Digital Evidence Specialist

Duties
Role:
The Digital Evidence Specialist is responsible for the provision of highly specialized technical services related to digital forensic examinations for clients with the RCMP, and other government agencies (municipal, provincial and federal) Key duties include:
• Participates in operational policing activities such as search warrants, digital forensic acquisitions and examinations as a designated Peace Officer or in the accompaniment of a police officer.
• Examine electronic devices and technology such as but not limited to personal computers, cellular phones, mobile devices, networking devices, gaming consoles, data storage devices and other emerging technologies which requires some general hardware knowledge and troubleshooting capabilities.
• Plans, implements, maintains, tests, integrates and applies specialized digital forensic tools and techniques to provide highly specialized technical services related to digital forensic examinations for clients.
• Oversees/manages the security, safeguarding, handling and control of exhibits, evidence and police reports for assigned investigations.
• Prepares formal examination reports for investigations and creates disclosure packages for court prosecutions.
• Provides testimony in court which may include expert testimony.
• Conducts research, testing, verification, reverse engineering and application of workable solutions to emerging problems related to digital forensics.
• Participates in teams, cohorts, and joint task forces with other units and partner agencies to work on operations or research and development initiatives related to digital forensic.
• Installs, maintains, and manages hardware, software, servers, personal computers, and tools used for digital forensic services.
• Maintains a program of continuing study in order to develop greater expertise in digital forensic techniques, examination and analysis.

Intent of the process
"The immediate need is to staff 1 position on an indeterminate basis. A pool of candidates may be established and may be used to staff similar positions within the RCMP on an indeterminate basis or specified period (including term, acting appointments or assignments). This pool may also be used to staff similar positions, with various language and security requirements.Should a Civilian Member (CM) be found qualified and selected for appointment, the appointment will not result in a change of status to the Public Service (PS)category for the CM.

Positions to be filled
1

Important messages
"All job applications must be submitted through the https://emploisfp-psjobs.cfp-psc.gc.ca/psrs-srfp/applicant/page2440?fromMenu=true&toggleLanguage=en system. Testing/interviews will be conducted at locations of the employer's choice and may require candidates to travel to the test/interview location, Fredericton, N.B.Please note that candidates (including persons employed in the Public Service) will not be considered to be in travel status or on government business and travel costs will not be reimbursed. Consequently, candidates will be responsible for travel costs. **PLEASE ENSURE ALL OF YOUR PERSONAL INFORMATION IN YOUR https://emploisfp-psjobs.cfp-psc.gc.ca/psrs-srfp/applicant/page2440?fromMenu=true&toggleLanguage=en PROFILE/ACCOUNT IS ACCURATE AND UP TO DATE. **WE USE THE INFORMATION GENERATED BY THE SYSTEM FOR CONTACT AND SCREENING PURPOSES, NOT INFORMATION THAT IS FOUND ON YOUR RESUME/COVER LETTER.Candidates must meet all essential qualifications to be appointed to a position. This will be determined through the use of various evaluation tools. Candidates may be required to meet the asset qualifications or the organizational needs, depending on the requirements of the specific position being staffed. You must provide proof of education credentials. If you completed your education outside Canada, it is your responsibility to demonstrate the equivalency. Please refer to the following link for more information: http://www.cicic.ca Please identify clearly your substantive group and level and your employment status on your resume and/or application form. Our means of communication with applicants is via e-mail. Please ensure to include a functional e-mail address, which will accept messages from unknown users (some e-mail systems block these types of e-mails). It is the responsibility of the candidate to ensure accurate contact information is provided and updated as required.The Indigenous Career Navigators Program, among others, is designed to provide Indigenous peoples with advice and guidance through the application/hiring process. To Indigenous peoples seeking individual support related to your application or during the assessment phase, please contact our RCMP Indigenous Career Navigator (ICN): **The use of AI is prohibited.You must complete your application and future assessments independently without external help, including unauthorized internet resources or Artificial Intelligence (AI) tools) (for example, Copilot, ChatGPT, or any other form of AI.)You may be asked to explain or elaborate on your answers in a follow-up interview. Any violation may be investigated and result in serious consequences, including the rejection of your application. ""You will be required to answer screening questions to demonstrate how you meet the Essential Qualifications (Education and all Essential Experiences).When answering the screening questions, it is not sufficient to say that you have the required qualifications or to list your current or past responsibilities. Rather, you must provide concrete examples of tasks you have accomplished with significant details to explain the WHAT, WHEN, WHERE and HOW you acquired each qualification.For each experience criteria, please provide the following information:1- Name of the department or organization where the experience was acquired;
2- Title of the position occupied, group and level and the period(s) in which you performed the functions (M-Y to M-Y);
3- Specific details of tasks or projects demonstrating how the experience was acquired (Situation/Challenge, Tasks, Action and Result).Should your responses to the screening questions contain insufficient details to demonstrate that you meet the screening criteria, your application will not be given further consideration in this process. Candidates will not be solicited for incomplete or possible missing information."

---

Top Secret security clearance - of the RCMP."In accordance with the Treasury Board Secretariat (TBS) Directive on Security Screening, effective January 6, 2025, Canadian citizenship is a requirement for a Top Secret clearance. Please note that while a Top Secret clearance is not required at the time of application, all conditions of employment, including security clearance, must be met prior to appointment and maintained for the duration of employment in the position.Please refer to the TBS Directive on Security Screening for more information: https://www.tbs-sct.canada.ca/pol/doc-eng.aspx?id=32805#annA1 "• Willingness and ability to provide expert testimony in court.
• Willingness and ability to travel for work and/or training purposes using various modes of transportation, including owned or leased government transport, commercial and light aircraft and up to and including remote locations.
• Must have, and willing to maintain a valid class 5 driver’s license.
• Successful completion of a 2 year RCMP Technological Crime Understudy Program, if appointed in this role.
• Willingness and ability to work in a busy police environment, including exposure to unsettling and/or graphic material.
• Willingness and ability to work overtime, as required.
• Willingness and ability to work shift work (24 hours a day, 7 days a week and 365 days a year).
• Willingness and ability to work in adverse, unsanitary and sometimes hostile environments while assisting with the collection of digital evidence.

---

• Willingness and ability to provide expert testimony in court.
• Willingness and ability to travel for work and/or training purposes using various modes of transportation, including owned or leased government transport, commercial and light aircraft and up to and including remote locations.
• Must have, and willing to maintain a valid class 5 driver’s license.
• Successful completion of a 2 year RCMP Technological Crime Understudy Program, if appointed in this role.
• Willingness and ability to work in a busy police environment, including exposure to unsettling and/or graphic material.
• Willingness and ability to work overtime, as required.
• Willingness and ability to work shift work (24 hours a day, 7 days a week and 365 days a year).
• Willingness and ability to work in adverse, unsanitary and sometimes hostile environments while assisting with the collection of digital evidence.

---

EDUCATION
Graduation from a two-year program of study from a recognized post-secondary institution with acceptable specialization in computer science, information technology, information management or another specialty relevant to the position to be staffed.Notes:
• At the manager's discretion, an acceptable combination of education, training and/or experience may serve as an alternative to the minimum post-secondary education stated above. Whenever the minimum education is met using this alternative, it is met for the specific position only and must be re-assessed for other positions for which this alternative has been specified by the manager.

EXPERIENCE
• Experience extracting and conducting analyses of electronic data.

• Experience troubleshooting and/or problem solving with at least three of the following operating system platforms: Android, iOS, Windows, Linux or Macintosh.

• Experience preparing technical reports.

KNOWLEDGE
• Knowledge of the procedures used to document and preserve the integrity of evidence or exhibits.
• Knowledge of advanced information technology concepts including network protocols, component integration, networking, data storage and operating systems.
• Knowledge of scripting and programming in order to automate processes in support of forensics or system administration.

ABILITIES AND SKILLS
• Ability to communicate *effectively orally (required for court testimony).
• Ability to communicate **efficiently in writing (required for formal reports).
• Ability to plan and prioritize work.*Effectively is defined as the expression of ideas and concepts in a very clear, concise, convincing manner and in a logical sequence. All major issues/criteria are addressed, and answers are appropriate. Transmitting ideas using appropriate volume, speed, voice modulation, fluency, conciseness and expressiveness. Choosing appropriate vocabulary and grammar to express ideas.
• **Efficiently is defined as writing text in a clear and easily understood manner that is logically arranged, ideas are very well developed, material is relevant and accurate, grammar and vocabulary is superior.

---

Applied / assessed at a later date

English essential

---

CERTIFICATION
• A Computing Technology Industry Association (CompTIA) A+ certification or industry equivalent.

• A CompTIA Network + certification or industry equivalent.

EXPERIENCE
• Experience using forensics tools such as X-Ways, Cellebrite, Magnet Forensics, Accessdata FTK.

• Experience in managing or supporting Servers (including legacy Windows Server) environment.

• Experience in the application of forensic techniques and software applications designed for data analysis, such as password decryption, file systems recovery and extraction.

---

---

---

Preference will be given to veterans first, followed by Canadian citizens and permanent residents, with the exception of jobs located in Nunavut or Yukon. For positions located in Nunavut, qualified Inuit enrolled under the Nunavut Agreement will be appointed first. For positions located in Yukon, qualified Yukon First Nations will be appointed first, followed by qualified Indigenous persons.

Learn more about preference to veterans.

---

---

---

---