Digital Forensics Analyst Technical Lead

Position Function:

This position will serve as the Digital Forensics Analyst Technical Lead for the MCI facility at
the Mississippi Gulf Coast Community College. In this role, the individual has responsibility
for managing the Digital Forensics Lab (DFL) associated with the MCI facility. Including
configuration/installation/operations of existing forensics hardware and software, the
primary person in assisting other Law Enforcement (LE) partnered agencies in conducting
digital forensics analysis, coordinator between agency partners, responsible for on-site
development, implementation quality assurance, and management of the DFL
environment and associated systems. The candidate will assess and develop policies and
procedures governing the MCI DFL and assist the site's senior technical advisor in
gathering data analytics, contract, and budget activities related to the DFL.

Salary Grade:  15

Please see Staff Compensation Structure for salary ranges. 

Essential Duties and Responsibilities:

1. Experienced with Cyber/Digital Forensics tools, including e-discovery and forensic
imaging tools and techniques.
2. Experienced with COTS forensics products, including EnCase, SIFT, X-Ways, FTK, Magnet Forensics products (ex. Axiom, Automate, Graykey), and Cellebrite.
3. Able to understand systems engineering and computing platforms, including Windows,
OSX, and Linux
4. Manage DFL operations with the Department of Public Safety and other partnered Law
Enforcement agencies.
5. Effectively lead LE partner(s) in utilizing the lab's forensics networked capabilities
through technical support.
6. Perform assessments with users in analyzing deficiencies in tested forensics tools and
provide a risk assessment of unresolved anomalies.
7. Assist in accomplishing forensic analysis with techniques, including traditional disk
image analysis, memory analysis, and malware analysis or static and dynamic reverse
engineering
8. Develops and maintains Standard Operating Procedures for the DFL, not limited to
utilization, installation, configuration, and troubleshooting of complex applications with
forensics hardware/software, operating system software, and specialized equipment such
as Forensics Recovery Evidence Devices, servers, and network interfaces.
9. Able to work in an environment of rapidly changing technology and requirements in
support of the MCI partner's mission.
Supervisory Responsibility
May be responsible for training, assisting, or assigning tasks to others. May provide input to
performance reviews of other employees.
The above essential duties are representative of the major duties of positions in this
position. Specific duties and responsibilities may vary based upon departmental needs.
Other duties may be assigned to the above consistent with the knowledge, skills, and
abilities required for the job. Not all the duties may be assigned to a position.

Minimum Qualifications:

Education: Bachelor's degree in a related field.
Experience: Five+ years directly related to the duties and responsibilities specified.
Due to the nature of our co-op with our military partners, U.S. citizenship status is a
requirement.
Substitution allowed:
Any equivalent combination of related experience and/or education approved by the
Department of Human Resources Management

Preferred Qualifications:

• Ability to work in time-sensitive and stressful situations with ease and professionalism
• Versed in computer security investigative processes
• Understanding of electronic investigation, forensic tools, and methodologies. Including
log correlation and analysis and forensically handling electronic data
• Possession of one or more forensics certifications, including GCFE, CCI, GREM, CHFI,
GCFA, or CCFP ISFCE CCE - Certified Computer Examiner Certification, SANS CGFAForensic Analyst or GCFE- Forensic Examiner Certification, ISC(2) – CCFP - Certified Cyber
Forensics Professional Certification
• Able to maintain proficiency in digital forensics technology and accreditations through
self-paced specialized training
• Versed in Microsoft office suite

Knowledge, Skills, and Abilities:

1. Excellent knowledge of a full range of digital and cyber forensics hardware and software
2. Proficient in the latest forensic, response, and reverse engineering skills and astute in
the latest exploit methodologies
3. Knowledge of