Digital Forensics Analyst

Persons requiring reasonable accommodation in the application process or requiring information in an alternative format may contact the recruitment team at View email address on click.appcast.io. This position will remain open until a sufficient number of candidates have applied. The Washington State Office of the Attorney General reserves the right to close this announcement at any time without notice. Position and Salary The Attorney General’s Office is recruiting for a permanent full time Digital Forensic Specialist (Forensic Scientist 4) in the Medicaid Fraud & Abuse Division. This position is located in Olympia, Washington, and is represented by the Washington Federation of State Employees (WFSE). Forensic Scientist 4 Salary Range (68): $84,984 - $114,264 (Effective 7/1/25) | $86,688 - $116,544 (Effective 7/1/26) The base pay offered will take into account internal equity and may vary depending on the preferred candidate’s job‑related knowledge, skills, and experience. The AGO provides a workplace that is understanding of work‑life balance and promotes advancement by offering a wide variety of professional development and growth opportunities. Benefits Medical/Dental/Vision for employees and dependent(s) Vacation, Sick, and Other Leave 11 Paid Holidays per year Public Employees Retirement System (PERS) plans Life Insurance Dependent Care Assistance Flexible Spending Accounts Public Service Loan Forgiveness Tuition Waiver Deferred Compensation Employee Recognition Leave Wellness Program Infants in the Workplace Program Employee Assistance Program Employee‑driven affinity groups Duties and Essential Functions of a Digital Forensic Specialist (Forensic Scientist 4) Responsible to independently operate as the forensic technical lead at multiple search warrant sites and locations which often occur simultaneously across WA state. Maintains and runs a mobile laboratory during onsite search warrants ensuring quality processes and operational compliance with all certification, accreditation, legal standards, and requirements. Responsible for assigning, auditing and correcting the casework of new digital forensics personnel in all laboratory and field settings. Authorized to direct and stop casework processes at any time if a problem occurs in the laboratory, mobile laboratory, and/or out in the field. Perform highly complex analyses of digital evidence from computers, mobile devices, cloud services, IoT devices, network traffic, and other storage media. Interpret complex datasets, identify patterns and anomalies, and reconstruct events from multiple evidence sources. Uses forensic techniques, programming languages and develops queries to identify and recover hidden, encrypted, unparsed or deleted information related to the case, safeguards the integrity of data by following a chain of custody that ensures admissibility in court, and testifies as an expert witness in legal proceedings when required. Forensic reporting of digital evidence across numerous formats. Reports findings in the form of a written laboratory report based on the interpretation of observations and analytical test results. Required Qualifications Six (6) years of experience in digital forensics or a closely related field with at least four (4) years of technical experience working and managing and/or operating a lead role in a forensic lab and testifying in a court of law. A Bachelor's degree in forensic science or closely related field may substitute for two (2) years of experience in digital forensics. Skills & Abilities Professional certifications such as GCFA, GCFE, CCO, CCPA, CCME, MCFE, FTK or CFCE Background in specialized areas such as SQL, SQLite, Python, and other programming languages; cloud forensics, IoT forensics, or malware reverse engineering Ability to apply knowledge of network computer systems, common communication software, including Outlook, and familiarity with electronic e‑mail systems; knowledge of different operating systems including Windows, DOS, Linux, and Mac OS; understanding of the Internet; hardware in standalone computers; various electronic storage media including internal and external hard drives and data archiving technology; USB/Firewire technology; and skilled in the use of various digital forensic software including but not limited to Axiom Cyber, Encase and Forensic Tool Kit. Knowledge of the physical sciences; principles embraced in the scientific method; theory and practice of forensic science as it relates to digital forensics Technical casework experience Demonstrated competency in coordinating and planning projects, programs, or task forces Healthcare Fraud and/or Abuse and Neglect experience Conditions of Employment A background check consisting of employment history, professional references and educational verification (e.g., degree, license, or official transcript) may be conducted. Prior to any offer, the applicant selected will be required to submit to and pass a fingerprint‑based criminal background check conducted by the Washington State Patrol, Criminal Records Division. The incumbent will submit to additional background checks as a condition of employment every five (5) years thereafter. Equal Employment Opportunity and Accommodations Requests The AGO is an equal opportunity employer and does not discriminate on the basis of race, creed, color, national origin, sex, marital status, sexual orientation/gender identity, age, disability, honorably discharged veteran or military status, retaliation or the use of a trained dog guide or service animal by a person with a disability. Persons requiring reasonable accommodation in the application process or requiring information in an alternative format may contact the recruitment team at View email address on click.appcast.io. Those with a hearing impairment in need of accommodation are encouraged to contact the Washington Relay Service at View phone number on click.appcast.io or For questions regarding this recruitment or assistance with the application process, please contact the recruitment team at View email address on click.appcast.io. If you are having technical difficulties creating, accessing or completing your application, please call NEOGOV toll‑free at View phone number on click.appcast.io or View email address on click.appcast.io. #J-18808-Ljbffr