Job Description

Digital Forensics Manager (Technical Lead - Devon & Cornwall)

Location: Police Headquarters, Exeter

Salary: Starts at A£48,546 rising by yearly increments to a maximum of A£52,809 per annum

Type of working arrangement: Hybrid Worker

Would you like to make a difference in your local community?

Do you have a strong IT background coupled with great people skills?

You could be part of a fast-paced technical team supporting victims of crime across the Southwest based in Exeter.

Job Description

As part of an ongoing investment to meet the increasing demand for digital devices to be examined, a fantastic opportunity is now available for a great leader within the Data Forensics Unit. You will be line managing highly technical staff, leading the way in digital forensic investigations covering all levels of criminality.

Skills and Qualifications

* A relevant degree or equivalent, and/or proven operational experience as a Digital Forensic Investigator or in an investigative role involving digital evidence.
* Hold a full UK driving licence - or be able to have suitable personal arrangements to be transported to various locations to undertake role as and when required.

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0004   Knowledge of cybersecurity and privacy principles.
• K0017   Knowledge of concepts and practices of processing digital forensic data.
• K0131   Knowledge of web mail collection, searching/analyzing techniques, tools, and cookies.
• K0133   Knowledge of types of digital forensics data and how to recognize them.
• K0134   Knowledge of deployable forensics.
• K0184   Knowledge of anti-forensics tactics, techniques, and procedures.
• K0185   Knowledge of forensics lab design configuration and support applications (e.g., VMWare, Wireshark).
• K0188   Knowledge of malware analysis tools (e.g., Oily Debug, Ida Pro).
• K0301   Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
• K0304   Knowledge of concepts and practices of processing digital forensic data.

Required Skills

• S0046   Skill in performing packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
• S0065   Skill in identifying and extracting data of forensic interest in diverse media (i.e., media forensics).
• S0069   Skill in setting up a forensic workstation.
• S0071   Skill in using forensic tool suites (e.g., EnCase, Sleuthkit, FTK).
• S0075   Skill in conducting forensic analyses in multiple operating system environments (e.g., mobile device systems).
• S0087   Skill in deep analysis of captured malicious code (e.g., malware forensics).
• S0088   Skill in using binary analysis tools (e.g., Hexedit, command code xxd, hexdump).
• S0090   Skill in analyzing anomalous code as malicious or benign.
• S0131   Skill in analyzing malware.
• S0156   Skill in performing packet-level analysis.

Required Abilities

• A0005  Ability to decrypt digital data collections.
• A0175  Ability to examine digital media on multiple operating system platforms.
• A0043  Ability to conduct forensic analyses in and for both Windows and Unix/Linux environments.