Digital Forensics Analyst Technical Lead

MSU Jobs•Biloxi, MS

About The Position

This position will serve as the Digital Forensics Analyst Technical Lead for the MCI facility at the Mississippi Gulf Coast Community College. In this role, the individual has responsibility for managing the Digital Forensics Lab (DFL) associated with the MCI facility. Including configuration/installation/operations of existing forensics hardware and software, the primary person in assisting other Law Enforcement (LE) partnered agencies in conducting digital forensics analysis, coordinator between agency partners, responsible for on-site development, implementation quality assurance, and management of the DFL environment and associated systems. The candidate will assess and develop policies and procedures governing the MCI DFL and assist the site's senior technical advisor in gathering data analytics, contract, and budget activities related to the DFL. Salary Grade : 15 Please see Staff Compensation Structure for salary ranges.

Requirements

Education: Bachelor's degree in a related field.
Experience: Five+ years directly related to the duties and responsibilities specified.
Due to the nature of our co-op with our military partners, U.S. citizenship status is a requirement.
Substitution allowed: Any equivalent combination of related experience and/or education approved by the Department of Human Resources Management
Excellent knowledge of a full range of digital and cyber forensics hardware and software
Proficient in the latest forensic, response, and reverse engineering skills and astute in the latest exploit methodologies
Knowledge of a basic understanding of legalities surrounding the discovery and analysis of electronically stored information
Knowledge of existing and emerging legal issues within information security environments (i.e., data privacy)
Possession of excellent problem-solving, analytical, and critical thinking skills
Ability to gather facts and use effective analytical and evaluative methods to assess information, plan the sequence of actions necessary, make sound decisions, and solve various forensic systems problems.
Ability to maintain an up-to-date awareness of technological advances and predict how management can meet future requirements.
Interpersonal and communication skills; ability to communicate orally and in writing and foster a cooperative work environment.
Understanding of electronic investigation, forensic tools, and methodologies. Including log correlation and analysis, forensically handling electronic data, knowledge of computer security investigative processes.
Ability to maintain a high level of professionalism at all times while representing MCI and the university in internal and external interactions.

Nice To Haves

Ability to work in time-sensitive and stressful situations with ease and professionalism
Versed in computer security investigative processes
Understanding of electronic investigation, forensic tools, and methodologies. Including log correlation and analysis and forensically handling electronic data
Possession of one or more forensics certifications, including GCFE, CCI, GREM, CHFI, GCFA, or CCFP ISFCE CCE - Certified Computer Examiner Certification, SANS CGFAForensic Analyst or GCFE- Forensic Examiner Certification, ISC(2) – CCFP - Certified Cyber Forensics Professional Certification
Able to maintain proficiency in digital forensics technology and accreditations through self-paced specialized training
Versed in Microsoft office suite

Responsibilities

Experienced with Cyber/Digital Forensics tools, including e-discovery and forensic imaging tools and techniques.
Experienced with COTS forensics products, including EnCase, SIFT, X-Ways, FTK, Magnet Forensics products (ex. Axiom, Automate, Graykey), and Cellebrite.
Able to understand systems engineering and computing platforms, including Windows, OSX, and Linux
Manage DFL operations with the Department of Public Safety and other partnered Law Enforcement agencies.
Effectively lead LE partner(s) in utilizing the lab's forensics networked capabilities through technical support.
Perform assessments with users in analyzing deficiencies in tested forensics tools and provide a risk assessment of unresolved anomalies.
Assist in accomplishing forensic analysis with techniques, including traditional disk image analysis, memory analysis, and malware analysis or static and dynamic reverse engineering
Develops and maintains Standard Operating Procedures for the DFL, not limited to utilization, installation, configuration, and troubleshooting of complex applications with forensics hardware/software, operating system software, and specialized equipment such as Forensics Recovery Evidence Devices, servers, and network interfaces.
Able to work in an environment of rapidly changing technology and requirements in support of the MCI partner's mission.
May be responsible for training, assisting, or assigning tasks to others.
May provide input to performance reviews of other employees.