The NHS Counter Fraud Authority (NHSCFA) is the national body responsible for all matters relating to the prevention, detection and investigation of economic crime across the NHS. Further information about our work and annual plan for delivering this is available on our website.
The Senior Digital Forensics Investigator will work as part of a dedicated team who work to identify, preserve, extract, interpret and present computer based digital evidence and provide an efficient and effective Digital Forensics service as well as support function to NHSCFA, NHS England, Department of Health and Social Care Anti-Fraud Unit (DHSC AFU), Counter Fraud Services (CFS) Wales, Counter Fraud Services (CFS) Scotland, Local Counter Fraud Specialists (LCFS') and any other contracted external customers.
Potential applicants can contact Chris Atkinson at chris.atkinson@nhscfa.gov.uk for an informal chat if you have any questions regarding the role.
We reserve the right to close this vacancy before the advertised closing date should we receive a significant number of applications.
Interviews will be held on 21/22 January 2025 in person.
Main duties of the job
Accountable to the Digital Forensics Lead, the Senior Digital Forensics Investigator will undertake directed and tasked digital forensics and investigative activity, within operational and legislative guidelines and to the highest standards, concerning allegations of fraud which fall under the investigative remit of NHSCFA and NHS England, DHSC AFU, CFS Wales, CFS Scotland, LCFS' and any other contracted external customers. This will include:
1. Conducting forensic acquisition, processing and analysis activities (either on site or in the lab) of digital media for use in investigations by the NHSCFA and external stakeholders.
2. Recording the details of analysis and investigations undertaken and maintain the confidentiality of this information.
3. Ensuring that appropriate security and access control of forensics tools, systems and evidence is maintained at all times.
Standard DBS and SC level vetting. Full UK Driving License Required.
About us
We have offices based in Coventry, Newcastle and London. The NHSCFA values and respects the diversity of its employees and aims to recruit a workforce which reflects our diverse communities. We welcome applications irrespective of people's age, disability, gender, race or ethnicity, religion or belief, sexual orientation, or other personal circumstances. We have policies and procedures in place to ensure that all applicants are treated fairly and consistently at every stage of the recruitment process, including an invitation to the first stage of the selection process and consideration of reasonable adjustments for people who have a disability. If you are applying to undertake this role on a secondment basis you should have agreement to being released from your current role in principle, prior to submitting an application form. When you apply for this role, you will be redirected to our recruitment system TRAC. The NHSCFA does not hold a sponsor licence in respect of skilled worker visas and so is unable to employ candidates requiring sponsorship.
Job responsibilities
1. To properly collect, preserve, transport, and store systems and media used in investigation and evidence uncovered by analysis.
2. Producing statements and exhibits to a standard suitable for use in criminal or civil court.
3. Testifying in criminal and civil court as required, on results of seizure and handling of evidence and results of analysis conducted.
4. Supporting onsite investigative activity, either in person or remotely as and when required. Flexibility is required as this often requires working outside standard office hours.
5. Ensuring the timely delivery of digital forensic analysis activities to support the business needs of both NHSCFA and public sector organisations.
Please see full Job Description and Person Specification
Person Specification
Specialist Knowledge
* Demonstrate knowledge in at least some of the following areas / operating systems:
o File servers (Microsoft / Apple / Unix / Linux)
o Networking (IP / LAN / WAN / Firewalls)
o Email servers and clients
o Peripherals (e.g. removable media, CD/DVD etc)
o Workstations (Microsoft / Apple / Unix / Linux)
o File systems (FAT / NTFS / HFS+ APFS etc)
o Hard drives (IDE, SCSI, SSD, RAID, SAN etc)
* Extensive knowledge in one or more of the following FTK, EnCase, Axiom, Cellebrite Inspector, Digital Collector, UFED or Oxygen forensic tools.
* Demonstrable knowledge of current best practice in obtaining electronic evidence.
* Thorough understanding of issues surrounding the proper handling of evidence within an investigatory environment.
* Working knowledge of programming/scripting in EnScript, Python, SQL or similar language.
* Working knowledge of Exterro LAB// /FTK Central or similar Ediscovery platform.
Experience
* At least three years practical experience in an investigative role.
* Extensive practical experience in undertaking digital forensic investigations.
* Significant practical experience in exhibiting evidence and producing witness statements suitable for Crown court.
Qualifications
* Degree or equivalent in Digital Forensics or equivalent experience working within a digital forensics environment, or Information Technology related field or equivalent experience working within a digital forensics environment.
* Either hold any of the following professional qualifications or demonstrate equivalent knowledge and experience:
o Microsoft Certified Professional (M.C.P.)
o Access Data Certified Examiner (ACE)
o EnCase Certified Examiner (EnCE)
o Successfully completed Forensic Computing Foundation Level Course.
Communication Skills
* Demonstrate excellent written and oral communication skills and be able to communicate complex information persuasively, both orally and in writing, with people at all levels and across professions.
Other Skills
* Demonstrate the ability to prioritise and manage own workload to deliver operational objectives.
* Demonstrable understanding and track record in promoting equal opportunities and diversity.
* Ability to work to agreed deadlines and standards, manage conflicting priorities, work with minimum supervision and develop solutions for overcoming barriers to progress. This requires high levels of enthusiasm, self-motivation and adaptability.
* Be able to make an effective contribution within a team environment by providing advice, assistance and support to colleagues.
* Must be able to use fine/precision screwdrivers in order to safely remove and replace storage media (such as Hard Drives, Solid State Disks, NVMe) from Computers, Laptops and Servers.
* Full UK Driving License Required.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.
#J-18808-Ljbffr