Computer Forensics Officer

Job Name: Computer Forensics and Investigations Officer

Job description

Forensics is the scientific analysis of people, places and things to collect evidence during crime investigations which helps to prove innocence or guilt in court.

Computer forensics, sometimes called digital forensics, has a like purpose. However, it specialises in the scientific analysis of computer communications and the data on computer storage devices, such as disks and CD-ROMs. (Niznik, JS n.d.) Typical applications of computer forensics are in "computer crimes" or "cyber crimes" including fraud, Internet and e-mail abuse, entry to pornographic Web sites, and hacking, as well as accidental deletions or alterations of data.

Duties and Responsibilities

Complete the tasks involved in the provision of specialist forensic and investigation services.
Conduct research into the testing, and validation where required, of new or existing forensic tools.
Prepare administrative and technical reports for presentation to internal and external clients, for use in court/disciplinary processes.
Research and develop policies and work instructions to ensure compliance with relevant legislation.
Provide high-level advice, guidance and support to internal and external clients relating to IT security matters. (www.ato.gov.au/careeers, 2007)

Forensic and Technical team members, work closely with operational teams to provide a leading role in forensic and technical support to operations and AFP partners, customers or stakeholders. This work may include:

Developing team members and fulfilling a guiding, mentoring and advisory role;
Contributing to and supporting investigations and Technical Intelligence processes;
international clients;
Planning and conducting forensic examinations, technical operations and analyses (including technical analyses) into crime;
Undertaking technical support to AFP operations and surveillance tasking; and
Maintaining currency in forensic examination processes, technical operations and/or Technical Intelligence through ongoing professional development and learning opportunities outside the formal education process. (www.afp.gov.au, 2007)

Job requirements
Technical Skills

Demonstrated knowledge, skills and experience in computer forensics, including the use of computer forensic tools, techniques and methodologies.
Demonstrated knowledge, skills, experience and interest in operating systems (Windows, Unix, Linux) and/or computer and network security.
Demonstrated ability to research and develop electronic investigation methodologies, tools and legislative requirements as required.
The ability to develop and provide training in computer forensics and electronic crime.

(www.ato.gov.au/careeers, 2007)

The particular specialist or technical requirements of the role are defined in the relevant section of the Role Description.

There are no specific technical knowledge and skills selection criteria. This is because the technical knowledge and skills are required to be expressed in the way that you manage and achieve results, lead others and contribute to strategic thinking. These important aspects of the role are included in the selection criteria above.

It is expected that your demonstration of the above capabilities will also demonstrate a high level of technical knowledge and skills in the relevant area. (www.afp.gov.au/job_listing/selection_criteria/selection_criteria_band_6.html)

It is envisaged that you will have a couple of years commercial experience and be able to demonstrate a commitment to building a career in the Forensic world. (seek.com.au, 2007)

You must have excellent communication skills (verbal and written). You must be able to demonstrate the ability to build and maintain relationships, both with clients and your team members. (mycareer.com.au, 2007)

You will have a consultative flair, be able to work autonomously within a team structure and have an integrity based and proactive approach to all you do. (seek.com.au, 2007)

Success in this role will stem from your proven experience in computer forensics and electronic investigation methodologies as well as operating systems or network security. (careerone.com.au, 2007)

Formal Qualifications:

Tertiary qualified in a relevant discipline preferably Computer Science or Engineering and have above average results. (seek.com.au, 2007)

Appropriate tertiary qualifications or relevant professional experience is desirable. A Certificate IV in Government (Fraud Investigations) or equivalent, or a willingness to obtain this qualification, will be a requirement for this role. (www.ato.gov.au)

Computer science qualifications and experience in computer forensic tools such as Encase and FTK. (PPB)

Salary
Domestic:
APS 6- $ 63,372 - $ 71,649 (plus superannuation) (ATO)
Band 6 $70,465 - $77,746 (AFP)
$70,000 - $110,000 Pkg Neg (Jackson Langford and Associates)

International:
UK Average Minimum Salary 55,532 GPB = $ 139,344 AU

Industry/Organisation
Computer forensics jobs for both consultants and employees are often through law-enforcement agencies, military and government intelligence agencies, and private security and consulting companies.

Australian High Tech Crime Commission staff is supplied by the contributing agencies including police services within Australia, various Government departments and private industry.¿ Job listings - list the job advertisement you have used & the url. Your job reference must contain the organisation name, position name, date and URL.

Jackson Langford and Associates Computer Forensics Investigations, 13 August 2007 Source: Seek Australian jobs http://www.seek.com.au/jobsearch/index.ascx?DateRange=31&Keywords=computer%20forensics&searchfrom=quick

Australian Taxation Office, Computer Forensics and Investigations Officer, Canberra Times Saturday 11 August 2007 http://www.ato.gov.au/careers/pathway.asp?pc=001/058/001/009&mnu=&st=&cy=1&mf

Australian Federal Police, Forensic & Technical Team Member, 16 August 2007, http://www.afp.gov.au/job_listing/selection_criteria/selection_criteria_band_6.html

PPB, Forensic IT Specialist., No date http://www.ppb.com.au/site/page.cfm?u=322&print=1_

Other References used
Niznik, JS n.d., `Computer Forensics`, [online] http://jobsearchtech.about.com/od/computerjob13/a/comp_forensics.html(12 August 2007)

Computer Forensic Skills in the UK Source: IT Jobs Watch

http://www.itjobswatch.co.uk/jobs/uk/computer%20forensics

Differences observed

Computer forensics experts are often called "Cyber Cops", "Cyber Investigators" or "Digital Detectives". (Niznik, JS n.d.)

Computer forensics draws to a varying degree from a number of other disciplines including Accounting, Law, and Computer Science. For example, a Computer Auditor will utilise his/her accounting, auditing and investigative skills to assist in detection of fraud and determine core issues of financial discrepancies; the Digital Detective¿s goal is to identify exactly what happened on a digital system and who was responsible through a structured, investigative approach.

A Lawyer's concern is to ensure that all evidence is preserved in a manner acceptable to the Courts while a Computer Forensic Officer ensures that the reporting of digital evidence in a manner that is legally acceptable.

A Programmer/Technical Analyst draws on his/her sound technology background and knowledge of current technologies and trends to develop software tools and contribute to creative technical solutions to support a business. A Computer Forensic Officer then utilises these programming languages and software applications to solve cyber crime and Internet security management.

If working for the ATO, a Certificate IV in Government (Fraud Investigations) or equivalent, or a willingness to obtain this qualification, will be a requirement for this role.

As the position is security assessed, security clearance at the Highly Protected level will be required.