Investigator/Forensic Analyst - HYBRID - 2 positions

What can I expect to do in this role?

The Ministry of Community Safety and Correctional Services, Ontario Provincial Police, and the Bureau Commander, Investigation and Support Bureau seeks a qualified employee to conduct investigations that deal with computer technology as an element. Assist with the preparation and execution of search warrants. Oversee and conduct electronic search and seizure procedures. To extract, examine and analyze electronic data for the purpose of developing, enhancing and clarifying evidence. To provide court testimony regarding digital evidence investigations.

How do I qualify?

Mandatory:

Ability to pass an OPP background security investigation.

Knowledge, Skills and Abilities:

Knowledge of relevant federal and provincial statutes including current case law and decisions pertaining to the gathering and extracting of electronic data. Understanding of the scope and limitations of judicial authorizations and the development of court documents such as search warrants.

Demonstrated skill using reporting and presentation tools and techniques to produce and present findings for disclosure and in court testimony.

Knowledge of operation, networking, troubleshooting, security protocols and principles for PC based, Macintosh, Linux and various microcomputer systems. Understanding of various types of computer hardware and technical specifications.

Knowledge of mobile devices, media storage cards and respective file systems and protocols.

Knowledge of network architectures (such as CDMA, HSPA, GSM and Blackberry Enterprise Servers), structure, data and voice transmission and the underlying data types associated to each.

Knowledge of bypassing lock codes to recover data from damaged devices by direct memory chip access (chip-off) and JTAG.

Knowledge of flash memory, NAND, NOR and EEPROM, their structure and operating characteristics, methodologies for extracting and understanding the data within such devices as cellular phones, USB flash drives and solid state drives.

Knowledge of various electronic media storage devices various consumer devices containing electronic media and other devices capable of housing data.

Knowledge of forensic acquisition processes and methodology to extract, validate, secure digital evidence and process the related evidence artifacts.

Knowledge of physical workings of storage media and the difference between physical and logical acquisitions.

Knowledge of specialized hardware and software write blocking and extraction tools, security, continuity and handling of evidence in accordance with Rules of Evidence, policies, protocols, procedures and practices.

Knowledge of forensic data recovery software, validation and techniques.

Knowledge of various file systems, such as NTFS and HFS, regarding their structure, limitations and usage such as data carving, data parsing, encoding and decoding data, reverse engineering, filtering and querying.

Demonstrated ability in computer mathematics including binary/hexadecimal/decimal conversions and endianness and encoding schemes. Analytical, problem-solving and evaluative skills to conduct forensics investigations including the extraction, examination and analysis of electronic data.

Oral communication skills and interpersonal skills to liaise with a diverse group of OPP staff, law enforcement agencies and crown attorneys, provide technical advice and support, communicate complex technical information and system capabilities and deliver presentations/ lectures.

Ability to work in a team environment.

Knowledge of Ontario's Mobilization & Engagement Model of Community Policing.

How to Apply:

Resume / cover letter must be received no later than 11:59 pm on 09-Feb-2018. Submit quoting WIN ID # (if applicable) and file # 18-014 showing how your qualifications, training and experience relate to the position to: David Walach.

Only those applicants selected for interview will be contacted.

Email: david.walach@opp.ca

The OPP is an equal opportunity employer, and will accommodate your needs under the Ontario Human Rights Code.

Collection of Information

Your personal information is being collected and will be used to determine your qualifications for employment with the Ontario Public Service, and for recruitment modernization initiatives. OPS Careers is an authorized common service in accordance with s. 6 of the Ministry of Government Services Act, R.S.O. 1990, c. M.25 and this collection of personal information is necessary to the proper administration of OPS Careers.

Please do not provide more personal information than what is asked of you. For example, do not include your social insurance number, photograph, or banking information, etc. with your application. We strongly encourage you not to provide us with information beyond that which is requested in the job posting.

If you have any questions about the collection, use, disclosure, or retention of your personal information, please contact us.

All external applicants (including former employees of the Ontario Public Service) applying to a competition in a ministry or Commission public body must disclose (either in the cover letter or resume) previous employment with the Ontario Public Service. Disclosure must include positions held, dates of employment and any active restrictions as applicable from being rehired by the Ontario Public Service. Active restrictions can include time and/or ministry-specific restrictions currently in force, and may preclude a former employee from being offered a position with the Ontario Public Service for a specific time period (e.g. one year), or from being offered a position with a specific ministry (either for a pre-determined time period or indefinitely). The circumstances around an employee's exit will be considered prior to an offer of employment.

Remember: The deadline to apply is Friday, February 9, 2018 11:59 pm EST. Late applications will not be accepted.

We thank you for your interest. Only those selected for further screening or an interview will be contacted.