Investigator VI (Computer Forensic Examiner) performs complex criminal and non-criminal investigations involving HHSC employees, contracts, contractors, vendors, assets, and confidential state information. Investigations are conducted under the general direction of the Forensics Manager in the Forensic Research and Analysis Unit as managed through the Deputy Inspector General and Director Internal Affairs Division. The Examiner performs highly technical forensic examinations of computer hard drives, cell phones, and other electronic mediums; conducts network-enabled forensic examinations; secures and preserves electronic mediums to ensure admissibility in courts and administrative hearings; testifies in courts and administrative hearings; serves as a consultant to internal investigators on matters related to forensic examination results; and, conducts other related research and analysis of electronic data. The collection and examination of data are performed with computer hardware/software in a prescribed method that preserves the data collected for presentation in courts and administrative hearings. Work is coordinated with internal and external investigators; local, state, and federal law enforcement; agency management; agency IT staff; and, with computer forensic experts in both government and private capacities. The Examiner may conduct other research and analysis projects related to identifying and eliminating fraud, waste, and abuse in agency programs. The Examiner may serve as a consultant in the area of computer forensic techniques may develop reports, policies, and procedures used in conducting examinations/research, and may supervise the work of others. Performs related work as assigned. Travel is required.
Essential Job Functions:
EJF 1. Performs forensic examinations of computers, cell phones, electronic mediums, and Internet systems to determine if agency resources/equipment have been misused. (50%)
EJF 2. Secures and preserves electronic and other forms of evidence in support of agency investigations. (20%)
EJF 3. Prepares computer forensic examination reports, and other records and correspondence following the Office of Inspector General - HHSC standards. (15%)
EJF 4. Testifies in courts and administrative hearings on the findings of computer forensic examinations and/or other research results. (5%)
EJF 5. Interacts with HHSC management and other staff, local, state, and federal law enforcement, and other experts in the professional computer forensic community. (5%)
EJF 6. Performs other related duties in support of agency fraud detection and mitigation efforts to identify and eliminate security threats. (5%)
Knowledge Skills Abilities:
Knowledge and experience using EnCase Endpoint Investigator, AccessData Forensic Toolkit, or equivalent.
Knowledge of Windows-based applications.
Knowledge of computer hardware components.
Knowledge of computer network systems.
Knowledge of computer file systems.
Knowledge of computer forensic applications and techniques.
Skill in the use of computer systems, software applications, and the Internet.
Skill in the use of spreadsheets, word processing, e-mail, and database applications.
Skill in developing sources of information.
Skill in analyzing data, compiling and maintaining accurate reports, and documenting findings.
Skill in verbal and written communication.
Skill in evaluating and summarizing investigative or project findings.
Ability to learn court procedures, practices, and rules of evidence.
Ability to testify in administrative and criminal proceedings
Ability to plan, organize, and conduct computer and cell phone forensic analysis.
Ability to become proficient in the use of various computer and cell phone forensic applications.
Ability to conduct interviews and gather facts.
Ability to learn state and federal laws relating to agency programs and internal affairs investigations.
Ability to compile, evaluate, and summarize data that is pertinent to allegations being made.
Ability to comprehend agency policies and guidelines and determine employee, contractor, and provider compliance.
Ability to work independently and as a team member.
Ability to maintain confidentiality of all information compiled during an investigation and through work-related activities.
Ability to work with various local, state, and federal law enforcement organizations.
Registration or Licensure Requirements:
EnCase Certified Examiner, EnCE; AccessData Certified Examiner (ACE), or Certified Computer Forensics Examiner, CCFE, preferred. (Applicants offered the position would have the opportunity to obtain these certifications).
A valid Texas driver’s license is required.
Initial Selection Criteria:
Graduation from an accredited four-year college or university required with major courses in computer science, criminal justice, business administration, or other related fields is preferred. May substitute the required years of education with years of job-related experience on a one-to-one basis. Three years of full-time computer systems analysis or support, investigations, computer forensic analysis, auditing, or closely related experience. Experience in the use of computer systems, software applications, and the Internet.
Additional Information:
In compliance with the Americans with Disabilities Act (ADA), HHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the online application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.
MOS Code:
31D, 5819, 5821, 3D0X3, 311A, 71SX
HHS agencies use E-Verify. You must bring your I-9 documentation with you on your first day of work.
In compliance with the Americans with Disabilities Act (ADA), HHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the on-line application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.
Top 10 Tips for Success when Applying to Jobs at HHSC and DSHS