Information Technology Specialist (Security) Full Time

Applicants must have demonstrated experience as listed below. This requirement is according to the AO Classification, Compensation, and Recruitment Systems which include interpretive guidance and reference to the OPM Operating Manual for Qualification Standards for General Schedule Positions. Specialized Experience: Applicants must have at least one full year (52 weeks) of specialized experience which is in or directly related to the line of work of this position. Specialized experience is demonstrated experience must demonstrate ALL areas defined below: Expertise in conducting forensic analysis of digital devices, including computers, mobile phones, and cloud environments, using industry-standard tools like EnCase, FTK, and Axiom. In-depth knowledge of data recovery techniques, file system structures, and operating system internals, enabling the extraction and analysis of deleted, hidden, or encrypted data. Experience in preparing detailed forensic reports and providing expert testimony in legal settings, ensuring findings are presented clearly and comply with legal standards and procedures. Equivalent Certifications Desired, but Not Required: GIAC Certified Forensic Examiner (GCFE) GIAC Reverse Engineering Malware (GREM) EnCase Certified Examiner (EnCE)