49445-CSE(OC)2019 Closing Date: 2020-03-31
Forensic analysts collect, process, preserve, analyze, report on and present digital media evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, foreign intelligence, or law enforcement investigations. They perform analysis of digital evidence and investigation of computer security incidents to derive useful information in support of system/network vulnerability mitigation and exploitation. They prepare descriptive and predictive analyses and communicate the results, meaning and significance in the form of oral and written reports. They participate in the evaluation of tools and the creation of customized methodologies and applications.
Indeterminate positions, with a one (1) year probation period.
Individuals are typically hired into entry level positions though exceptions can be based on the level of experience, knowledge and competency demonstrated during the selection process.
UNI 07 level - $78,001 - $91,764 per year
UNI 08 level - $83,250 - $97,942 per year
UNI 09 level - $89,304 - $105,060 per year
These positions are currently eligible for a market allowance of $8,366 to $12,103.35 annually.
The salary and market allowance are under review.
Incident management and response;
Forensic acquisition and analysis of data;
Usage of forensic tools (commercial and open source);
Cyber Threat Intelligence (CTI) gathering;
Technical report writing;
Analyze digital media in order to locate, identify, extract and interpret the artefacts and residue of target communication, information and computer systems;
Create, modify, and adapt forensic methodologies, techniques, practices, algorithms and software solutions;
Apply innovative thinking, problem solving and performance analysis to solve complex technological problems;
Provide advice, guidance and recommendations to internal and external stakeholders on forensic analysis and facilitating the creation of intelligence product.
Degree from a recognized university or college in Computer Science, Information Technology, Networking, Mathematics, Engineering, OR
An acceptable combination of education, Cyber Forensic certification, training, and/or experience related to the position
Knowledge of Operating Systems principles and technologies (Unix and Windows)
Knowledge of computer/digital media concepts, physical computer components, and Internet and networking protocols, including packet capture analysis.
Experience in writing technical and research documentation for both a technical and non-technical audience.
Experience in administration or remote network endpoints and servers.
Basic knowledge of networking (Firewalls, Intrusion Prevention Systems, SIEMS, network architecture).
Experience developing software solutions for use in an operational environment including requirements gathering, design, development, testing, release and support.
Experience communicating with clients and colleagues to design and deliver solutions to forensic problems.
Experience in using forensic tools and the process of seizing, extracting and preserving digital evidence and the practices of recognizing and processing different types of digital media.
Experience in programming languages such as Python, Perl
Experience applying analytic thinking competencies to interpret processed output, complete forensic investigations, recognize when new forensic capabilities are needed and propose solutions to complex situations or problems.
Experience integrating open source technologies into a production environment
General Knowledge of one of the following:
Log, packet, vulnerability or exploit analysis
Security event monitoring
Experience in Incident Management.
Familiarity with Cyber Threat Intelligence.
Familiarity with virtualized network environments.
Working in a Team
Cognitive Thinking Skills
Change & Innovation
Knowledge of Information Technology
Who Can Apply
Canadian citizens who qualify for a Top Secret security clearance; conforming to CSE’s standards.
Candidates must have no criminal record. The screening process involves a security interview, a polygraph test, a psychological assessment, and a background investigation covering a minimum of your last 10 years history, including credit and financial verifications. Ongoing substance abuse is a factor to be assessed as part of your screening process.
Why join CSE?
- CSE has been named among the top employers in the National Capital Region
- Attractive compensation and benefits package (insurances, pension)
- State-of the art new building, encouraging collaboration, agility and innovation
- Flexible hours, compressed work week
- Complimentary on-site 24/7 fitness centre, and access to fitness classes for a minimal fee
- Nearby access to banking, daycare, shopping, movies etc.
- Access to exceptional career development opportunities
How to Apply
Applicants must clearly demonstrate in their application how they meet each EDUCATION and EXPERIENCE criteria. Failure to do so will result in the applicant being screened out of the selection process.
If you meet these requirements, you may submit your candidacy online by clicking “APPLY” at the bottom of the page.
Candidates must clearly demonstrate in a cover letter and resume, each screening factor (education, experience and assets) as a heading, and provide a description illustrating how they meet the qualifications by providing concrete examples. Failure to provide the above level of details may result in your application not receiving further consideration.
CSE is an Equal Opportunity Employer. We encourage applications from women, Aboriginal peoples, persons with disabilities, and members of visible minority groups. CSE offers an assessment process which will accommodate the needs of persons with disabilities. If you may need such accommodation, please advise us.
CSE is a separate organization and is not subject to the Public Service Employment Act (PSEA). The organization has its own values-based staffing regime and as such, has the flexibility to determine qualifications for positions and how these qualifications will be assessed in a selection process.
Candidates must be able to provide proof of education credentials.
All tests and interviews will take place in Ottawa. Please note that CSE will not provide financial assistance to candidates who wish to travel to Ottawa to participate in the selection process.
The entire selection process – tests, interviews, security investigation – may take more than one year.
Overtime and standby duty may be required.
The market allowance does not form part of an employee’s salary. This allowance is negotiated through the collective bargaining process.
If you are deemed to be unsuccessful in the assessment process for this particular poster, you may reapply after twelve (12) months.
Please include three references (2 supervisors and 1 peer) at the bottom of your application. Note that we will only contact references towards the end of the assessment process.
We thank all applicants for their interest in CSE. However, only those selected for further consideration will be contacted.