Digital Forensics Specialist; AGO Senior Inv/Analyst Medicaid Fraud Control Division, Seattle/Oly
Listed on 2025-12-19
-
IT/Tech
Cybersecurity
Persons requiring reasonable accommodation in the application process or requiring information in an alternative format may contact the recruitment team . Those with a hearing impairment in need of accommodation are encouraged to contact the Washington Relay Service at or
This position will remain open until a sufficient number of candidates have applied. The Washington State Office of the Attorney General reserves the right to close this announcement at any time without notice.
Position and SalaryDigital Forensics Specialist (AGO Senior Investigator/Analyst) – permanent full‑time. Location may be Seattle or Olympia, Washington. Represented by the Washington Federation of State Employees (WFSE). AGO Senior Investigator/Analyst Salary Range 66: $80,820 – $108,780. Base pay will consider internal equity and vary by the preferred candidate’s knowledge, skills, and experience.
Additional stipends:
Seattle location receives 5% King County Location Pay; dual language skills receive 5% Dual Language Requirement Pay.
Washington State offers a competitive benefits package including Medical/Dental/Vision, Vacation, Sick, and Other Leave, 11 Paid Holidays, PERS plans, Life Insurance, Dependent Care Assistance, Flexible Spending Accounts, Public Service Loan Forgiveness, Tuition Waiver, Deferred Compensation, Employee Recognition Leave, and more. Flexible schedules and part‑time/hybrid telework options;
Wellness Program;
Infants in the Workplace Program;
Employee Assistance Program; numerous employee‑driven affinity groups.
MFCD focuses on criminal and civil law enforcement. 75% federally funded mission is to combat provider fraud, abuse, and neglect in residential facilities and non‑institutional settings. Headquarters in Olympia; team includes attorneys, auditors, special agents, data analysts, clinical health investigators, and support staff.
Duties and Essential FunctionsExpert‑level role responsible for secure collection, preservation, analysis, and reporting of digital evidence in complex investigations involving healthcare providers. Subject matter expert in digital forensic methodologies, advanced data analysis, and adherence to legal and evidentiary standards. Coordinates DF aspects with law enforcement, prosecutors, and Assistant Attorneys General. Works closely with Special Agents in lab and on‑site, traveling statewide to assist in imaging, extracting, analyzing, and documenting electronically stored information from digital items and Internet Service Providers pursuant to authorized legal process.
Evidence Collection & Preservation:
Securely acquire digital evidence from computers, mobile devices, cloud services, IoT devices, network traffic, and other storage media.
Data Recovery, Analysis & Interpretation:
Utilize advanced forensic tools (Magnet Axiom, FTK, Cellebrite, advanced cellular mapping software, and approved programs) to recover deleted or concealed data, reconstruct user activity, and uncover security incidents.
Reporting & Expert Testimony:
Prepare clear, comprehensive forensic reports suitable for technical and non‑technical audiences. Maintain all reports, documents, spreadsheets, correspondence, and other pertinent documentation electronically. Prepare and present findings in briefings and/or reports to the assigned investigative team and/or others.
Bachelor’s degree and ten (10) years of investigative experience, including the authority to independently plan and conduct investigations in civil or criminal cases.
OR
Five years’ experience as an AGO Investigator/Analyst. Additional qualifying investigative experience may substitute year for year for education.
Skills and Abilities- Minimum five years’ experience in Digital Forensics.
- Magnet Forensics, Forensic Toolkit, and/or mobile forensics certification.
- Knowledge of network computer systems, common communication software, including Outlook, and familiarity with electronic e‑mail systems; knowledge of operating systems (Windows, DOS, Unix, Linux, Mac OS), the Internet, hardware in standalone computers, various electronic storage media, data archiving technology,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).