Digital Forensic Specialist; Forensic Scientist | Medicaid Fraud & Abuse | Olympia

Persons requiring reasonable accommodation in the application process or requiring information in an alternative format may contact the recruitment team .

This position will remain open until a sufficient number of candidates have applied. The Washington State Office of the Attorney General reserves the right to close this announcement at any time without notice.

The Attorney General’s Office is recruiting for a permanent full time Digital Forensic Specialist (Forensic Scientist
4) in the Medicaid Fraud & Abuse Division. This position is located in Olympia, Washington, and is represented by the Washington Federation of State Employees (WFSE).

Forensic Scientist 4 Salary Range (68): $84,984 - $114,264 (Effective 7/1/25) | $86,688 - $116,544 (Effective 7/1/26) The base pay offered will take into account internal equity and may vary depending on the preferred candidate’s job‑related knowledge, skills, and experience.

The AGO provides a workplace that is understanding of work‑life balance and promotes advancement by offering a wide variety of professional development and growth opportunities.

• Medical/Dental/Vision for employees and dependent(s)
• Vacation, Sick, and Other Leave
• 11 Paid Holidays per year
• Public Employees Retirement System (PERS) plans
• Life Insurance
• Dependent Care Assistance
• Flexible Spending Accounts
• Public Service Loan Forgiveness
• Tuition Waiver
• Deferred Compensation
• Employee Recognition Leave
• Wellness Program
• Infants in the Workplace Program
• Employee Assistance Program
• Employee‑driven affinity groups

• Responsible to independently operate as the forensic technical lead at multiple search warrant sites and locations which often occur simultaneously across WA state. Maintains and runs a mobile laboratory during onsite search warrants ensuring quality processes and operational compliance with all certification, accreditation, legal standards, and requirements.
• Responsible for assigning, auditing and correcting the casework of new digital forensics personnel in all laboratory and field settings. Authorized to direct and stop casework processes at any time if a problem occurs in the laboratory, mobile laboratory, and/or out in the field.
• Perform highly complex analyses of digital evidence from computers, mobile devices, cloud services, IoT devices, network traffic, and other storage media. Interpret complex datasets, identify patterns and anomalies, and reconstruct events from multiple evidence sources.
• Uses forensic techniques, programming languages and develops queries to identify and recover hidden, encrypted, unparsed or deleted information related to the case, safeguards the integrity of data by following a chain of custody that ensures admissibility in court, and testifies as an expert witness in legal proceedings when required.
• Forensic reporting of digital evidence across numerous formats. Reports findings in the form of a written laboratory report based on the interpretation of observations and analytical test results.

Six (6) years of experience in digital forensics or a closely related field with at least four (4) years of technical experience working and managing and/or operating a lead role in a forensic lab and testifying in a court of law.

A Bachelor's degree in forensic science or closely related field may substitute for two (2) years of experience in digital forensics.

• Professional certifications such as GCFA, GCFE, CCO, CCPA, CCME, MCFE, FTK or CFCE
• Background in specialized areas such as SQL, SQLite, Python, and other programming languages; cloud forensics, IoT forensics, or malware reverse engineering
• Ability to apply knowledge of network computer systems, common communication software, including Outlook, and familiarity with electronic e‑mail systems; knowledge of different operating systems including Windows, DOS, Linux, and Mac OS; understanding of the Internet; hardware in standalone computers; various electronic storage media including internal and external hard drives and data archiving technology; USB/Firewire technology; and…