IT Cybersecurity Specialist (Digital Forensic Examiner)

IT Cybersecurity Specialist (Digital Forensic Examiner)

Department: Other Agencies and Independent Organizations

Location(s): Washington, District of Columbia

Salary Range: $121785 - $158322 Per Year

Job Summary: The EPA Office of Inspector General is an independent office within the EPA that helps the agency protect the environment in a more efficient & cost effective manner. We perform audits, evaluations, & investigations of the EPA to promote economy, efficiency, and to prevent and detect fraud, waste and abuse. We strive to provide solutions to problems that ultimately result in making America a cleaner and healthier place.

Major Duties:

• Please note: This position has a Selective Placement Factor that must be met and supported by your applicant package. This position is located in EPA, Office of Inspector General, Office of Investigations, Electronics Crimes Unit. If selected, you will be responsible for providing investigative support to all elements of the OIG in the seizure or collection of digital, electronic, or computer-related evidence. Investigative findings may form the basis for criminal or civil prosecution by the Department of Justice; civil action by EPA. This position is designated as a “Primary Position” pursuant to 5 CFR 842.802. Primary duties mean those duties of a position that: (a) Are paramount in influence or weight; that is, constitute the basic reasons for the existence of the position; (b) Occupy a substantial portion of the individual's working time over a typical work cycle; and (c) Are assigned on a regular and recurring basis. The ideal candidate will perform the following duties: Evidence Collection: Securely seizing, imaging, and preserving digital storage devices (hard drives, mobile phones, USB drives) to prevent data alteration. Provides on-scene technical support and assistance during the execution of search warrants. Uses software and hardware forensic tools to extract, preserve, analyze, and present evidence for further investigations or testing. Data Analysis: Using specialized tools (e.g., Cellebrite, Magnet Forensics) to examine data, including deleted files, emails, passwords, and multimedia. Reporting: Documenting findings in detailed reports for use in legal proceedings. Serves as subject matter expert on technical matters relating to digital evidence and testify in court or at hearings as an expert witness in the area of digital forensics. Supports investigations into cybercrimes and crypto currency fraud: Technical investigations in crimes involving but not limited to fraud, sexual exploitation, and violent crimes involving digital devices. Perform systems updates, regular maintenance and Lifecyle replacements of all forensic devices. Performs other duties of a similar nature and level as assigned May serve as contract representative with vendors. Works closely with other personnel within the OIG, EPA, law enforcement organizations, and professional business community in investigating and resolving allegations of criminal, civil, and administrative misconduct.

Qualifications: All applicants must have 52 weeks of specialized experience. Specialized experience is experience that equipped the applicant with the particular knowledge, skills, and abilities to perform successfully the duties of the position, and that is typically in or related to the work of the position to be filled. Experience may have been obtained in either the federal service or its equivalent with state or local government, the private sector, or nongovernmental organizations. GS-13: You must possess one year of specialized experience equivalent to at least the GS-12 level or equivalent band of responsibility in the Federal service to include: GS-13: You must possess one year of specialized experience equivalent to at least the GS-12 level or equivalent band of responsibility in the Federal service to include: 1) Knowledge of the techniques used in acquisition, examination, and analysis of digital evidence. 2) ability to prepare effective investigative reports and present information to stakeholders in an accurate, concise, and logical manner; 3) Knowledge of the processes and procedures involved in installing, configuring, and testing hardware and software on workstations, and peripherals in a networked environment.; 4) Knowledge of the functions and capabilities of network hardware and software in a networked environment; and 5) Knowledge of the component parts of personal computers, peripherals, servers, mobile devices, and their associated functionality. Your resume will be evaluated based on the following competencies: Complex Forensic Analysis. Independently performing deep-dive forensic imaging and analysis on non-standard or encrypted file systems, including the use of hex editors and custom scripts to recover fragmented or intentionally deleted data. Evidentiary Integrity & Litigation Support: The ability to effectively write and present findings in an accurate, logical and concise manner. Leading the lifecycle of digital evidence—from seizure to courtroom presentation, including the successful defense of forensic methodologies under technical "Daubert" or "Frye" legal challenges. Standards & Validation: Managing the technical validation of forensic hardware and software (e.g., EnCase, FTK, Magnet AXIOM, Cellebrite) to ensure results are scientifically sound and repeatable for federal prosecution. Technical Leadership in Crisis: Serving as a primary technical lead during multi-faceted investigations, providing real-time guidance to junior examiners and coordinating the forensic workflow of multiple concurrent high-priority cases. Advanced Artifact Interpretation: Analyzing complex system artifacts (e.g., Windows Registry, LNK files, Shellbags, and Unified Logs) to reconstruct user activity and establish a definitive timeline of events for criminal or administrative inquiries. Evidence of the above specialized experience must be supported by detailed documentation of duties performed in positions held. Your resume is the key means we have for evaluating your skills, knowledge, and abilities as they relate to this position. Therefore, we encourage you to be clear and specific when describing your experience. We will not make assumptions regarding your experience or based on job titles alone. If your resume does not support your questionnaire answers, we will not allow credit for your response(s). Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. Applicants must meet the qualifications for this position within thirty (30) days of the closing date of this announcement.

How to Apply: You are strongly encouraged to read the entire announcement before you submit your application for this position. To begin the application process, click the Apply button to the top right on this screen, follow the prompts to log-in/register, submit all required documents, and complete the assessment questionnaire. To be considered, you must submit a complete application package by 11:59 PM Eastern Time on the day the announcement closes. As referenced in the Required Documents section, all required supporting documents will be collected electronically via the USAJOBS document portfolio feature. It is recommended that you review your application materials after they have been uploaded to your application to ensure they conform to the requirements stated in the announcement. If you have any questions or concerns regarding your application, please contact the HR Specialist listed on the announcement. If you cannot apply online, you must contact the HR Specialist listed below for assistance no later than two business days prior to the closing date of this announcement. You must provide complete application materials by the day the announcement closes. For detailed instructions to assist you in ensuring your application package is received, go to EPA Announcement Policies and Procedures. REASONABLE ACCOMMODATION EPA welcomes applications from persons with disabilities. Through the reasonable accommodation process, we provide persons with disabilities an equal opportunity to enjoy the benefits and privileges of employment that persons without disabilities enjoy. A reasonable accommodation is any change in the work environment or in the way things are customarily done. An accommodation removes workplace barriers and enables an applicant with a disability to have an equal opportunity to participate in the application process, be considered for a position, and, if hired, perform the essential functions of their job. The EPA National Reasonable Accommodation Coordinators will provide assistance to you, the Human Resources Office, and/or the hiring official as needed. For more information, refer to EPA's Reasonable Accommodation website. Below is more detailed information about how to request a reasonable accommodation during the application, selection, and hiring process: If you require reasonable accommodation for any part of the application process (submitting the application or completing the application process), contact the Human Resources Office listed below no later than two business days prior to the closing date of this announcement, and the Human Resources Office will work directly with you. If you are referred to the hiring official for consideration and need an accommodation during the selection process, including the interview, notify the person who contacted you from the hiring official's office. If you do not hear back within three days about your reasonable accommodation request for the selection process, please notify EPA's National Reasonable Accommodation Coordinators via email at disabilityaccommodations@epa.gov. If you are selected and need an accommodation during the hiring process up to orientation, notify the HR Specialist who made the job offer to you. Please note: Determinations on requests for reasonable accommodation will be made on a case-by-case basis.

Application Deadline: 2026-03-24