digital forensics investigator

Queens District Attorney's Office

The Office of the Queens County District Attorney (QDA) is seeking a Digital Forensic Laboratory Director to oversee the daily operations of QDA's digital forensic laboratory, ensuring the effective, secure, and legally compliant handling of digital evidence. The Director will lead the laboratory team in providing forensic analysis, technical expertise, and specialized services in criminal investigations, cybercrime cases, and other related matters. The Director is responsible for maintaining high standards in forensic practices, ensuring adherence to legal procedures, and promoting a culture of professionalism and accountability.
<br><br>
The Director's duties will include, but are not limited to, the following:
<br><br>
<ul>
<li>Laboratory Management:</li>
<li>Oversee and manage the digital forensic laboratory's operations.</li>
<li>Supervise forensic examiners, technicians, and other laboratory staff, providing guidance, training, and performance evaluations.</li>
<li>Develop and maintain laboratory policies and procedures for the processing, storage, and analysis of digital evidence.</li>
<li>Ensure the laboratory's compliance with all applicable laws, regulations, and accreditation standards.</li>
<li>Forensic Analysis:</li>
<li>Conduct and oversee forensic examinations of digital devices, including computers, smartphones, and tablets.</li>
<li>Lead or consult on complex digital investigations related to cybercrimes, fraud, identity theft, child exploitation, and other criminal activities.</li>
<li>Prepare and maintain detailed reports on forensic findings, including chain of custody documentation, evidence handling procedures, and analysis results.</li>
<li>Case Support and Testimony:</li>
<li>Provide expert testimony in court regarding forensic findings and the methods used in investigations, as needed.</li>
<li>Serve as a subject matter expert on digital forensics during criminal investigations and collaborate with law enforcement agencies and prosecutors to advance cases.</li>
<li>Training and Development:</li>
<li>Lead training programs for laboratory staff, and other law enforcement personnel about emerging trends in digital forensics, evidence handling, and best practices.</li>
<li>Stay up to date with advancements in digital forensic tools, techniques, and legal considerations, and ensure the laboratory is equipped with state-of-the-art technology.</li>
<li>Budget and Resource Management:</li>
<li>Develop and manage the laboratory's budget, ensuring the efficient allocation of resources for personnel, equipment, and technology.</li>
<li>Assess and recommend new forensic tools, software, and hardware to maintain laboratory capabilities.</li>
<li>Collaboration and Reporting:</li>
<li>Foster strong working relationships with other law enforcement agencies, prosecutors, and external forensic specialists to ensure the successful completion of investigations.</li>
<li>Provide regular status reports to Chief Investigator on laboratory activities, case progress, and emerging trends in digital crime.</li>
</ul>
<b>Preferred Education and Qualification Requirements:</b><br>
1. A baccalaureate degree from an accredited college or university in Computer Science, Criminal Justice or related field and at least ten years of full-time experience in law enforcement, including at least five years of full-time experience in computer crime and two years of administrative or managerial experience in Criminal Justice or a related field.
<br><br>
2. Education and/or experience equivalent to “1” above. However, all candidates must have the two years of administrative or managerial experience in Criminal Justice or a related field as described in “1” above.
<br><br>
<b>Certifications (Preferred):</b><br>
<ul>
<li>Certified Computer Examiner (CCE), Certified Forensic Computer Examiner (CFCE), or similar certification.</li>
</ul>
<b>Skills:</b><br>
<ul>
<li>In-depth understanding of digital forensics, including data recovery, analysis, and reporting methodologies.</li>
<li>Strong knowledge of relevant legal standards, such as evidence handling, chain of custody, and courtroom procedures.</li>
<li>Proven expertise in forensic examination of computers, and mobile devices including experience with forensic software such as Cellebrite.</li>
<li>Experience in managing or overseeing forensic laboratories, including knowledge of industry accreditation processes.</li>
<li>Excellent leadership and personnel management skills.</li>
<li>Strong written and verbal communication skills, including the ability to communicate complex technical findings to non-technical stakeholders.</li>
<li>Ability to manage multiple projects and prioritize competing demands in a fast-paced environment.</li>
<li>Strong problem-solving abilities and attention to detail.</li>
</ul>
<b>Work Environment:</b><br>
The Director will work primarily in a laboratory environment, with occasional fieldwork as needed. The position may require on-call availability for urgent investigations or case support.
<br><br>
<b>Application Information:</b><br>
<b>Salary:</b> $165,000 - $175,000; commensurate with experience.
<br><br>
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
<br><br>
To apply, please submit a cover letter and resume, by clicking the link below:

Director, Digital Forensic Laboratory

State of Florida

<div><p>Requisition No: 863028</p>
<p>Agency: Financial Services</p>
<p>Working Title: LAW ENFORCEMENT INVESTIGATOR II - 43001367</p>
<p> Pay Plan: Career Service</p>
<p>Position Number: 43001367</p>
<p>Salary: $63,000.00</p>
<p>Posting Closing Date: 11/06/2025</p>
<p><b>Total Compensation Estimator </b><b>Tool</b></p>
<p><b>
*****OPEN COMPETITIVE EMPLOYMENT OPPORTUNITY*****</b></p>
<p><b>
CLASS TITLE: LAW ENFORCEMENT INVESTIGATOR II &ndash; DIGITAL FORENSIC EXAMINER (SWORN INSURANCE FRAUD DETECTIVE)</b></p>
<p><b>
DIVISION: CRIMINAL INVESTIGATIONS DIVISION</b></p>
<p><b>
BUREAU: BUREAU OF INSURANCE FRAUD</b></p>
<p><b>
CITY: TALLAHASSEE</b></p>
<p><b>
COUNTY: LEON</b></p><br>
<p></p>
<p>
The Criminal Investigations Division encompasses all law enforcement and forensic components residing within the Department of Financial Services. This advertisement is for a <b>Bureau of Insurance Fraud</b> detective.</p><br>
<p></p>
<p>
Click here for additional information about the Department of Financial Services, Criminal Investigations Division.</p><br>
<p></p>
<p><b>
SPECIAL NOTES:</b></p>
<p><b>
TO APPLY FOR THIS POSITION, SUBMIT A STATE OF FLORIDA EMPLOYMENT APPLICATION VIA PEOPLE FIRST </b><b>AND</b><b> SUBMIT A SUPPLEMENTAL APPLICATION TO THE FOLLOWING</b></p><br>
<p></p>
<p><b>
EMAIL ADDRESS:</b> cidhiring@myfloridacfo.com</p><br>
<p></p>
<p><b>
Click here</b><b> for Supplemental Application.</b></p><br>
<p></p>
<p><b>
QUESTIONS:</b></p><br>
<p></p>
<p>
Job Line phone number: (850)-413-4063</p><br>
<p></p>
<p><b><i>
This supplemental application MUST be received no later than five (5) business days after the closing date of this advertisement in order to be considered for this position.</i></b></p><br>
<p></p>
<p><b>
Requirements:</b></p>
<ul>
<li>High School Diploma or its equivalent.</li>
<li>ACTIVE Florida Law Enforcement Compliance/Certification of Equivalency of Training from the Florida Department of Law Enforcement.</li>
<li>VALID Driver&rsquo;s License from the Florida Department of Safety and Motor Vehicles by time of employment.</li></ul><br>
<p></p>
<p><b>
For Law Enforcement Investigator II</b></p>
<ul>
<li>Three (3) or more years of sworn law enforcement experience.</li>
<li>Minimum one (1) year professional experience in digital forensics or cybersecurity</li></ul><br>
<p></p>
<p><b>
Preferences:</b></p>
<ul>
<li>A degree from an accredited college or university.</li>
</ul><ul><li>Special consideration may be given to eligible candidates who have bilingual verbal and written skills that meet a critical need of the agency&rsquo;s mission.</li>
<li>Certified Forensic Computer Examiner (CFCE)</li>
<li>DEASTP &ndash; Digital Evidence Acquisition Specialist Training Program</li>
<li>Cellebrite Certified Operator/Physical Analyst (CCO/CCPA)</li></ul><br>
<p></p>
<p>
College education can be substituted at the rate of 30 semester or 45 quarter hours per year for a maximum of one year required experience.</p><br>
<p></p>
<ul><li><b>NOTE:</b><i> </i><b><i>Correctional Officer and Correction Probational Officer Certifications</i></b><i> </i><b><i>DO NOT</i></b> <b><i>meet</i></b><i> the requirements of the job description.</i></li></ul><br>
<p></p>
<p>
The Division requires you to <b>live no more than 50 miles</b> from your residence to your assigned duty station (office). The mileage will be determined by geodesic distance (direct line) from their address of resident to the address of their assigned office.</p><br>
<p></p>
<p><b>
Candidate Profile (application) must be completed in its entirety. Please read below:</b></p>
<ul>
<li>Please include the names and phone numbers for the supervisor(s) and/or Human Resource Department for all periods of employment.</li>
<li>Account for and explain any gaps in employment so that the hiring process is not delayed.</li>
</ul><ul><li>Experience, education, training, knowledge, skills and/or abilities as well as responses to pre-qualifying questions must be verifiable to meet the minimum qualifications. It is unacceptable to use the statement &ldquo;See Resume&rdquo;.</li>
<li>Each field (address, city, and state, dates, phone numbers, etc.) should be completed.</li>
<li>If claiming Right to Interview, candidate <b>MUST</b> attach a copy of your official layoff letter when applying.</li>
<li>Upon the selection of the top candidate, a current supervisory reference contact will be required.</li></ul><br>
<p></p>
<p><b>
Experience and education requirements must be met at the time of application submission to be considered.</b></p><br>
<p></p>
<p>
This position requires a security background check, including fingerprint as a condition of employment.</p><br>
<p></p>
<p><b>
LEI II annual salary is $63,000.00.</b></p><br>
<p></p>
<p>
A CAD (Competitive Area Differential) of $4,999.80 will apply only to those applying for positions in the following counties Palm Beach, Broward and Dade.</p><br>
<p></p>
<p><i>
Employees of the Department of Financial Services are paid on a monthly pay cycle.</i></p><br>
<p></p>
<p><b>
Responses to qualifying questions must be clearly supported by the state application and any omission, falsification, or misrepresentation in the answering of the qualifying questions will be cause for immediate elimination from the selection process.</b></p><br>
<p></p>
<p><b>
WHAT IS THE SELECTION PROCESS?</b></p><br>
<p></p>
<p><b>
Selection is a three-to-six-month process where the successful applicants </b><b>MUST PASS</b><b> </b><b>the Physical Abilities Test, Oral and Written Exam, CJSTC background prior to beginning.</b></p><br>
<p></p>
<p><b>
Our Salary &amp; Benefits &ndash; </b><b>CAREER SERVICE SPECIAL RISK</b></p>
<ul>
<li>Paid holidays, vacation and one personal holiday</li>
<li>Ability to earn up to 104 hours of paid annual leave as a new employee</li>
<li>Ability to earn up to 104 hours of paid sick leave annually</li>
<li>Pension and investment retirement plan options (MyFRS)</li>
<li>Flexible Spending Accounts, Health Savings Accounts</li>
<li>Tax deferred medical and childcare reimbursement accounts</li>
<li>State of Florida Tuition Waiver Program (must be accepted by a Florida colleges/universities)</li>
<li>Public Service Student Forgiveness Program (PSLF) - (Eligibility required) https://studentaid.gov/sites/default/files/public-service-application-for-forgiveness.pdf</li>
</ul><ul><li>$25,000.00 in automatic life insurance coverage</li>
<li>Affordable health insurance options starting as low as $50.00 per month for individuals or $180 per month for family</li>
<li>Multiple supplemental insurance options including dental, vision, disability and more</li></ul><br>
<p></p>
<p><b>
CLICK HERE FOR TOTAL COMPENSATION ESTIMATOR</b></p><br>
<p></p>
<p>
Pay Additives and Competitive Area Differential (CAD)</p>
<ul>
<li>Criminal Justice Incentive Pay - up to $1,560 annually</li>
<li>Clothing allowance up to $500.00 annually</li>
<li>Take home car - approximately $10,000.0 in savings annually</li>
<li>Specialty pay additives: FTO and Lead Detective</li>
<li>CAD pay up to $5000.00 for Dade, Broward, and Palm Beach Counties</li></ul><br>
<p></p>
<p>
Programs</p>
<ul>
<li>Participation on state and federal task forces</li>
<li>Community Outreach</li>
<li>Honor Guard</li>
<li>Disaster Fraud Action Strike Team (DFAST)</li></ul><br>
<p></p>
<p><b>
MINIMUM QUALIFICATIONS FOR THIS POSITION INCLUDE THE FOLLOWING REQUIRED ENTRY LEVEL KNOWLEDGE, SKILLS AND ABILITIES:</b></p><br>
<p></p>
<p><b>
Knowledge:</b></p>
<p><b>
Digital Forensics &amp; Cybersecurity</b></p>
<ul>
<li>Principles of forensic acquisition, preservation, and analysis of digital evidence</li>
<li>Cybersecurity fundamentals including CIA triad, defense-in-depth, and MITRE ATT&amp;CK</li>
<li>Data recovery techniques including encryption, obfuscation, and deleted file retrieval</li>
<li>Common attack vectors and detection strategies</li>
<li>Incident response lifecycle and NIST SP 800-61 guidance</li>
<li>Forensic tools and platforms: EnCase, FTK, Cellebrite, X-Ways, Magnet AXIOM</li>
<li>Operating systems and file systems: Windows, macOS, Linux, Android, iOS, NTFS, FAT32, APFS</li>
</ul>
<p><b>Law Enforcement &amp; Legal Frameworks</b></p>
<ul>
<li>Florida law enforcement certification requirements (Chapter 943, Florida Statutes)</li>
<li>Chain-of-custody protocols and courtroom admissibility standards</li>
<li>Laws, legal codes, court procedures, government regulations, and agency rules</li>
<li>Criminal investigation procedures and evidentiary standards</li>
</ul>
<p><b>Public Safety &amp; Security</b></p>
<ul>
<li>Weaponry, security operations, and protection of people, data, and property</li>
<li>Executive orders, democratic political processes, and public safety regulations</li>
</ul>
<p><b>Communication &amp; Grammar</b></p>
<ul>
<li>Principles of correct grammar usage</li>
<li>Technical writing and documentation standards</li></ul><br>
<p></p>
<p><b>
Skills:</b></p>
<p><b>
Forensic &amp; Technical</b></p>
<ul>
<li>Imaging and analysis of digital devices, cloud storage, and removable media</li>
<li>Log analysis across EDR, SIEM, network appliances, and cloud services</li>
<li>Use of KQL, SQL, and analytics platforms for search and visualization</li>
<li>Security event correlation and alert tuning</li>
<li>Technical reporting for legal and investigative purposes</li>
<li>Tool evaluation and integration of emerging forensic technologies</li>
</ul>
<p><b>Investigative &amp; Operational</b></p>
<ul>
<li>Field operations including digital triage, search warrants, and evidence collection</li>
<li>Collaboration with detectives, prosecutors, and stakeholders</li>
<li>Surveillance, undercover operations, and confidential source management</li>
<li>Driving and operating motor vehicles safely and responsibly</li>
</ul>
<p><b>Communication &amp; Testimony</b></p>
<ul>
<li>Clear verbal and written communication</li>
<li>Expert testimony in court and professional presentation of findings</li>
<li>Structured inquiry and logical reasoning for decision-making</li></ul><br>
<p></p>
<p><b>
Abilities:</b></p>
<p><b>
Cognitive &amp; Analytical</b></p>
<ul>
<li>Use logic and analysis to evaluate investigative approaches</li>
<li>Multitask and prioritize multiple cases with accuracy</li>
<li>Adapt to rapidly evolving technologies and investigative techniques</li>
</ul>
<p><b>Behavioral &amp; Interpersonal</b></p>
<ul>
<li>Communicate with clarity and precision; actively listen and engage respectfully</li>
<li>Work independently or collaboratively under minimal supervision</li>
<li>Follow procedures and escalate appropriately</li>
<li>Handle sensitive information with discretion and integrity</li>
</ul>
<p><b>Physical &amp; Environmental</b></p>
<ul>
<li>Perform physical labor and withstand exertion</li>
<li>Work in dangerous, high-stress, or extended deployments across the state</li>
<li>Maintain readiness for 24/7 law enforcement duties, including bearing firearms</li>
</ul>
<p><b>Organizational &amp; Strategic</b></p>
<ul>
<li>Plan, organize, and coordinate work assignments</li>
<li>Maintain certification and professional standards</li></ul><br>
<p></p>
<p><b>
BRIEF DESCRIPTION OF DUTIES</b>:</p>
<p><b><i>
Incumbent of position is a member of DFS&rsquo; Disaster Response Team and, in that capacity, may be required on short notice to perform duties and necessary attendant travel in support of disaster relief efforts.</i></b></p><br>
<p></p>
<p>
The duties of this position require a constituted law enforcement officer subject to be on call 24 hours a day, seven days a week. The incumbent is required to bear firearms. The incumbent is required to maintain certification as a law enforcement officer pursuant to Chapter 943, Florida Statutes.</p>
<p>
The Digital Forensic Examiner is a sworn law enforcement investigator position responsible for the collection, preservation, and forensic analysis of digital evidence in support of criminal and administrative investigations. The examiner will utilize specialized forensic hardware and software tools to acquire, process, and analyze digital media, while ensuring proper chain-of-custody and evidentiary standards. The examiner&rsquo;s findings will support investigative leads, case development, and courtroom testimony.</p><br>
<p></p>
<p><b>
Digital Forensic Examiner Activities
</b></p><ul><li>Perform forensic imaging and analysis of computers, mobile devices, removable media, cloud storage, and other digital platforms.</li>
<li>Recover and examine digital artifacts including emails, documents, internet history, messaging applications, geolocation data, metadata, and deleted files.</li>
<li>Utilize forensic tools to extract and analyze data while maintaining strict chain-of-custody protocols to ensure evidentiary integrity.</li>
<li>Prepare detailed forensic reports using both digital and traditional reporting methods, clearly documenting methodologies, findings, and conclusions.</li>
<li>Provide expert testimony in court regarding forensic procedures and results, supporting legal proceedings with technical clarity.</li>
<li>Collaborate with detectives, investigators, and prosecutors to identify and interpret digital evidence relevant to ongoing cases.</li>
<li>Participate in search warrants, evidence collection, and on-scene digital triage operations as needed.</li>
<li>Investigate crimes involving digital media, ensuring proper recovery and preservation of evidence from various devices.</li>
<li>Continuously research and evaluate emerging forensic technologies, tools, and methodologies to enhance investigative capabilities.</li></ul><br>
<p></p>
<p><b>
Investigative Activities
</b></p><ul><li>Conduct extensive investigations. Responsibilities to include following up on leads, conducting interviews, executing search warrants, making arrests.</li>
</ul><ul><li>Conduct follow-up latent investigations, interviewing witnesses and interrogation of suspects as appropriate in order to secure background information on suspect(s).</li>
<li>Identify and arrest criminal suspects. Prepare and present information and evidence to the prosecuting attorney.</li>
</ul><ul><li>Provide expert testimony at legal proceedings and assists in preparation of witnesses, victims, and evidence for use by the prosecution.</li>
<li>Identifies, recruits, documents, and supervises confidential sources as per Division Policies and Procedures.</li>
<li>Collects, seizes, protects, maintains, transports and documents evidence consistent with statutes, current case law, and Division Policies and Procedures.</li>
<li>Displays sound surveillance techniques and undercover capabilities as needed.</li>
<li>Provides investigative support to Division personnel and to other public safety entities.</li>
<li>Applies diverse knowledge and research methods.</li>
<li>Development of strategic and tactical intelligence.</li>
<li>Monitors arrests, prosecutions, and forfeitures. Maintains liaison with Prosecutor.</li>
</ul><ul><li>Conduct thorough background investigations into potential Department employees.</li>
<li>Establish and maintain liaison with other entities.</li>
<li>Performs disaster related duties as requested.</li></ul><br>
<p></p>
<p><b>
Planning and Organizing
</b></p><ul><li>Provides complete and accurate collection of data/information, evaluation, and dissemination.</li>
<li>Displays initiative and organizational skills in conducting investigative activities.</li>
<li>Prepares and implements investigative plan.</li>
<li>Focuses investigation on objectives necessary for prosecution and closure of cases.</li>
<li>Displays creative planning and seeks innovative resolutions.</li>
<li>Goals, objectives, and assignments are met efficiently and in a timely manner.</li>
<li>Consistently allocates resources to maximize efficiency and successful case completion.</li>
<li>Demonstrates fiscal responsibility and monitors expenditures.</li>
</ul><ul><li>Develops case targets.</li></ul><br>
<p></p>
<p><b>
Training</b></p>
<ul>
<li>Participate in training and collaboration involving digital forensics best practices such as knowledge-sharing forums and networking.</li></ul><br>
<p></p>
<p>
Performs other related duties as required.</p><br>
<p></p>
<p>
THE INCUMBENT OF THIS POSITION IS CONSIDERED TO HAVE REGULATORY RESPONSIBILITIES AND IS SUBJECT TO THE PROVISIONS OF CHAPTER 60L-32.</p><br>
<p></p>
<p><b><i>
If you are a retiree of the Florida Retirement System (FRS), please check with the FRS on how your current benefits will be affected if you are re-employed with the State of Florida. Your current retirement benefits may be canceled, suspended, or deemed ineligible depending upon the date of your retirement.</i></b></p><p>
The State of Florida is an Equal Opportunity Employer/Affirmative Action Employer, and does not tolerate discrimination or violence in the workplace.</p>
<p>Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.</p>
<p>The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.</p>
<p><b>VETERANS&rsquo; PREFERENCE. </b>Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans&rsquo; Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans&rsquo; Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans&rsquo; Preference documentation requirements are available by clicking here. All documentation is due by the close of the vacancy announcement.</p></div>

LAW ENFORCEMENT INVESTIGATOR II

DTS Solution

<b>Role and Responsibilities 
 
 </b><div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a DFIR consultant in DTS Solution supporting our 800-HACKED program<br> </li>
 <li>
<i> </i> 
 Work as a consultant for many Incident Retainer Program<br> </li>
 <li>
<i> </i> 
 Cyber breach investigations including forensic and malware analysis. Identifies network computer intrusion evidence and perpetrators.<br> </li>
 <li>
<i> </i> 
 Strong understanding on threat hunting methodologies.<br> </li>
 <li>
<i> </i> 
 Strong experience in post-compromise assessment.<br> </li>
 <li>
<i> </i> 
 Ability to perform detailed forensics investigations;<br> </li>
 <li>
<i> </i> 
 Knowledge on DFIR tools   Autospy, Encase, Access Data, FTK+, IDA etc.<br> </li>
 <li>
<i> </i> 
 Examines and performs comprehensive technical analysis of computer-related evidence and information stored on a device(s) during the conduct of an investigation or litigation.<br> </li>
 <li>
<i> </i> 
 Proactively advise teams/hunt for and research potential malicious activity and incidents across multiple platforms using advanced threat network and host-based tools.<br> </li>
 <li>
<i> </i> 
 Use both internal and external threat intelligence to build indicators of compromise into monitoring tools, can integrate these tools with one another to provide data enrichment.<br> </li>
 <li>
<i> </i> 
 Use strong TCP/IP networking skills to perform network analysis to isolate and diagnose potential threats and anomalous network behavior.<br> </li>
 <li>
<i> </i> 
 Ensures chain of custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports.<br> </li>
 <li>
<i> </i> 
 Report common and repeated problems (trend analysis) to management and propose process and technical improvements.<br> </li>
 <li>
<i> </i> 
 Provide resolution plans for system and network issues.<br> </li>
 <li>
<i> </i> 
 Provide support in the detection, response, mitigation, and reporting of real or potential cyber threats to the environment and assist in the automation of the processes.<br> </li>
 <li>
<i> </i> 
 Provides oral and written communication to staff personnel concerning findings of fact, results of examination(s), and legal declarations, and testify in court as to the procedures and methodology used to recover and identify relevant evidence.<br> </li>
 <li>
<i> </i> 
 Ability to write Incident Response Reports in accordance to international standards.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 6+ years of experience of network/security and analyzing digital evidence and investigate computer security incidents<br> </li>
 <li>
<i> </i> 
 Expert knowledge on DFIR tools such as Access Data, IDA Pro, FTK+, Encase<br> </li>
 <li>
<i> </i> 
 Expert knowledge on threat hunting tools   commercial and open source<br> </li>
 <li>
<i> </i> 
 Familiarity with network tools such as Wireshark, tcpdump, libpcap.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 GCIA, GCIH, or CISSP Certifications<br> </li>
 <li>
<i> </i> 
 SANS Certified Forensic Examiner (GCFE)<br> </li>
 <li>
<i> </i> 
 Forensic/ Incident Response Professional<br> </li>
 <li>
<i> </i> 
 Industry Certification on Digital Forensics Tool<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div><br></div></div><div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Digital Forensics and Incident Response Consultant

Bronx District Attorney

<div></div><div><div><div><div><div><div><div><ul><li><b>BRONX DISTRICT ATTORNEY
</b></li></ul></div></div><div><div><b>Posted On: </b><b>10/30/2025
</b></div></div><div><div><ul><li><b>Full-Time
</b></li></ul></div></div><div><div><div><b>Location
</b></div><div><b>BRONX</b></div>
</div></div><div><div><ul><li><b>No Exam Required
</b></li></ul></div></div><div><div><div><div><b>Department</b></div>
<div><b>Support Staff</b></div>
</div></div></div><p></p><div><div><div><b>Salary Range:</b></div><b>
</b><div><b>$75,197.00 &ndash; $75,197.00</b></div><b>
</b></div></div></div></div></div></div><div><div><div><h2 class="jobSectionHeader"><b>Job Description</b></h2></div>
<div><div><div>The Office of the District Attorney, Bronx County (&ldquo;BXDA&rdquo;) is charged with the twin goals of ensuring public safety and striving for equal justice for the over 1.4 million members of the Bronx County community. By &ldquo;Pursuing Justice with Integrity,&rdquo; the BXDA places a focus on assistance for crime victims while simultaneously ensuring fairness to defendants. Moreover, the BXDA aims to balance the need to seek appropriate punishment for certain crimes while recognizing when punitive measures do not adequately advance justice. By recognizing these significant distinctions and acting accordingly, BXDA has established a standard of excellence in the representation of the Bronx community at large, which continues to grow stronger every day.<br>
In furtherance of this mission, the BXDA seeks experienced and enthusiastic Digital Forensic Examiner I.<br>
<br>
JOB RESPONSIBILITIES<br>
<br>
Specific duties will include, but are not limited to the following:<br>
<br>
<ul><li>Utilize forensic knowledge to extract and analyze various electronic devices including but not limited to mobile phones, tablets, GPS equipment, and traditional desktop and laptop computers and hard drives.</li></ul><br>
<ul><li>Image digital storage devices and conduct a forensic examination of recovered data.</li></ul><br>
<ul><li>Write accurate and thorough reports following the standards and requirements of the Digital Forensics Laboratory.</li></ul><br>
<ul><li>Testify to forensic analysis, reports, and findings in Grand Jury and Trial proceedings.</li></ul><br>
<ul><li>Participate in the execution of search warrants involving digital evidence, and retrieval and forensic examination of video surveillance footage.</li></ul><br>
<ul><li>Serve as Subject Matter Experts to best guide ADAs and Investigators to properly seize, preserve, and collect digital evidence.
</li></ul><br>
<ul><li>Perform case intake of devices received by the Lab by preparing new case files and chain of custody documentation.</li></ul><br>
<ul><li>Disassemble, configure, and troubleshoot computer hardware.</li></ul><br>
<ul><li>All other duties as assigned.<br>
</li></ul><br>
<br>
PREFERRED QUALIFICATIONS:<br>
<br>
Bachelor&rsquo;s Degree required (preferably in Computer Forensics, Computer Science, Computer Security, or Information Security) OR two (2) years digital forensic experience may be substituted for a degree<br>
<br>
COMMUNITY COORDINATOR - 56058</div><p><b><br>
Minimum Qualifications</b></p><p><br>
1. A baccalaureate degree from an accredited college and two years of experience in community work or community centered activities in an area related to the duties described above; or
<br>
2. High school graduation or equivalent and six years of experience in community work or community centered activities in an area related to the duties as described above; or
<br>
3. Education and/or experience which is equivalent to &quot;1&quot; or &quot;2&quot; above. However, all candidates must have at least one year of experience as described in &quot;1&quot; above.</p><p><b><br>
Preferred Skills</b></p><br>
-Certified Forensic Examiners and applicants with experience performing forensic analyses using software such as Forensic Toolkit, Magnet Axiom/Internet Evidence Finder, Encase, Cellebrite, Xways, Internet Evidence Finder, and similar software suites are preferred (please list certification type and date, or relevant experience on your cover letter and resume). -Working knowledge of database and programming languages preferred. -Thorough knowledge of digital forensic industry best practices, chain of custody procedures, forensic methodologies, and evidence handling are required. - Proficient in Microsoft Word, Excel, Access ability to update and edit existing databases. -Case tracking and Laboratory Information Management Systems experience is preferred. - Ability to work in a dynamic environment, prioritizing work, and balancing caseloads. - Ability to work independently and manage multiple short-term projects. - Ability to follow direction and apply proper policies, procedures, and guidelines. - Strong attention to detail and high concern for data accuracy. - Dependable team player who works collaboratively and cooperatively in a team-oriented environment. - Must be able to perform under pressure in a fast-paced environment with an ability to multitask. - Ability to interact with all levels of staff and law enforcement personnel. - Ability to work nights, weekends, and holidays when necessary to support the 24/7 nature of the Lab.<br>
<p><b>
Residency Requirement</b></p><br>
City Residency is not required for this position.<br>
<p><b>
Additional Information</b></p><div></div><p><br>
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.</p></div>
</div><div><div><p><b>
</b></p><p><b>Shortlist</b></p>
</div></div></div></div><p></p><div><div><div><div><div><div><div><b>Job ID
</b></div><div><b>754093</b></div>
</div></div><div><div><div><div><b>Title code</b></div>
<div><b>56058</b></div>
</div></div></div><div><div><div><div><b>Civil service title</b></div>
<div><b>COMMUNITY COORDINATOR</b></div>
</div></div></div><div><div><div><div><b>Title classification</b></div>
<div><b>Non-Competitive-5</b></div>
</div></div></div><div><div><div><div><b>Business title</b></div>
<div><b>Digital Forensic Examiner I</b></div>
</div></div></div><div><div><div><div><b>Posted until</b></div>
<div><b>12/28/2025</b></div>
</div></div></div><div><div><ul><li><div><b>Experience Level: </b></div><b>Experienced (Non-Manager)
</b></li></ul></div></div><div><div><div><div><b>Job level</b></div>
<div><b>00</b></div>
</div></div></div><div><div><div><div><b>Number of positions</b></div>
<div><b>3</b></div>
</div></div></div><div><div><div><div><b>Work location</b></div>
<div><b>198 E161St Street Bronx N.Y.</b></div>
</div></div></div><div><div><ul><li><div><b>Category: </b></div><b>Technology, Data &amp; Innovation
</b></li></ul></div></div></div></div></div></div><p></p><div><div><div><div><div><b>Digital Forensic Examiner I</b></div></div></div></div></div></div><p></p>

Digital Forensic Examiner I

help AG

<div><p>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Lead incident response engagements in unknown environments until all threats are remediated.</p></li><li><p>
Develop custom incident response plans tied to specific environments and customer situations.</p></li><li><p>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</p></li><li><p>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</p></li><li><p>
Reverse engineer malicious software and develop signatures and indicators of compromise.</p></li><li><p>
Actively develop incident response tools, scripts, and various detection content.</p></li><li><p>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</p></li><li><p>
Articulate and execute common Incident Response methods (e.g. SANS).</p></li><li><p>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</p></li><li><p>
Work on-site as required with clients during Live Security Incidents.</p></li><li><p>
Maintain a high degree of awareness of the current threat landscape.</p></li><li><p>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</p></li><li><p>
Create and present customer reports to ensure quality, accuracy and value to the client.</p></li><li><p>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</p></li><li><p>
Perform other essential duties as assigned.</p></li></ul><p></p><p><b><br>
Qualifications &amp; Skills:</b></p><p></p><ul><li><p>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</p></li><li><p>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</p></li><li><p>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</p></li><li><p>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</p></li><li><p>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</p></li><li><p>
Should have <b>at least</b> one of the below <b>ACTIVE </b>certifications as a mandatory requirement:</p></li></ul><p>
CREST Certified Registered Intrusion Analyst (CRIA)<br>
GIAC Cloud Forensics Responder (GCFR)<br>
GIAC Certified Forensic Analyst (GCFA)</p><p>
CREST Certified Host Intrusion Analyst (CC-HIA)<br>
CREST Certified Network Intrusion Analyst (CC-NIA)</p><p>
CREST Certified Incident Manager (CC-IM)</p><p>
CREST Certified Threat Intelligence Manager (CC-TIM)<br>
GIAC Reverse Engineering Malware (GREM)</p><ul><li><p>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</p></li><li><p>
Deep TCP/IP knowledge, networking and security product experience.</p></li></ul><ul><li><p>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</p></li><li><p>
Rapid development in scripting languages: Python/PowerShell /Bash.</p></li><li><p>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</p></li><li><p>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</p></li><li><p>
Demonstrable experience in analysing and interpreting system, security and application logs.</p></li><li><p>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</p></li><li><p>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</p></li><li><p>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</p></li><li><p>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</p></li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li><p><br>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Annual flight tickets.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/Hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b><br>
About Us:</b></p><p></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Incident Response and Forensic Investigation Specialist (DFIR)

<div><p>Help AG is looking for a talented and experienced Incident Response and Forensic Investigation Specialist (U.A.E National) who will be responsible for off-site and on-site Incident Response activities and customer engagements, leveraging multiple security technologies, guiding and leading customers in the handling of Security Incidents and examining IT and security systems using best-practice digital forensic methods to detect, validate and mitigate IT security related incidents. He / She will join our Cyber Defence team within our Managed Security Services (MSS) business unit. If you have a strong knowledge and interest in incident response and/or digital forensics, this position might be the right one for you.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Lead incident response engagements in unknown environments until all threats are remediated.</p></li><li><p>
Develop custom incident response plans tied to specific environments and customer situations.</p></li><li><p>
Examinate and analyse logs/data from a broad variety of security technologies, such as Antiviruses, IDS/IPS, Firewalls, Switches, VPNs and other security threat data sources.</p></li><li><p>
Perform forensic analysis of different artifacts including RAM, packet captures, logs and disk images.</p></li><li><p>
Reverse engineer malicious software and develop signatures and indicators of compromise.</p></li><li><p>
Actively develop incident response tools, scripts, and various detection content.</p></li><li><p>
Research Red Team techniques, develop custom detection queries, rules, watchlists and other content, and conduct threat hunts.</p></li><li><p>
Articulate and execute common Incident Response methods (e.g. SANS).</p></li><li><p>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</p></li><li><p>
Work on-site as required with clients during Live Security Incidents.</p></li><li><p>
Maintain a high degree of awareness of the current threat landscape.</p></li><li><p>
Champion excellence and support others in delivering it through active knowledge sharing with team members, writing technical articles for internal knowledge bases, blog posts and reports as required or requested.</p></li><li><p>
Create and present customer reports to ensure quality, accuracy and value to the client.</p></li><li><p>
Educate and train other Analysts in execution of Incident Response processes and forensic analysis techniques.</p></li><li><p>
Perform other essential duties as assigned.</p></li></ul><p></p><p><b><br>
Qualifications &amp; Skills:</b></p><p></p><ul><li><p>
A Degree in Computer Science, Information Systems, Electrical Engineering or a closely related degree.</p></li><li><p>
7+ years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, malware analysis, reverse engineering or threat detection.</p></li><li><p>
At least 2-3 years of experience as a Senior or Lead Analyst, or equivalent experience guiding, mentoring and teaching other Analysts/Security Professionals how to handle Security Incidents.</p></li><li><p>
Strong background or equivalent experience in four of the following: Security Threat and Event Analysis, Network Security Operations or Engineering, Reverse Engineering, Malware Analysis, Windows/Linux/OSX Forensics, Penetration Testing, Active Directory and Azure Administration.</p></li><li><p>
Demonstrate experience in handling Incident Response engagements (APTs and Ransomware) using the SANS Incident Response method (or similar).</p></li><li><p>
Should have <b>at least</b> one of the below <b>ACTIVE </b>certifications as a mandatory requirement:</p></li></ul><p>
CREST Certified Registered Intrusion Analyst (CRIA)<br>
GIAC Cloud Forensics Responder (GCFR)<br>
GIAC Certified Forensic Analyst (GCFA)</p><p>
CREST Certified Host Intrusion Analyst (CC-HIA)<br>
CREST Certified Network Intrusion Analyst (CC-NIA)</p><p>
CREST Certified Incident Manager (CC-IM)</p><p>
CREST Certified Threat Intelligence Manager (CC-TIM)<br>
GIAC Reverse Engineering Malware (GREM)</p><ul><li><p>
CISSP, GCIA, GCIH, GCFE, OSCP certification would be preferable.</p></li><li><p>
Deep TCP/IP knowledge, networking and security product experience.</p></li></ul><ul><li><p>
Strong knowledge of Red Team tactics and ability to find adversary traces on Enterprise scale.</p></li><li><p>
Rapid development in scripting languages: Python/PowerShell /Bash.</p></li><li><p>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</p></li><li><p>
Demonstrable experience in accountability for and applying the methods of Incident Response, including adherence to process and direct engagement with stakeholders.</p></li><li><p>
Demonstrable experience in analysing and interpreting system, security and application logs.</p></li><li><p>
Broad knowledge of the type of events that Firewalls, IDS/IPS and other security related devices produce.</p></li><li><p>
Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using custom tools and scripts.</p></li><li><p>
Static reverse engineering and analysis of malware written in different languages (X86/X64/C/C#, Go, etc.), signatures and Yara/Snort/Sigma rules development.</p></li><li><p>
Knowledge of attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</p></li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li><p><br>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/Hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b><br>
About Us:</b></p><p></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Incident Response and Forensic Investigation Specialist (DFIR) (U.A.E National)

Corporate Research and Investigations Limited

<div><div>Since 1990, Corporate Research and Investigation Limited &quot;CRI Group&quot; has safeguarded businesses from fraud and corruption, providing integrity due diligence, employment background screening, third-party risk management and compliance and other professional investigative research services. CRI Group is a global firm with experts and resources located in key regional marketplaces across Asia Pacific, South Asia, the Middle East, North Africa, Europe and North America. The international nature of business today dictates an increasing demand for proactive measures designed to reduce the exposure of organizations to economic crime and civil wrongs, particularly in the financial, government and multinational business sectors.<br>
<br>
The Due Diligence Specialist conducts various analyses and investigative research services, including but not limited to public record research. The Investigative Analyst will complete all-source research, gather pertinent data, review intelligence gaps, prepare records and files, and complete associated investigations and reporting requirements.<br>
<br>
<b>Job Responsibilities:</b></div><ul><li>
Gather intelligence information by field observation, confidential information sources, or public records.</li><li>
Establish and maintain professional relationships with government agencies that provide public information.</li><li>
Collect, assimilate, analyze and evaluate extensively the results of research and investigations.</li><li>
Identify red flags in reports such as court cases, politically exposed persons, sanctions list, adverse media, inflated job titles, incorrect employment periods, forged qualifications, etc.</li><li>
Write well-structured, logical and objective reports regarding assessments on the status, legitimacy, general background, and overall reputation of a company and its principals, or subject individuals.</li><li>
Manage multiple due diligence, background screening and insurance claim investigations cases through the completion.</li><li>
Track progress and ensure timely completion of cases.</li><li>
Produce accurate, high-quality written reports.</li><li>
Ensure necessary follow-up actions to external stakeholders.</li><li>
Assist in document management that supports analyses performed.</li><li>
Coordinate with international team members and vendors to complete required scopes of work.</li><li>
Demonstrate excellent judgment and be driven by professional excellence and a commitment to the organization&rsquo;s vision.</li><li>
Must have experience in Financial Crime Investigations, Coporate /field investigations and Forensic Investigations skills</li></ul><div><br>
<b>
Qualifications and Requirements:</b></div><ul><li>
Must have a bachelor&rsquo;s degree majoring in Media, Journalism, Law, International Relations/Affairs or other related areas of study.</li><li>
Having at least 1-3 years of relevant experience.</li><li>
Prior work experience in due diligence, research, legal, investigations or risk management field will be preferred.</li><li>
Additional qualifications may be specified and receive preference, depending upon the nature of the position.</li><li>
Must have experience in Finacial Crime Risk Identification- Identify assess and document fraud, bribery or corruption indicators, recognize red flags.</li><li>
Must be willing to participate in the Company&rsquo;s pre-employment screening process, including drug testing and background investigation.</li><li>
Must have experience in Coporate/field Investigations -Manage on ground investigations, interviews, evidence and collections and case reporting.</li><li>
Must have experience in Forensic Investigations Skills - Evidence handling, Digital forensics, chain of custody and audit documentation.</li></ul></div>

Forensic Investigator - Financial Crime Investigations & Due Diligence

Search 10000+ Digital forensics investigator jobs near you this October. New roles added regularly across leading industries. Apply today.