Digital Forensics Analyst Technical Lead

Position Function:

This position will serve as the Digital Forensics Analyst Technical Lead for the MCI facility at the Mississippi Gulf Coast Community College. In this role, the individual has responsibility for managing the Digital Forensics Lab (DFL) associated with the MCI facility. Including configuration/installation/operations of existing forensics hardware and software, the primary person in assisting other Law Enforcement (LE) partnered agencies in conducting digital forensics analysis, coordinator between agency partners, responsible for on-site development, implementation quality assurance, and management of the DFL environment and associated systems. The candidate will assess and develop policies and procedures governing the MCI DFL and assist the sites senior technical advisor in gathering data analytics, contract, and budget activities related to the DFL.

Salary Grade: 15

Please see Staff Compensation Structure for salary ranges.

Essential Duties and Responsibilities:

1. Experienced with Cyber/Digital Forensics tools, including e-discovery and forensic imaging tools and techniques.
2. Experienced with COTS forensics products, including EnCase, SIFT, X-Ways, FTK, Magnet Forensics products (ex. Axiom, Automate, Graykey), and Cellebrite.
3. Able to understand systems engineering and computing platforms, including Windows, OSX, and Linux.
4. Manage DFL operations with the Department of Public Safety and other partnered Law Enforcement agencies.
5. Effectively lead LE partner(s) in utilizing the labs forensics networked capabilities through technical support.
6. Perform assessments with users in analyzing deficiencies in tested forensics tools and provide a risk assessment of unresolved anomalies.
7. Assist in accomplishing forensic analysis with techniques, including traditional disk image analysis, memory analysis, and malware analysis or static and dynamic reverse engineering.
8. Develops and maintains Standard Operating Procedures for the DFL, not limited to utilization, installation, configuration, and troubleshooting of complex applications with forensics hardware/software, operating system software, and specialized equipment such as Forensics Recovery Evidence Devices, servers, and network interfaces.
9. Able to work in an environment of rapidly changing technology and requirements in support of the MCI partners mission.

Supervisory Responsibility:

May be responsible for training, assisting, or assigning tasks to others. May provide input to performance reviews of other employees.

The above essential duties are representative of the major duties of positions in this position. Specific duties and responsibilities may vary based upon departmental needs. Other duties may be assigned to the above consistent with the knowledge, skills, and abilities required for the job. Not all the duties may be assigned to a position.

Minimum Qualifications:

Education: Bachelors degree in a related field.

Experience: Five+ years directly related to the duties and responsibilities specified.

Due to the nature of our co-op with our military partners, U.S. citizenship status is a requirement. Substitution allowed: Any equivalent combination of related experience and/or education approved by the Department of Human Resources Management.

Preferred Qualifications:

• Ability to work in time-sensitive and stressful situations with ease and professionalism • Versed in computer security investigative processes • Understanding of electronic investigation, forensic tools, and methodologies. Including log correlation and analysis and forensically handling electronic data • Possession of one or more forensics certifications, including GCFE, CCI, GREM, CHFI, GCFA, or CCFP ISFCE CCE - Certified Computer Examiner Certification, SANS CGFA Forensic Analyst or GCFE - Forensic Examiner Certification, ISC(2) - CCFP - Certified CyberForensics Professional Certification • Able to maintain proficiency in digital forensics technology and accreditations through self-paced specialized training • Versed in Microsoft office suite

Knowledge, Skills, and Abilities:

1. Excellent knowledge of a full range of digital and cyber forensics hardware and software
2. Proficient in the latest forensic, response, and reverse engineering skills and astute in the latest exploit methodologies
3. Knowledge of a basic understanding of legalities surrounding the discovery and analysis of electronically stored information
4. Knowledge of existing and emerging legal issues within information security environments (i.e., data privacy)
5. Possession of excellent problem-solving, analytical, and critical thinking skills
6. Ability to gather facts and use effective analytical and evaluative methods to assess information, plan the sequence of actions necessary, make sound decisions, and solve various forensic systems problems
7. Ability to maintain an up-to-date awareness of technological advances and predict how management can meet future requirements
8. Interpersonal and communication skills; ability to communicate orally and in writing and foster a cooperative work environment
9. Understanding of electronic investigation, forensic tools, and methodologies. Including log correlation and analysis, forensically handling electronic data, knowledge of computer security investigative processes
10. Ability to maintain a high level of professionalism at all times while representing MCI and the university in internal and external interactions.

Working Conditions and Physical Effort:

• Requires lifting of IT devices, and nearly all work is performed in a comfortable indoor facility. • Frequent external imposed deadlines; set and revised beyond ones control; interruptions influence priorities; difficult to anticipate nature or volume of work with certainty beyond a few days; meeting of deadlines and coordination of unrelated activities are vital to the position; involves conflict-resolution or similar interactions involving emotional issues or stress on a regular basis. • Job frequently requires walking, sitting, reaching, talking, hearing, and handling objects with hands.

Instructions for Applying:

Link to apply: http://explore.msujobs.msstate.edu/

Restricted Clause:

Position is contingent upon continued availability of funding.

Equal Employment Opportunity Statement:

Mississippi State University is an equal opportunity institution. Discrimination is prohibited in university employment, programs or activities based on race, color, ethnicity, sex, pregnancy, religion, national origin, disability, age, sexual orientation, genetic information, status as a U.S. veteran, or any other status to the extent protected by applicable law. Questions about equal opportunity programs or compliance should be directed to the Office of Civil Rights Compliance, 231 Famous Maroon Band Street, P.O. 6044, Mississippi State, MS 39762, (662) 325-5839.

What do I do if I need an accommodation?

In compliance with the ADA Amendments Act (ADA), if you have a disability and would like to request an accommodation in order to apply for a position with Mississippi State University, please contact the Department of Human Resources Management at (662) 325-3713 or ada@hrm.msstate.edu. If you have any questions regarding this policy, contact the Department of Human Resources Management at (662) 325-3713 or ada@hrm.msstate.edu. Upon request, sections of this job listing are available in large print, and readers are available to assist the visually impaired.