The Intelligence Directorate works collaboratively with the NCA Investigations Directorate and partners to deliver a unified crime fighting response.
Serious and organised crime (SOC) is one of the recognised national security threats, estimated at costing the UK economy over £37 billion every year.

In the Intelligence Directorate we collect, record and enhance intelligence to build a picture of that SOC, sharing this with partners in the UK and abroad. Then, through the exploitation of intelligence, we flex law enforcement’s collective resources against these dynamic threats. We are continuously looking for new opportunities to enhance traditional capabilities to increase the quantity and quality of available intelligence and maximise its potential for exploitation.

Within the Intelligence directorate is the Forensic Services Department (FSD), providing both traditional and digital forensic capabilities. The digital forensic footprint extends to both scene and laboratory based examinations, and the specialist capabilities of the Cyber Digital Forensics team.

Cyber Digital Forensic Officers are responsible for supporting the National Cyber Crime Unit (NCCU) operational work through:
• Acquisition and analysis of digital media
• Cyber incident response
• Network forensic recovery and examination
• Malware analysis

Officers are required to work in both a laboratory and crime scene environment to ensure preservation, collection and examination of an array of digital media and evidence sources.

Job description

To be successful in this role, you will be able to demonstrate a good working knowledge of digital forensics processes and procedures within the laboratory and at scene.

We are seeking candidates, to work at our Warrington site, who are experienced at working within a laboratory environment to acquire and examine an array of digital devices, and are able to preserve and secure digital evidence at crime scenes and witnesses premises alike.

The role holder will primarily work on a variety of cyber-enabled and dependant crime investigations, examining digital devices/evidence in support of investigating officers. They must be prepared to self-develop technical skillset to maintain knowledge and awareness of the cyber threat landscape.
 

Responsibilities

Key responsibilities for this role include:

• Ensure the integrity and continuity of exhibits by correct handling, storage and documentation.

• Conduct laboratory and scene based forensic acquisitions of digital media in order to obtain optimum intelligence/evidence, in line with relevant legislation and accreditation standards.

• Conduct reactive incident response and pro-active scene-based deployments to ensure thorough identification and collection of digital evidence sources.

• Examination and analysis of various sources of digital evidence and media, including network captures, volatile memory and malware analysis.

• Work with Investigations teams to provide specialist advice and guidance on a range of digital investigation opportunities.

• Ensure the quality, secure handling and dissemination of intelligence and evidential material; maintaining confidentiality, sensitivity and duty of care.

• Support the pursuit, maintenance and continuous improvement of ISO accreditation and forensic regulation for NCA Forensic services.

• Demonstrate and maintain a portfolio of technical competencies.

• Provide support to core investigative functions including disclosure, exhibit handling and presentation of written and oral evidence.

• Conduct case management and create, maintain and update departmental records, including case files and reports.

• Build good working relationships with both internal and external partners.

This role requires officers to obtain DV Enhanced within 12 months of entry

***All NCA officers must hold SC Enhanced upon entry as a minimum. To meet the National Security Vetting requirements for this role you will need to have resided in the UK for a minimum of 3 out of the past 5 years. For more information please see the Candidate information Pack***

Licences

Full DVLA License (Includes Full EU Licenses) or the ability to obtain a Full Driving License within one year in post.

Qualifications

The following qualifications/skills are essential to the role and proof will be required at interview:

• Intermediate level certification in Digital Forensics


Please ensure the dates of any accreditations you are relying on, are entered on to the CV.

Should you progress to the assessment stage of the process, you will be required to provide a copy of the original certificate.

Failure to provide evidence at interview may result in your application not progressing to the next stage.

Behaviours

We'll assess you against these behaviours during the selection process:

• Working Together
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Experience in digital forensics, incident response or security operation centre activities
• Good knowledge of various operating systems and ability to examine accordingly
• Ability to communicate technical detail to a wide ranging audience
• Ability to maintain a competency portfolio of technical skills

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is SECURITY CHECK (SC)

Medical

Successful candidates will be expected to have a medical.