Skip to Main Content

Job Title


Digital Forensics Examiner


Company : Employment and Social Development Canada


Location : Ottawa, Ontario


Created : 2025-10-17


Job Type : Full Time


Job Description

Overview Reference number: DFO25J-141097-000530 Selection process number: 25-DFO-NCR-EA-654638 Fisheries and Oceans Canada - Chief Enforcement Officer, Conservation and Protection Locations: Vancouver, BC; St. Johns, NL; Dartmouth, NS; Ottawa, ON; and Dartmouth, NS. IT-02 Salary: $85,854 to $105,080 Closing date: 31 October 2025 - 23:59, Pacific Time Who can apply: Persons residing in Canada, and Canadian citizens and Permanent residents abroad. Apply online We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential. About the position(s) and Work environment As a Digital Forensic Examiner with Fisheries and Oceans Canadas National Digital Forensics Service (NDFS), your primary responsibility is to support fishery officers in their investigative efforts. This role offers a unique opportunity to engage in meaningful work that contributes directly to the protection of Canadas fisheries and the conservation of our natural resources. You will work closely with dedicated Fishery Officers on matters that make a real difference. With continuous learning and training opportunities, this position empowers you to stay at the forefront of digital forensics and grow professionally in a role that combines purpose and impact. The responsibilities include: Assisting in operational activities, such as search warrants and on-site digital evidence acquisitions, to ensure compliance with fisheries laws. Conducting thorough examinations of electronic devices and technology, including but not limited to personal computers, mobile devices, networking equipment, gaming consoles, drones, vehicles, and data storage devices. Applying specialized digital forensic tools and techniques to recover, decrypt, preserve, and analyze data from electronic storage systems, ensuring evidence integrity for criminal investigations. Preparing technical analysis reports for investigations. Providing testimony in court which may include expert testimony. Intent of the process The immediate intent is to staff 1 position located in Dartmouth, NS, with an English essential linguistic profile, and other positions in the National Digital Forensics Unit which are anticipatory at this time. Other office locations include: Vancouver, BC; St. Johns, NL; Ottawa, ON. Due to the nature of the duties, the candidate will be required to work physically in a DFO office (Monday to Friday). Telework and virtual work are not possible for this role. This selection process may be used to staff similar positions with various language requirements, locations, tenures and security requirements within Fisheries and Oceans Canada. Positions to be filled: 1 Information you must provide Essential qualifications Education Graduation from a two-year program of study from a recognized post-secondary institution with acceptable specialization in computer science, information technology, information management, or another specialty relevant to the position. Note: 1. Indeterminate incumbents in the IT group on December 9, 2021, who do not possess the education prescribed above, are deemed to meet the minimum education standard based on their education, training, and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the IT group. 2. Indeterminate incumbents of positions in the CS group on May 10, 1999, who do not possess the education prescribed above, are deemed to meet the minimum education standard based on their education, training, and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the IT group. 3. At the managers discretion, an acceptable combination of education, training and/or experience may serve as an alternative to the minimum education stated above. Whenever the minimum education is met using this alternative, it is met for the specific position only and must be re-assessed for other positions for which this alternative has been specified by the manager. Experiences Significant* and recent** experience as an IT Technician or Digital Forensics Examiner. Experience in working with network communications, management, and security protocols and concepts. Experience in installing, configuring, and maintaining computer hardware, software, operating systems, and peripherals. Experience administering, configuring, and supporting various operating systems including Microsoft Desktop and Server OS (Windows 7, 10, 11, and Windows Server 2012 R2 to Windows Server 2025, Linux distributions in both virtualized or physical infrastructures), Apple MacOS, iOS, and Android. Experience analyzing and investigating technical, legal, financial, or business information stored on computing systems. Experience writing technical reports, procedures, or plans for IT and/or legal-related matters, such as documenting forensic analysis results, preparing incident response plans or reports, creating standard operating procedures for evidence handling, or drafting detailed reports for court disclosure and legal investigations, with demonstrated adherence to industry accepted reporting standards. *Significant refers to the depth and breadth of experience associated with the performance of a broad range of related activities which were primarily the candidate's responsibility. It will be assessed on the basis of the scope, complexity and the diversity of the work performed as well as the autonomy required of the candidate to perform the activities. This level of experience is normally achieved through the performance of relevant duties for a period of approximately two (2) years. ** Recent is defined as experience obtained in the last five (5) years. Additional qualifications Asset Qualifications - Experience Digital Forensics & Examination: experience conducting forensic examination of computing systems, acquisition and examination of electronic devices, preparation of formal examination and analysis reports for investigations, safeguarding and handling of evidence, testimony in court, etc. Operating Systems & Platforms: experience with MacOS, iOS, Linux, cloud platforms (AWS, GCP, Azure), Office 365, Google Workspace, virtualization (Oracle VirtualBox, VMWare, Docker). Database Management & Querying: experience with MSSQL, MySQL, SQLite, No-SQL/databases, JSON/XML. Programming & Automation: experience with PowerShell, Java, JavaScript, Python, Bash, C++, C#, PHP, or PERL; automation to support forensic workflows. Data Analysis & Open-Source Tools: experience with large datasets and regex-based data extraction. Note: Computing systems relate to digital devices which contain a file system and an operating system and can include servers, computers, mobile phones, navigational equipment, digital video surveillance devices, etc. The following will be applied / assessed at a later date Knowledge Knowledge of Microsoft Windows 7, 10, 11 and Windows Server; OSX; Linux. Knowledge of installing, configuring, and maintaining Windows/Linux servers on virtual or physical setups. Knowledge of computer file systems and hardware. Knowledge and understanding of digital forensic methods. Knowledge and proficiency in software and hardware as per CompTIA A+. Competencies Communication Planning and organizing Self-Confidence and Self-Control Adaptability Abilities Ability to organize priorities and consistently meet deadlines. Ability to communicate complex technical information, both verbally and in writing, to clients with varying levels of understanding of digital evidence and technology. Demonstrated rapid analytical thinking and keen observation skills. Advanced technical proficiency, with deep expertise in computer systems, programming, and forensic software tools. Exceptional problem-solving abilities, including evidence validation, data decryption, and recovery of corrupted or inaccessible files. Ability to synthesize and logically analyze large volumes of information to reach defensible conclusions, particularly for security checks and court cases. Strong grasp of cybersecurity principles and techniques for protecting and targeting digital systems. Ability to work independently and collaboratively within a team environment. Ability to analyze complex technical problems and recommend effective solutions. Personal suitability Judgment Reliability Effective interpersonal skills Initiative Discretion Attention to detail and accuracy in technical analysis. Adaptability in rapidly changing technological and investigative environments. Resilience and composure under pressure Critical thinking Logical reasoning Objectivity The following may be applied / assessed at a later date Asset qualifications - Occupational Certification Demonstrated dedication to ongoing professional development by pursuing continual training, obtaining relevant certifications, and ensuring their renewal. Examples: GCFE, GCFA, CFCE, MCFE, CCE, CSFA, EnCE, CCO, CCPO, CCME, etc. CompTIA A+, Network+. Cybersecurity-related certifications. Canadian Police College courses such as CMPFOR, IEAC, NITC, MDAA. Asset qualifications - Knowledge Knowledge of case law, Criminal Code, and judicial authorizations relevant to digital forensics. Operational requirements Willing and able to undertake training to maintain or upgrade knowledge, skills and abilities. Willing to participate in training and certification programs recognized by industry bodies (SANS, IACIS, CPCC, CompTIA, etc.). Must complete within 2 years the mandatory Canadian Police College courses: CMPFOR, IEAC, NITC, MDAA. Must complete CompTIA A+, Network+ within first year of hire. Must be willing to work in challenging environments and to encounter sensitive or distressing material. Conditions of employment Secret Security Clearance Able to work overtime, evenings, weekends, and statutory holidays as required. Able to travel domestically and internationally on short notice, in various terrains and weather conditions. Able to testify in court. Holds a valid Canadian drivers license. Able to wear protective equipment and clothing. Able to meet physical health requirements, including lifting 35-40 kg. Able to meet requirements for holding a fishery officer designation. Other information The Public Service of Canada is committed to building a skilled and diverse workforce that reflects Canadians we serve. We promote employment equity and encourage you to indicate if you belong to designated groups when you apply. Preference will be given to veterans first and then to Canadian citizens and permanent residents, with the exception of a Nunavut job where Nunavut Inuit are appointed first. We thank all those who apply. Only those selected for further consideration will be contacted. Contact information #J-18808-Ljbffr