Detective Constable

**Department**: Cyber Crime Unit
**Rank**: Detective Constable/Police Constable Investigator Development Programme
**Location**:Near M4 Junction 12
**Closing date**:21/05/2023

We are seeking highly capable constables with a strong investigative background who have taken their NIE, or have an interest to progress towards accreditation as a Detective, to join our Cyber Crime Unit. An interest in technology or digital investigation is desirable but not essential. The applicant will receive role specific technical training.

The South East Regional Organised Crime (SEROCU) Regional Cyber Crime Unit sets out to tackle both cyber-dependent crime and the most complex and serious cyber-enabled crime. The Unit comprises of the Regional Cyber Pursue Team, Dark Web team, Regional & TVP Cryptocurrency team and is collaborated with the TVP Cybercrime unit.

The Pursue element of the unit specialises in tracking down those engaged in the most serious computer attack enquiries. This involves targeting those involved in large-scale computer malware attacks, hacking, network intrusions and denial of service attacks (DDOS). Their work also targets large-scale computer fraud and criminal activity on the Darknet marketplace.

As part of team of specialist officers conducting proactive and reactive investigations into Cyber Crime and Dark Web offences, falling within the remit of the SEROCU. You could be involved in the investigations in a number of roles such as OIC, deputy OIC or Disclosure officer. You will been identifying and securing electronic evidence sources, ensuring compliance with relevant governance frameworks and policies.

**Responsibilities**
- Working to ISO17025 & ISO17020 standards, seize and record electronic evidence sources. Take appropriate safeguards, photograph and label the components of the device, appropriately package, seal and label the device in accordance with ISO17025 SEROCU Procedural Guidelines.
- Working to ISO17025 & ISO17020 standards, capture and preserve electronic evidence carried out in a laboratory. Conduct any preliminary risk assessments, select appropriate process, tools and preserve the captured data in line with the ISO10725 SEROCU Procedural Guidelines.
- With regard to ISO17025 & ISO17020 standards and Best Practice Guide to Securing Digital Evidence, capture and preserve electronic evidence carried out at a scene. Conduct any preliminary risk assessments, select appropriate process, tools and preserve the captured data. Support the SEROCU Digital Forensic Unit by deploying as required to provide technical support for a range of digital devices including server capture or network investigation.
- To work to ISO17025 & ISO17020 SEROCU Procedural Guidelines to ensure that Cyber PURSUE & Digital Forensic Units achieve and maintain ISO17025 & ISO17020 accreditation. To ensure that Training and Competency is maintained and appropriately recorded.
- Investigate electronic evidence in relation to criminal investigation, or to due diligence and maintaining professional standards. Conduct investigation using appropriate processes, methodologies, tools and techniques.
- Evaluate and report electronic evidence in relation to criminal investigation or to due diligence and maintaining professional standards. Identify further lines of examination as necessary and identify opportunities for further investigation if they exist.
- Conduct Open Source Internet investigations. Assess all immediately available electronic evidence, conduct risk assessments, assess the factors likely to impact on the investigations, check the necessary authorizations, ensure that all material is retained and recorded. Pass on any relevant information and intelligence that may be relevant to appropriate person(s) and departments. Comply with appropriate legislation.
- Conduct network investigations. This may include, but is not limited to, serious network intrusions which overcome IT systems’ architectures and defences. Investigate the nature, cause and consequences of a threat based on the evidence, information and intelligence. Identify victim(s) and potential witnesses in accordance with legislation and policy.
- Recover technical equipment. Prepare and plan to recover technical equipment, disconnect, dismantle and return technical equipment.

**Essential role based training**
- Substantive PIP 2 Detective Constable.

**Required knowledge/skills**
Essential
- Ability to evidence computer qualifications including computer forensic qualifications or evidenced previous employment within computer or IT industry.
- Experience of working with computer systems e.g. servers.
- Proven ability to handle intelligence/sensitive information.
- Ability to work effectively within a team as well as independently and to operate under pressure.
- Effective communication and interpersonal skills.
- Has completed a CID foundation course or successfully completed the ICIDP.

Desirable
- Experience working in the cyber and digital en