Ocean Job Board
0
Organizations
0
Jobs
Digital Forensics Examiner
Fisheries and Oceans Canada
CAD 85,854-105,080 / year
Posted on Oct 10, 2025
Digital Forensics Examiner
Reference number: DFO25J-141097-000530
Selection process number: 25-DFO-NCR-EA-654638
Selection process number: 25-DFO-NCR-EA-654638
Important messages
We are committed to providing an inclusive and barrier-free work environment, starting with the hiring process. If you need to be accommodated during any phase of the evaluation process, please use the Contact information below to request specialized accommodation. All information received in relation to accommodation will be kept confidential.
Work environment
About the position(s) and Work environment
As a Digital Forensic Examiner with Fisheries and Oceans Canada’s National Digital Forensics Service (NDFS), your primary responsibility is to support fishery officers in their investigative efforts. This role offers a unique opportunity to engage in meaningful work that contributes directly to the protection of Canada’s fisheries and the conservation of our natural resources. You will work closely with dedicated Fishery Officers on fascinating matters that make a real difference. With continuous learning and training opportunities, this position not only empowers you to stay at the forefront of digital forensics but also allows you to grow professionally while working in a role that combines purpose and impact. This includes:
• Assisting in operational activities, such as search warrants and on-site digital evidence acquisitions, to ensure compliance with fisheries laws.
• Conducting thorough examinations of electronic devices and technology, including but not limited to personal computers, mobile devices, networking equipment, gaming consoles, drones, vehicles, and data storage devices.
• Applying specialized digital forensic tools and techniques to recover, decrypt, preserve, and analyze data from electronic storage systems, ensuring evidence integrity for criminal investigations.
• Preparing technical analysis reports for investigations.
• Providing testimony in court which may include expert testimony.
Intent of the process
The immediate intent of the selection process is to staff (1) position, located in Dartmouth, NS. with an English essential linguistic profile, as well as other positions in the National Digital Forensics Unit which are anticipatory at this time.
Other office locations:
• Vancouver, BC.
• St. John’s, NL.
• Ottawa, ON.
Due to the nature of the duties of the position, the candidate will be required to work physically in a DFO office (Monday to Friday). Telework and virtual work are not possible for this role.
This selection process may be used to staff similar positions with various language requirements, locations, tenures and security requirements within Fisheries and Oceans Canada.
Positions to be filled: 1
Information you must provide
Your résumé.
In order to be considered, your application must clearly explain how you meet the following (essential qualifications)
EDUCATION
• Graduation from a two-year program of study from a recognized post-secondary institution with acceptable specialization in computer science, information technology, information management, or another specialty relevant to the position to be staffed.
Note:
1. Indeterminate incumbents in the IT group on December 9, 2021, who do not possess the education prescribed above, are deemed to meet the minimum education standard based on their education, training, and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the IT group.
2. Indeterminate incumbents of positions in the CS group on May 10, 1999, who do not possess the education prescribed above, are deemed to meet the minimum education standard based on their education, training, and/or experience. They must be accepted as having met the minimum education standard whenever this standard is called for when staffing positions in the IT group.
3. At the manager’s discretion, an acceptable combination of education, training and/or experience may serve as an alternative to the minimum education stated above. Whenever the minimum education is met using this alternative, it is met for the specific position only and must be re-assessed for other positions for which this alternative has been specified by the manager.
EXPERIENCES
• Significant* and recent** experience as an IT Technician or Digital Forensics Examiner.
• Experience in working with network communications, management, and security protocols and concepts.
• Experience in installing, configuring, and maintaining computer hardware, software, operating systems, and peripherals.
• Experience administering, configuring, and supporting various operating systems including Microsoft Desktop and Server OS (Windows 7, 10, 11, and Windows Server 2012 R2 to Windows Server 2025, Linux distributions in both virtualized or physical infrastructures), Apple MacOS, iOS, and Android.
• Experience analyzing and investigating technical, legal, financial, or business information stored on computing systems.
• Experience writing technical reports, procedures, or plans for IT and/or legal-related matters, such as documenting forensic analysis results, preparing incident response plans or reports, creating standard operating procedures for evidence handling, or drafting detailed reports for court disclosure and legal investigations, with demonstrated adherence to industry accepted reporting standards.
*”Significant” refers to the depth and breadth of experience associated with the performance of a broad range of related activities which were primarily the candidate's responsibility. It will be assessed on the basis of the scope, complexity and the diversity of the work performed as well as the autonomy required of the candidate to perform the activities. This level of experience is normally achieved through the performance of relevant duties for a period of approximately two (2) years.
** Recent is defined as experience obtained in the last five (5) years.
If you possess any of the following, your application must also clearly explain how you meet it (other qualifications)
ASSET QUALIFICATIONS - EXPERIENCE:
• Digital Forensics & Examination
o Experience conducting forensic examination of computing systems, including the use, functionality, and deployment of digital forensics, incident response, eDiscovery, or ethical hacking software and hardware tools.
o Experience performing digital forensics from various RAID (Redundant Array of Inexpensive Disks) and DFS (Distributed File Systems).
o Experience in the acquisition and examination of electronic devices and technology such as but not limited to personal computers, mobile devices, networking devices, gaming consoles, data storage devices, embedded systems, and other emerging technologies.
o Experience in preparing formal examination and analysis reports for investigations, as well as supporting the creation of disclosure packages for court prosecutions in accordance with recognized standards.
o Experience in safeguarding, handling and control of exhibits, evidence and law enforcement documents and reports.
o Experience in testifying in court proceedings as an expert digital forensic examiner.
• Operating Systems & Platforms
o Substantial experience working with various other operating systems, such as Apple MacOS and iOS, various Linux distributions as well as Android.
o Experience administering cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure as well as Microsoft Office365 and Google Workspace.
o Experience with virtualization products such as Oracle VirtualBox, VMWare Workstation, and Docker.
• Database Management & Querying
o Experience administering or query writing for Database Management Systems (DBMS) such as MSSQL, MYSQL and SQLite.
o Experience in administering or writing queries for No-SQL, document-oriented databases, and in working with JSON or XML.
• Programming & Automation
o Experience in writing programs using any of: PowerShell, Java, JavaScript, Python, Bash, C++, C#, PHP, or PERL programming languages.
o Experience in programming and scripting in order to automate processing and to provide solutions when other forensic tools or techniques are unsupported.
• Data Analysis & Open-Source Tools
o Experience working with large datasets and open-source software frameworks.
o Experience in writing and applying regular expressions (regex) for pattern matching, data extraction, and text processing across multiple programming languages and forensic tools, enabling automated searches, filtering of large datasets, and efficient identification of digital evidence in forensic investigations.
Note: Computing systems relate to digital devices which contain a file system and an operating system and can include servers, computers, mobile phones, navigational equipment, digital video surveillance devices, etc.
The following will be applied / assessed at a later date (essential for the job)
Various language requirements
English Essential
French Essential
Bilingual BBB/BBB
Bilingual CBC/CBC.
Information on language requirements
KNOWLEDGE
• Knowledge of Microsoft Windows 7, 10, 11 as well as Windows Server, OSX, Linux.
• Knowledge of installing, configuring, and maintaining Windows/Linux servers on virtual or physical setups.
• Knowledge of computer file systems and hardware.
• Knowledge and understanding of digital forensic methods.
• Knowledge and proficiency in software and hardware as per CompTIA A+.
• Knowledge of configuring, maintaining, and troubleshooting hardware and peripherals.
• Knowledge of core principles of information systems management.
• Knowledge of protocols, networking, data storage, communication methods, and operating systems.
• Knowledge of SQL and databases such as SQLite, MySQL, PostgreSQL, MS SQL Server.
• Knowledge of accepted standards for technical and forensic reporting, including clarity, conciseness, objectivity, and timeliness.
COMPETENCIES:
• Communication
• Planning and organizing
• Self-Confidence and Self-Control
• Adaptability
ABILITIES:
• Ability to organize priorities and consistently meet deadlines.
• Ability to communicate complex technical information, both verbally and in writing, to clients with varying levels of understanding of digital evidence and technology.
• Demonstrated rapid analytical thinking and keen observation skills.
• Advanced technical proficiency, with deep expertise in computer systems, programming, and forensic software tools.
• Exceptional problem-solving abilities, including evidence validation, data decryption, and recovery of corrupted or inaccessible files.
• Ability to synthesize and logically analyze large volumes of information to reach defensible conclusions, particularly for security checks and court cases.
• Strong grasp of cybersecurity principles and techniques for protecting and targeting digital systems.
• Ability to work independently and collaboratively within a team environment.
• Ability to analyze complex technical problems and recommend effective solutions.
PERSONAL SUITABILITY
• Judgment
• Reliability
• Effective interpersonal skills
• Initiative
• Discretion
• Attention to detail and accuracy in technical analysis.
• Adaptability in rapidly changing technological and investigative environments.
• Resilience and composure under pressure
• Critical thinking
• Logical reasoning
• Objectivity
The following may be applied / assessed at a later date (may be needed for the job)
ASSET QUALIFICATIONS - OCCUPATIONAL CERTIFICATION:
Demonstrated dedication to ongoing professional development by pursuing continual training, obtaining relevant certifications, and ensuring their renewal.
• Successful completion of a computer forensic certification process from a recognized Association or Industry.
Examples: SANS GIAC Certified Forensic Examiner (GCFE), SANS GIAC Certified Forensic Analyst (GCFA), IACIS Certified Forensic Computer Examiner (CFCE), Magnet Certified Forensic Examiner (MCFE), Certified Computer Examiner (CCE), Cybersecurity Forensic Analyst (CSFA), EnCase Certified Examiner (EnCE), Cellebrite Certified Operator (CCO), Cellebrite Certified Premium Operator (CCPO), Cellebrite Certified Mobile Examiner (CCME).
• Successful completion of CompTIA A+, Network+.
• Successful completion of a computer security or Cybersecurity related certification process from a recognized Association or Industry.
• Successful completion from Canadian Police College Technological Crime Learning Institute (TCLI) course(s) such as Computer Forensic Examiner (CMPFOR), Internet Evidence Analysis (IEAC), Network Investigative Techniques (NITC), and Mobile Device Acquisition and Analysis (MDAA).
ASSET QUALIFICATIONS - KNOWLEDGE
• Knowledge of case law, Criminal Code, and judicial authorizations relevant to digital forensics.
OPERATIONAL REQUIREMENTS:
• Willing and able to undertake training to maintain or upgrade knowledge, skills and/or abilities required for the job.
• Willing to participate in training and certification programs to maintain or improve the knowledge, skills, and abilities necessary for the position, including ongoing professional development activities recognized by industry bodies or certification authorities (such as SANS, IACIS, Canadian Police College, CompTIA, etc.)
• Must be willing and able to successfully complete within 2 years the following mandatory Canadian Police College course(s): Computer Forensic Examiner (CMPFOR), Internet Evidence Analysis (IEAC), Network Investigative Techniques (NITC), and Mobile Device Acquisition and Analysis (MDAA).
• Successful completion of CompTIA A+, Network+ within first year of being hired.
• Must be willing and able to work in challenging environments, including noisy, dirty, or dusty conditions, and be prepared to encounter sensitive or distressing material.
Conditions of employment
CONDITIONS OF EMPLOYMENT:
• Secret Security Clearance
• Must be willing and able to work overtime, including evenings, weekends, and Statutory Holidays, as required.
• Must be willing and able to travel frequently on short notice, both domestically and internationally, by land, sea, or air, across various terrains, in isolated locations, and under all weather conditions for varying durations.
• Must be willing and able to testify in court.
• Must hold a valid Canadian driver’s license.
• Must be willing and able to wear protective equipment and clothing.
• Must meet physical health requirements, including the ability to lift and carry heavy objects (35-40 kg) up and down stairs.
• Must be able to meet, maintain, and adhere to the requirements for holding a fishery officer designation as defined for the position.
Other information
The Public Service of Canada is committed to building a skilled and diverse workforce that reflects the Canadians we serve. We promote employment equity and encourage you to indicate if you belong to one of the designated groups when you apply.
Information on employment equity
Preference
Preference will be given to veterans first and then to Canadian citizens and permanent residents, with the exception of a job located in Nunavut, where Nunavut Inuit will be appointed first.
Information on the preference to veterans
We thank all those who apply. Only those selected for further consideration will be contacted.
Contact information
| Marie-Joelle Marleau, Advisor, Human Resources Operations |
|---|
| Marie-Joelle.Marleau@dfo-mpo.gc.ca |
- Date modified:
- 2025-10-07