The Intelligence Directorate works collaboratively with the NCA Investigations Directorate and partners to deliver a unified crime fighting response.

Serious and organised crime (SOC) is one of the recognised national security threats, estimated at costing the UK economy over £37 billion every year.

In the Intelligence Directorate we collect, record and enhance intelligence to build a picture of that SOC, sharing this with partners in the UK and abroad. Then, through the exploitation of intelligence, we flex law enforcement’s collective resources against these dynamic threats. We are continuously looking for new opportunities to enhance traditional capabilities to increase the quantity and quality of available intelligence and maximise its potential for exploitation.

Within the Intelligence directorate is the Forensic Services Department (FSD), providing both traditional and digital forensic capabilities. The digital forensic footprint extends to both scene and laboratory based examinations, and the specialist capabilities of the Cyber Digital Forensics team.

Cyber Digital Forensic Officers are responsible for supporting the National Cyber Crime Unit (NCCU) operational work through:

• Acquisition and analysis of digital media
• Cyber incident response
• Network forensic recovery and examination
• Malware analysis

Officers are required to work in both a laboratory and crime scene environment to ensure preservation, collection and examination of an array of digital media and evidence sources.

Job description

To be successful in this role, you will be able to demonstrate a good working knowledge of digital forensics processes and procedures within the laboratory or scene.

You will manage and co-ordinate multifunctional forensic capabilities and staff, providing advice and support to cyber enabled and dependant crime investigations. As an integral decision maker between operational forensic activity, our partners and customers, you will demonstrate a robust attitude to forensic activity, evidencing value for money balanced against delivering bespoke forensic strategies.

We are seeking candidates who are experienced in acquiring and examining an array of digital evidence, and an ability to preserve and secure digital evidence at crime scenes and witness premises alike. The role holder must be prepared to self-develop technical skillset to maintain knowledge and awareness of the cyber threat landscape.
 

Responsibilities

Key Responsibilities include:
• Manage and supervise the cyber digital forensics team, allocating tasks and ensuring priorities are met
• Deputise for the laboratory/departmental manager
• Provide advice and guidance to Investigations teams in relation to effective preservation and examination of digital evidence sources
• Co-ordinate and complete digital forensic response to cyber incidents, ensuring evidential recovery and providing incident response guidance
• Manage and co-ordinate service delivery processes through the assessment and triage of forensic submissions
• Tactical support to internal and external partners in relation to cyber digital forensics
• Examination and analysis of various sources of digital evidence and media, including network captures, volatile memory and malware analysis
• Mentor and develop colleagues, ensuring compliance to Forensic quality standards
• Work to Quality Management standards in order to achieve and maintain appropriate regulated standards, supporting the Technical Manager as required
• Provide support to core investigative functions including disclosure, exhibit handling/management, presentation of written and oral evidence
• Ensure the quality, secure handling and dissemination of intelligence and evidential material; maintaining confidentiality, sensitivity and duty of care
• Manage the security and accuracy of intelligence, maintaining confidentiality, sensitivity and duty of care
• Develop and maintain effective working relationships with internal and external stakeholders in order to foster collaborative working

***All NCA officers must hold SC Enhanced upon entry as a minimum. To meet the National Security Vetting requirements for this role you will need to have resided in the UK for a minimum of 3 out of the past 5 years. For more information please see the Candidate information Pack***

Security Check – needs DV to be obtained once in post

Licences

Full DVLA Licence (Includes Full EU Licences) or the ability to obtain a Full Driving Licence within one year in post.

Qualifications

The following qualifications/skills are essential to the role and proof will be required at interview:

• Intermediate Level Certification in Digital Forensics.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Seeing the Big Picture

Technical skills

We'll assess you against these technical skills during the selection process:

• Experience of leading and managing a technical team to deliver against strict deadlines
• Good knowledge of various operating systems and ability to examine accordingly
• Ability to provide advice and guidance in relation to digital evidence, or incident response, to ensure successful data preservation and collection
• A proven knowledge of key legislation affecting the ability to obtain digital evidence

Security

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check

Medical

Successful candidates will be expected to have a medical.