Image of seven very unique and colourful doors in a row with text reading: Opportunity is knocking!

CS-03, Senior Computer Forensic Analyst, Criminal Investigations Division, Vancouver, BC

This notice of job opportunity is closed and you can no longer submit an application.

Group and level
CS-003
Location
Vancouver, BC (Downtown)/ C.-B. (Centre Ville)
Appointment Type
Perm/Temp: Acting, Lateral Move, Permanent, Promotion
Closing Date
December 07, 2018 11:59 PM Eastern Time
Pool to be created
Yes
Salary range
$84,502 to $104,842
Region
Pacific
Language
English Essential
Requisition number
53776546

About the job

Don't miss out on your opportunity to work for one of the Top 100 Employers in Canada!

Key Activities

CS-0450:

Provides advanced digital forensic investigative services relating to the recovery and examination of data from computers and other electronic storage devices in order to use the data as evidence in criminal prosecutions.  These services include search, seizure, recovery, decryption, preservation and analysis of data, relevant to criminal investigations.

Conducts on-site search and seizure of taxpayers' data and complex information systems, located at the search site or available to it, through the processing, analysis and evaluation of files, data, hardware and software seized pursuant to the terms of the search warrant.

Prepare reports detailing how the computer evidence was discovered and all of the steps taken during the retrieval process for use during the investigation, prosecution and trial, i.e., review, process  and analyze  seized digital evidence  by identifying, separating, organizing and rendering the relevant digital evidence into a readable, searchable, indexed and organized format. 

Provides testimony in court regarding the evidence collected and methodologies used to acquire the evidence.

Installation, maintenance and testing of the forensic computing environment (hardware, software and forensic techniques) and related equipment; analyzes and evaluates computer systems and software proposed for implementation and makes recommendations.   

Selects, and educates investigators on the use of litigation support applications suitable for e-disclosure, in conjunction with the PPSC; creates, develops and maintains databases for litigation support purposes; assists in the design of investigative databases; and maintains documentation for litigation support software and related databases.

Ensures that adequate steps are taken and/or proposes new methodology to ensure the security of data related to criminal investigations between CRA offices and external partners including the Public Prosecutions Service of Canada (PPSC), defense lawyers and other enforcement agencies.

Troubleshoots complex issues encountered, throughout the course of the investigation, on internal (forensic computer software and hardware) and external devices, i.e., seized digital devices and systems, including large and complex networks, computers, servers, cell phones, tablets, all storage media, software and other peripherals, issues encountered during the collection, recovery, preservation and processing stages.  

Prepares and disseminates forensic software, tools and equipment; i.e., prepares, configures and tests forensic laptop image and other tools before they are available for use in cases and provides training on same.

Develops, maintains and cultivates a network/partnership with stakeholders, other law enforcement agencies, etc.; ensures that communications are consistent and solicits cooperation, joint participation on cases, as required; and promotes the sharing of technical training and expertise.

Provides guidance and technical assistance/support in resolving/executing forensic issues/solutions pertaining to solicitor-client privilege claims; e.g. arriving at a mutually agreeable protocol for the examination of sealed computer media, processing potential privileged data, reporting to the court and providing assistance as required during the privilege hearing.

Identifies emerging technical and legal issues pertaining to the seizure and processing of digital data and its use during the investigation, prosecution and trial; participates in the development of informatics investigation procedures, and quality improvement initiatives.

Monitors case law for significant cases impacting digital forensics.  Researches and develops new protocols to conform with rapid changes in the law relating to technological issues and communicates findings to CRA or other stakeholders.

Monitors and tests the quantitative and qualitative adequacy of the forensic equipment (hardware and software) and adherence to national policies and procedures and prepares documented business cases and recommendations regarding same.

Installs and provides technical guidance in relation to the setup of mobile electronic courtroom equipment.

Conducts research, validates tests done by the Computer Forensic Analysts and attends advanced training into new technology and develops new techniques to update and improve forensic processes and tools used in the searching, seizing, preserving, processing and presentation of digital devices and electronically stored information. 

Participate in the development and delivery of training of digital forensic investigations skills and use of specialized equipment.

To apply

Persons living in Canada and Canadian citizens living abroad.

Preference for appointment will be given to veterans and to Canadian citizens, in that order.

Any expenses incurred by candidates from the general public in connection with assessments in the staffing process (travel for testing, etc.) will be borne by the candidates themselves.

Please note that this process will be used to staff positions in Vancouver only. As a result, we will expect candidates appointed from this process to relocate to this location. Candidates from the general public will have to pay any expenses related to relocation as well as any travel for assessments.

The area of selection includes individuals with preferred status who live or work within the general rule of minimum distance of the position(s) being staffed.

Proof of Canadian citizenship will be required at the assessment stage.

We encourage you to submit your on-line application as soon as possible as applications will be reviewed on an on-going basis. Assessment and appointment may take place prior to the poster closing.

The closing date specified on this Notice of Job Opportunity is subject to change, either to extend the notice period where insufficient candidates apply, or to shorten the notice period where an overabundance of candidates apply.

Please note that we will contact only the candidates selected for further consideration.

To be eligible, you'll need to meet the following Education and Experience requirements.

 

Education

Meet the CRA's minimum education standard for CS positions.

Approved CS education alternatives will be considered.

Note: By the closing date and time of this poster, you must upload your education credentials in the education section of your Candidate Profile to demonstrate that you meet the essential education requirements.

Experience

Eighteen (18) consecutive months experience gained in the last three (3) years in providing Digital Forensics services* in a government agency, law enforcement agency, or in the private sector.

*Experience in Digital Forensics services must include:

  1. Forensic evidence acquisition, imaging and preservation,
  2. Removal and replacement of internal storage media,
  3. Communicating forensic findings to investigators, lawyers or other stakeholders,
  4. Experience with at least two of the industry standard forensic tools:
    1. Cellebrite
    2. X-Ways
    3. EnCase
    4. FTK
    5. Nuix
    6. Intella
    7. Axiom / Internet Evidence Finder

For eligible veterans and members of the Canadian Forces who qualify under the Veteran Hiring Act (VHA): Twenty four (24) consecutive months experience gained in the last five (5) years providing digital forensics services in a government agency, law enforcement agency, or in the private sector.

The onus is on the candidate to demonstrate that they meet the experience requirement. Insufficient information may result in your application not being considered further.

If you have spent time in developmental assignments, please provide details and time frames of your assignment(s). We will consider each situation individually to determine if you meet the staffing requirements.

Candidates must have obtained the experience by the closing date of this notice.

Experience demonstrated in your application will be used at the screening for prerequisites stage and may be used at the assessment stage to assist the staffing board in evaluating a candidate's requirements for the position. Assessment results may be used at appointment to select candidate(s) for employment opportunities.

Assessment

Assessment

Essential

Any essential staffing requirements indicated below will be assessed/applied at a later date.

The following qualifications will be assessed using locally developed tool(s). Only those who achieve the minimum pass mark of 70% will be considered further in this staffing process.

  • Dependability – Reference Check
  • Knowledge of Computer Forensic techniques and tools – Interview
  • Ability to communicate effectively verbally in English - Interview

The following competency will be assessed using a CRA standardized assessment tool:

Candidates who already possess a Level 3 – Writing Skills in English, will not be required to re-write this test.

If you have previously written the CRA Writing Skills in English test, you must attach your test results document to your application. CRA employees do not need to attach test results to their application if their test results appear in ESS.

Assessment results from standardized assessment tools are portable to other staffing processes. Results from locally developed assessment tools are not portable to other staffing processes.

The following staffing requirement will be assessed/validated:

  • Performance validation

Asset

Any asset staffing requirements indicated below may be applied/assessed at a later date.

The following qualifications may be assessed using locally developed tool(s) with a pass mark of 70%:

  • Rules of evidence
  • Information seeking techniques
  • Decision Making
  • Interpersonal Skills
  • Ability to communicate effectively in writing in English
  • Ability to Manage Work and Achieve Effective Results

The following staffing requirements may be validated:

  • Employment Equity
  • Budget considerations
  • Minimize business disruption
  • Program Continuity
  • Rotational Assignment
  • Availability throughout the appointment
  • Start date
  • Experience relevant to the position being staffed
  • Experience in testifying in court as a witness to digital forensics practices

Results from the assessment of essential and asset staffing requirements may be used at the appointment stage to select candidate(s) for appointment.

Required Candidate Availability during Assessment:

Candidates are expected to make themselves available for assessment when scheduled. Please note that there will be no rescheduling without extenuating circumstances. Candidates who do not present themselves at their scheduled sessions will not be considered furthered and deemed to have withdrawn from the process.

Tentative assessment schedule (subject to change):

Assessments are tentatively scheduled from December 10, 2018 to February 1, 2019

Essential Conditions of Employment

  • Valid Full-Privilege Driver's License or personal mobility to a degree normally associated with the possession of a valid full-privilege driver's license.
  • Travel Required
  • Overtime required
  • Work evenings and/or on weekends required
  • Work shifts or based on flex time (including weekends and statutory days) required
  • Capacity to regularly lift objects weighting up to 20 kg
  • Willingness to follow training and pass it, which includes attendance in several 1 to 3 week mandatory courses that are scheduled outside of the Lower Mainland, BC
  • Level of personnel screening: Reliability Status

Candidate contact information

Candidates are solely responsible for ensuring that they read any messages related to this staffing process and meet any deadlines specified throughout the duration of this staffing process. Failure to do so may result in your application not being given further consideration at that stage of this staffing process.

Your candidate profile allows you to include a primary email address and a secondary email address. Your candidate profile also requires that you identify which email address will be your correspondence email address to receive courtesy message notifications related to this staffing process. When you do not have access to your correspondence email address, because you are out of the office, your email address changes, etc., it is your responsibility to ensure that you update your candidate profile so that you can receive courtesy message notifications and meet any deadlines specified.

Message notifications are issued as a courtesy. Even if you do not receive a message notification, you are responsible for meeting all deadlines specified throughout the duration of this staffing process. As a result, we recommend that you periodically access your candidate profile to ensure that you have read any messages related to this staffing process.

Want to know more?

For more information on staffing at the CRA and how to apply go to General information on staffing.

For a description of key terms used on CRA job notices, go to Definitions for job seekers.

The CRA is committed to building a skilled, diverse workforce reflective of Canadian society. CRA employees support the economic and social well-being of Canadians, and build public trust. We have high expectations, and our employees are held to the standards of conduct outlined in our Code of integrity and professional conduct and Directive on conflict of interest, gifts and hospitality, and post-employment.

Contact

Email address:  Staffing_Process.PAC-VAN-Burrard@cra-arc.gc.ca


Return to: Search jobs
Screen ID:
iss-49.1
Version: