Digital Forensics Practitioner

Discover what its like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here.

HMRC is the UKs tax, payments and customs authority and we have a vital purpose: we collect the money that pays for the UKs public services and help families and individuals with targeted financial support.

HMRCs Fraud Investigation Service (FIS) is responsible for the departments civil and criminal investigations.

FIS provides HMRC with an effective investigation arm to enforce the Departments compliance policies. This enables the Department to deliver against the strategic responsibilities across all the taxes and duties it administers. This includes complex offshore evasion, international smuggling of illicit excise goods, exports of controlled weapons and technology, labour market abuses, VAT and Self-Assessment repayment frauds and a host of other fraud attacks targeted at the tax system.

FIS is home to a wide range of people with a variety of skills and professional backgrounds including accountants, cybercrime specialists, criminal justice professionals, tax professionals and operational delivery support teams to name but a few. We use a range of powers and approaches to protect funding for UK public services, investigating the most harmful tax cheats and ensuring nobody is beyond our reach.

Covert Operations, Digital Exploitation (CODE) sits within FIS. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime.

For more information about our Directorates, Lines of Business and some of our roles, please visit the FIS Careers pages https://www.civil-service-careers.gov.uk/hmrc-fraud-investigation-service/

This is a unique opportunity to be responsible for critical elements of our Digital Forensic Service provided to HMRCs investigation teams.

You will ensure that all aspects of Digital Forensic work are carried out to a high standard, adhering to a solid forensic strategy, and meeting all requirements of the Forensic Science Regulator. This will involve leading and developing junior colleagues who will benefit from your extensive expertise and experience at an analyst level during lab-base acquisition work, forensic analysis, and presentation of evidence. As part of the FSR Requirements, competency in both mobile and computer forensics will be required, however experience in both at the point of applying is not essential.

As an effective communicator you will collaborate closely with Senior Investigation Officers (SIOs) running operations and their senior management structures, providing consultant level services on Forensic Strategy and technical problem solving.

On-site operations, such as search warrants, are an important part in HMRCs enforcement work, here the investigation teams will benefit from your experience dealing with frontline challenges and assisting with the forensic aspects of fast-paced operational work.

The responsibilities of this role will include (but not limited to):

• Assist and manage staff during the seizure and retention of digital devices within a laboratory environment and during search warrant executions for subsequent Forensic examination.
• Managing Forensic exhibits to ensure continuity, confidentiality and security is maintained at all times.
• Understanding, follow, and actively promote Digital Forensic good practice methodologies (ISO17025:2017 standard and FSR Codes of Practice) to examine computers, mobile phones, and other digital devices.
• Preparing evidential reports upon completion of Digital Forensic examinations.
• Providing fact and procedural-based evidence at Court as and when required.
• Being at the forefront of technical developments within Digital Forensics.
• Using a number of mainstream digital forensic software tools to process data from mobile phones, computers, and other digital devices, such as X-Ways Forensics, Nuix, Axiom, Cellebrite, Oxygen, XRY, etc.
• The building of a portfolio of evidence to maintain professionalism.
• Attending operational duties (including search warrant executions away from normal place of work with overnight stays).
• Travelling across the country, including occasional international travel.
• Leading, mentoring, and training junior members of the team as well as educating senior investigation colleagues about the field of Digital Forensics.
• Good communicator who can perform in a client/customer facing role.
• Ability to work with material that may be of an obscene, offensive, or distressing nature. Treat such material in the appropriate manner ensuring it is secured and handled according to defined policy.
• Knowledge and understanding of criminal justice procedures including the Investigatory Powers Act 2016 (IPA), CPIA 1996, and PACE 1984.
• Knowledge of Legal Professional Privilege (LPP) material and how to deal with it.

Essential Criteria:

• Experience and knowledge in performing Digital Forensic examinations; be able to demonstrate case experience within either the law enforcement or civil work environment.
• Experience in the use of digital forensic software tools such as, X-Ways Forensics, Nuix, Axiom, Cellebrite, Oxygen, XRY, etc.
• Experience in full examination in mobile and/or computer devices
• Understanding, following, and actively promoting Digital Forensic good practice methodologies (ISO17025:2017 standard and FSR Codes of Practice) to examine computers, mobile phones, and other digital devices.
• Full driving licence required.

We recognise that some people cannot drive due to a disability or underlying health condition and may not be able to meet this requirement. Where this applies, you can apply but will need to declare that you require a reasonable adjustment at the point you receive a provisional offer. The vacancy holder will then discuss your specific requirements to consider if this can be reasonably accommodated in this role.

Training

Authorised Officer Course is required. Necessary Digital Forensics training, ranging from in-house training to external courses, will be provided.

Public and Personal Safety Training (PPST)

Applicants will be required to be cleared by an occupational health assessment to be able to attend a public and personal safety training (PPST) course. Successful completion of the PPST is required to undertake duties away from the office for this role. Failure to pass and maintain the PPST certificate may affect receipt of the Flexibility Payment.