Investigator/Forensic Analyst

---

---

About the job

The Ministry of the Solicitor General, Ontario Provincial Police, and the Bureau Commander, Investigation and Support Bureau seek a qualified individual to conduct investigations that deal with computer technology as an element. Assist with the preparation and execution of search warrants. Oversee and conduct electronic search and seizure procedures. To extract, examine and analyze electronic data for the purpose of developing, enhancing and clarifying evidence. To provide court testimony regarding digital evidence investigations.

---

What you bring to the team

Mandatory requirements

Valid Ontario Driver's Licence.

Special Constable appointment status which include the ability to pass an OPP background security investigation.

Ability to work on a regularly scheduled on-call basis.

Ability to successfully complete the Digital Forensic Investigator Understudy Program and associated

Knowledge, Skills and Abilities:

Knowledge of relevant federal and provincial statutes including current case law and decisions pertaining to the gathering and extracting of electronic data. Understanding scope and limitations of judicial authorizations, development of court documents such as search warrants, reporting and presentation tools and techniques to produce and present findings for disclosure and in court testimony.

Knowledge of operation, networking, troubleshooting, security protocols and principles for PC based, Macintosh, Linux and various microcomputer systems. Understanding of various types of computer hardware and technical specifications, including components, peripherals, network topologies, RAID systems, servers, desktop and laptop computers.

Knowledge of mobile devices such as cellular phones, GPS, Tablets, SIM cards and media storage cards and respective file systems and protocols. Knowledge of network architectures, structure, data and voice transmission and the underlying data types associated to each.

Knowledge of bypassing lock codes to recover data from damaged devices such as tablets, mobile phones, and GPS's, by direct memory chip access (chip-off) and JTAG.

Knowledge of flash memory, NAND, NOR and EEPROM, their structure and operating characteristics, methodologies for extracting and understanding the data within such devices as cellular phones, USB flash drives and solid state drives.

Knowledge of forensic acquisition processes and methodology to extract, validate and secure digital evidence. Knowledge of physical workings of storage media, the difference between physical and logical acquisitions, specialized hardware and software write blocking and extraction tools, security, continuity and handling of evidence in accordance with Rules of Evidence.

Knowledge of processing evidence artifacts including but not limited to various documents, spreadsheets, email, chat, Internet history, call logs, SMS, log files, databases, compound documents, encrypted files, operating system artifacts and date/time validation.

Oral communication skills and interpersonal skills to liaise with a diverse group of OPP staff, law enforcement agencies and crown attorneys, provide technical advice and support, communicate complex technical information and system capabilities and deliver presentations/ lectures.

Ability to work effectively in a team environment.

Analytical, problem-solving and evaluative skills to conduct forensics investigations including the extraction, examination and analysis of electronic data.

Ability to isolate relevant evidentiary forensic artifacts from within large volumes of data, assemble them within the context of an investigation and articulate their cohesive meaning and relevance to the matter being investigated.

Additional Information:

Resume / cover letter must be received no later than 11:59 pm on 12-Nov-2020. Submit quoting WIN ID # (if applicable) and file # 20-133 showing how your qualifications, training and experience relate to the position to: Mairi Young.

Only those applicants selected for interview will be contacted.

Email: mairi.young@opp.ca

The Ontario Provincial Police is an equal opportunity employer and provides accommodation for job applicants in accordance with the Human Rights Code and the Accessibility for Ontarians with Disabilities Act. If you require accommodation in order to apply for this position, please contact the hiring manager.

---

Additional information:

---

Language requirements and assessment:
All external Ontario Public Service (OPS) job ads are posted in English and French. Check the "position(s) language" section at the top of each job ad for the language requirements. For all roles, candidates are assessed in English, the business language of the OPS. If the position is bilingual (English/French), you'll also need to pass a French-language proficiency test.

Exigences en matière de langue et évaluation:
Toutes les offres d'emploi externes de la fonction publique de l'Ontario (FPO) sont affichées en français et en anglais. Consultez la section « Langue du ou des postes » en haut de chaque offre d'emploi pour connaître les exigences linguistiques. Pour tous les postes, les candidats sont évalués en anglais, la langue d'affaires de la FPO. Si le poste est bilingue (anglais/français), vous devrez également passer un test de compétences linguistiques en français.

All external applicants (including former employees of the Ontario Public Service) applying to a competition in a ministry or Commission public body must disclose (either in the cover letter or resume) previous employment with the Ontario Public Service. Disclosure must include positions held, dates of employment and any active restrictions as applicable from being rehired by the Ontario Public Service. Active restrictions can include time and/or ministry-specific restrictions currently in force, and may preclude a former employee from being offered a position with the Ontario Public Service for a specific time period (e.g. one year), or from being offered a position with a specific ministry (either for a pre-determined time period or indefinitely). The circumstances around an employee's exit will be considered prior to an offer of employment.

Information collection notice

We are collecting your personal information to assess how well you meet the qualifications for employment with the Ontario Public Service, and for related recruitment purposes. The collection of personal information is necessary to the proper administration of OPS Careers, which is an authorized common service in accordance with s. 6 of the Ministry of Government Services Act, R.S.O. 1990, c. M.25.

Please do not include any more personal information than is needed for your application (for example, do not include your photograph or social insurance number).

If you have any questions about how your information is collected, used, shared or saved, please contact us.