Only invited sellers can apply for an 'Open to one' or 'Open to selected' opportunity.

Learn more about Open to selected opportunities.

Sign in to continue

The Bureau of Meteorology

263-2017-18 Forensic Investigator

Important dates

Opportunity ID
Deadline for asking questions
Friday 16 March 2018 at 6PM (in Canberra)
Closing date for applications
Wednesday 21 March 2018 at 6PM (in Canberra)
Wednesday 14 March 2018


Write a summary of your brief

This position requires strong experience / knowledge with IT Forensic investigation and Incident management practices. This role will scope and carry out day-to-day management of investigations and fraud, compromises and corruption findings, risk mapping, thorough reporting and document generations and maintain chain of custody.

What is the latest start date?
How long is the contract?

Untill 30 June 2018 with an option of 1 x 12 months extension

Where can the work take place?
Who will the specialist work for?
The Bureau of Meteorology
How much can you spend per day?

About the work

Who will the specialist work with?

This role will need to work primarily with CSOC team specialising in fraud and investigation, risk management and work closely with other operations team including network, architecture, HR, and Legal team.

What will the specialist do?

Provide expertise on forensic investigations, organisational disputes, assisting with legal support.

Manage and maintain collected digital evidence, highly detailed notes and documentation and chain-of-custody.

Experience with identification, preservation, and analysis of electronic data pertaining to laptops, desktops, servers, backup tapes, mobile devices, webmail providers, cloud services.

Create exceptional, detail-oriented, client deliverables and to convey technical information to non-technical people, both in reports and verbally, interviewing and email review.

Drive the forensic technology and cyber business development initiatives.

Prepare technical findings reports for the purposes of litigation or investigation.

Good understanding of key business processes and associated control environments.

Any additional relevant information?

Work setup

Where will the work take place?

700 Collins St


Melbourne, 3008

What are the working arrangements?

The individual is required to have a physical presence at the Bureau's Head Office.

Is security clearance required?

At commencement, the successful candidate must obtain and maintain baseline security at a minimum. Negative Vetting 1 (NV1) clearance is highly desirable.

Additional information

Additional terms and conditions


You represent and warrant that, to the best of Your knowledge after making diligent inquiry, no Conflict of Interest exists or is likely to arise in the performance of Your obligations under this Deed.

If, during this Deed a Conflict of Interest arises, or appears likely to arise, You must:

 notify the Agency immediately in writing with all relevant information; and

 take such steps as the Agency requires to resolve or otherwise deal with the conflict.

Intellectual Property Rights:

The Bureau requires ownership of Intellectual Property under the Contract

Insurance Requirements:

The Service Provider must obtain and maintain the following insurances:

a) public liability insurance for an amount not less than $10,000,000 per claim or series of occurrences giving rise to a claim;

b) professional indemnity insurance for an amount not less than $5,000,000, or occurrence giving rise to a claim; and

c) workers’ compensation in accordance with Victoria.

Skills and experience

Buyers will use the essential and nice-to-have skills and experience to help them evaluate sellers’ technical competence.

Essential skills and experience
  • Excellent analytical and investigation skills
  • ISM/PSPF/NIST Cyber security knowledge
  • Familiar with the ASD Top Mitigation Strategies with real-world experience
  • People/process security – policies, user level attacks/threats and mitigation
  • Experience with eDiscovery platform such as Relativity / Ringtail, Nuix etc
  • Minimum of 5+ years of direct forensics experience, ideally in a professional services environment and or a law enforcement background
  • Familiarity with industry standard forensic software such as EnCase, FTK, Cellebrite, Nuix
  • Industry standard certification(s) such as: CFCE, EnCE, ACE, GIAC, CHFI
Nice-to-have skills and experience
Tertiary qualifications with Cyber Forensics or Computer Security

How sellers will be evaluated

How many specialists will you evaluate?
Cultural fit
  • Transparent and collaborative when making decisions
  • Have a no-blame culture and encourage people to learn from their mistakes
Area of expertise
Cyber security
How will you verify the specialist is right for the role?
  • Work history
  • References
  • Interview
How will you evaluate the specialists?

Technical competence

Cultural fit


Seller questions

No questions have been asked or answered yet.

Only invited sellers can apply for an 'Open to one' or 'Open to selected' opportunity.

Learn more about Open to selected opportunities.

Log in to continue