Text Size: A+| A-| A   |   Text Only Site   |   Accessibility
Post Code:  D720
Announcement Number:   LECO0683
Classification Number:   C1487
Open:   11/20/2007
Close:   11/20/2007
Location:  Madras, Ontario, Pendleton, Salem, Umatilla

INFORMATION SYSTEMS SPECIALIST 7
(Computer Foresnsics Investigator)

$4,212.00 - $6,106.00 MONTHLY


ISS Header

 
GENERAL INFORMATION
 
This position is with the Oregon Department of Corrections’ (ODOC), Information Technology Systems and the Investigations Unit. The possible duty locations are: Madras, Pendleton, Salem, Umatilla, or Ontario. The specific location will be determined at the time of appointment. This recruitment will be used to add names to the current list of qualified applicants.
 
This position is represented by the American Federation of State, County, and Municipal Employees' (AFSCME) Union.

Applicants will be subject to a Computerized Criminal History and Motor Vehicles Division check as well as a thorough background investigation. Adverse background information may be grounds for disqualification.
 
All department employees are responsible for upholding the mission of ODOC by promoting public safety, holding offenders accountable for their actions and reducing the risk of future criminal behavior. ODOC employees oversee and manage inmates in order to maintain safe, civil and productive institutions. They are responsible for the safety of inmates and protection of property at their work site. All department employees have a significant impact on the success of the ODOC mission and need to understand the fundamentals of the Oregon Accountability Model.
 
The Oregon Accountability Model emphasizes the importance of criminal risk factor assessment, inmate work and programs to mitigate identified risks, staff-inmate interactions that support positive change, inclusion of families and children as a positive support in an inmate’s life, successful reentry into the community, and ongoing community supervision and programming. Staff interactions with inmates on a daily basis are, without doubt, the most powerful tool to reinforce pro-social behavior. Thus, the nature of interactions with inmates is core to the ultimate success of corrections and community safety. Each employee is expected to model appropriate pro-social behavior, support positive change in individual offenders and actively support the Oregon Accountability Model through day-to-day interactions with others.

The Oregon Department of Corrections is an innovative leader in the field of corrections and community safety and has been nationally recognized for accomplishments in all six components of the Oregon Accountability Model.

TO QUALIFY
 
Your application will be reviewed to verify that you meet the qualifications stated in this section. To receive credit, your application must clearly show that you have:
  • five years of professional consultative, technical, or administrative experience providing expert advice and leadership in planning, development, coordination, and implementation of information systems. Experience must include supporting and deploying Microsoft standard architecture; AND EITHER
  • at least 30-quarter (20 semester) credits in computer science; OR
  • two more years of experience supporting and deploying Microsoft standard architecture.
 
15 quarter (10 semester) graduate-level computer science, software engineering, information systems, or equivalent credits may substitute for one year of the professional experience.
 
This position requires a MCSE certification in Server 2000 or 2003 and significant professional training towards completing Certified Computer Examiner (CCE) certification.
 
Note: To receive credit for college courses, applicants must submit a photocopy of college transcripts.
 
If you qualify, see TO APPLY section of this announcement.
 
DUTIES AND RESPONSIBILITIES
 
This position performs the critical function of insuring that the Forensics equipment (hardware and specialty software and tools) used by ODOC and other law enforcement agencies is functional and accessible by the ODOC Forensics and Investigations staff. Major duties include:
  • conducts investigations to support ODOC’s cyber security forensics and litigation functions; responsible for hands-on forensic data reconstruction, IT security forensics data collections, keyword searches on common files, and evidence production and coordination during eDiscovery and/or litigation support initiatives; serves as the single point of contact for internal investigations that require computer forensics support; leads large-scale forensics and/or incident response initiatives requiring management of one or more external partners; develops and enforces computer forensics procedures that are consistent with U.S. Department of Justice guidelines and industry standard practices in investigation, forensic evidence recovery, and forensic data analysis; works with forensics tools that include but are not limited to forensic software and hardware tools to capture and analyze forensic data; develops legal reports as required to be provided to internal investigations, and internal and external attorneys; serves as a computer forensics expert witness on behalf of ODOC in depositions and at trials; uses expertise in Microsoft Windows Domain roles and duties with sufficient security permissions to perform data restores without compromising the ODOC Network or Active Directory Structure; creates and maintains monthly metrics; holds all information in strict confidence in accordance with Rules of Evidence;
  • operates in this jurisdiction and throughout Oregon to investigate, search, seize, and conduct forensic examinations on computers being used to commit an illegal act; mounts an aggressive Internet Crimes Against Children capability; investigates white collar crime, child pornography, cyber stalking and harassment, violations of personal privacy (spying, monitoring, eavesdropping), digital forgery, theft and credit card fraud, and hacking/intrusions; establishes and maintains a liaison with institution and facility management and staff as well as stakeholders and partners; gathers information from ODOC staff and inmates regarding current and/or future criminal activity and/or administrative misconduct of inmates, DOC employees, and/or citizens associated with inmates or employees; creates and maintains monthly metrics; holds all information in strict confidence in accordance with Rules of Evidence; gathers and forwards intelligence information to law enforcement agencies/jurisdictions and/or to ODOC institutions and facilities as appropriate; provides feedback to the Investigations Administrator and Investigations Managers with recommendations for an investigative course of action; gathers and processes computer forensics evidence obtained during criminal and administrative investigations in accordance with State and Federal laws; prepares clear, concise investigative reports, free of bias and opinion, with all supporting documentation in accordance with ODOC, Investigations Unit, and IT Services Unit policies and procedures; provides computer forensics evidence to support case files for both administrative and criminal cases with all relevant reports and supporting materials; and
  • performs examination on multiple computer operating systems, multiple hardware configurations, applications software and peripherals in a non-standardized environment and multiple jurisdictions; participates in short and medium range investigations planning for all regions; works with vendors and makes recommendations for purchase of appropriate hardware, software and connectivity products to maintain the forensics lab and related equipment and tools specific to the job duties and function; demonstrates problem resolution and analytical skills related to software and hardware issues; uses expertise as Administrator or expert analyst on Windows Server 2003, Exchange 2003, (NT, 2000, 2003) routers & switches, databases, firewall, proxy servers, web servers, and intrusion detection systems; performs configuration, administration, and management of the servers and desktop technologies on multiple distributed networks in support of forensic investigation assignments; utilizes experience with network and host-based vulnerability scanning and virtual private networking; ensures that applications, tools and utilities required to effectively maintain and manage the Forensics Lab remain current and supported; complies with State and Department IT policies, procedures, and protocols; develops IT contracts to purchase, upgrade, and maintain vendor products required to manage the Forensics Lab; works with ISU on installation, testing, and upgrade of software and hardware components for the Computer Forensics Lab; develops Project Requests, Service Requests, or Request for Proposals documents for acquisition of software/software programming services or a wide variety of hardware to meet information systems needs in support of Computer Forensics needs and activities; facilitates creation, evaluates, and selects vendor proposals for development of programming code, software or technology to support the Computer Forensics Lab and services.
 
WORKING CONDITIONS
  • will be expected to share the mission, vision, and core values of the department;
  • requires being a role-model of pro-social behavior and having an attitude that conveys dignity and respect in the treatment of others;
  • must be able to acknowledge that everyone is capable of positive change;
  • may require working inside correctional facilities;
  • may require regular contact with inmates;
  • requires willingness to work irregular hours (weekends, holidays, nights for job related purposes);
  • requires lifting PCs and other computer equipment;
  • requires bending, crawling, and reaching under desks to retrieve computers;
  • requires working in a team-oriented environment, participative decision making and cooperative interactions with staff and management; and
  • requires in state and out-of-state and over night travel.
 
You must have a valid driver's license and acceptable driving record or an acceptable alternate means of transportation.
 
TO APPLY
 
Please submit a State of Oregon application form (PD100) and the cover letter (not to exceed two pages) described below. If you have a disability and need an accommodation in the application process, contact the Department of Corrections at (503) 378-6013.You can get a state application form from any local State Employment Office or by the Internet: http://www.oregon.gov/DOC/HR

Attach a cover letter addressing the "Desired Attributes". Please clearly describe your experience and skills as they relate to the desired attributes. Number your answers to correspond with each attribute. The experience/training described on the application along with the Cover Letter will be used to identify which applicants will be invited for interviews.
DESIRED ATTRIBUTES
 
The ideal candidate should have a performance record demonstrating the following attributes:
  1. knowledge of MS windows domain security administration;
  2. proven IT skills with a successful history of building, configuring, administering, supporting, upgrading, and maintaining hardware, software, servers, and peripherals; and
  3. investigative experience with local, state, or federal law enforcement agencies conducting either administrative or criminal investigations.
 
You may email your State Application (PD100) to ITJobs@doc.state.or.us. Please be sure to reference the announcement number in the subject line of your email.
 
If a small number of applicants, those individuals meeting the minimum qualifications may be placed on the list with a code of QLF (qualified). If a large number of applications are received, individuals will be evaluated on their responses to the questions listed above
   
SUBMIT YOUR APPLICATION MATERIALS TO:
 
Department of Corrections
ATTN: Rhonda Crawford, Recruitment Analyst
1793 13th Street SE, Suite 1
Salem, Oregon 97302-2599
FAX: (503) 378-5449

Notice of results will be sent by mail.  Although agencies are not required to delay their selection process, you may request a review of the results.  Your request must be received within 10 days from the date of the notice.  Additional information cannot be accepted.  However, if the recruitment is still open, you may submit a new application, which must be received in our office by the close date.
 
Application materials must be received by 5:00 PM on the close date.  Submit only the required materials.  Reference letters, resumes or work examples should be kept for interviews.  The Dept. of Corrections cannot be responsible for materials that are illegible or missing as a result of transmitting by FAX or which may be lost through the mail.  We are unable to verify receipt of your application materials due to the volume of applications received daily.  If you fax your application, please forward a hard copy by mail.
KEEP A COPY OF YOUR APPLICATION FOR THE JOB INTERVIEW. 
COPIES ARE NOT PROVIDED.
EEO Picture
 
Page updated: November 21, 2007

Click here to go to the Oregon Dept. of Veterans' Affairs outreach contact form

Get Adobe Acrobat ReaderAdobe Reader is required to view PDF files. Click the "Get Adobe Reader" image to get a free download of the reader from Adobe.