speed and service package from the associate</li><li>
Requirements are subject to change, as new systems and technology is delivered. Capital One reserves the right to modify internet service requirements with sixty (60) days notice.</li></ul>
Work from Home Living Requirements:<ul><li>
Candidates must live within 50 miles driving distance of one of the hub locations based in Wilmington, DE / Richmond, VA / New Orleans, LA / Plano, TX / Jericho, NY / Chicago, IL / McLean, VA / Riverwoods, IL and be comfortable coming in person whenever required with no less than 24 hours notice.</li></ul>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Chicago, IL: $72,800 - $83,100 for AML Sr. Investigator I 

Jericho, NY: $87,400 - $99,700 for AML Sr. Investigator I 

McLean, VA: $80,100 - $91,400 for AML Sr. Investigator I 

New Orleans, LA: $72,800 - $83,100 for AML Sr. Investigator I 

Plano, TX: $72,800 - $83,100 for AML Sr. Investigator I 

Richmond, VA: $72,800 - $83,100 for AML Sr. Investigator I 

Riverwoods, IL: $72,800 - $83,100 for AML Sr. Investigator I 

Wilmington, DE: $72,800 - $83,100 for AML Sr. Investigator I 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
72,800.00 - 83,100.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Anti-Money Laundering (AML) Sr. Investigator - Transaction Monitoring Operations (TMO)

Search 10000+ Computer forensics investigator jobs near you this October. New roles added regularly across leading industries. Apply today.