Requirements:

A minimum of ten years of law enforcement experience planning, conducting, and participating
in complex financial investigations with a minimum of five years in a specialized area of
expertise such as Forfeiture, Organized Crime, White Collar Crime, Fraud, Drug, Money
Laundering or similar area of criminal activity is required. An undergraduate degree is required.
The SFI must possess working knowledge of current financial investigative techniques, including
the use of commercial databases and other sources of information, and a valid driver’s license.
Foreign language skills are preferred. TS clearance is required, dependent upon the government
agency being supported on contract.

​

Positions Description:

• Provide advice and guidance to fully develop the forfeiture aspects of an on-going

investigation. Advice and guidance include but are not limited to, providing guidance to
investigating agencies’ criminal investigators on specific tools and techniques utilized to
analyze financial information.

•  Analyze financial records obtained by the investigating agencies through internal and

external databases and submit reports documenting the results, when requested.

Specifically, the contractor will review bank statements; deposits; and debit transactions,
including checks, letters of credit, Currency Transaction Reports (CTR), loan
applications, and related records that are obtained pursuant to Federal and State
subpoenas and search warrants executed by the Government. The contractor will review
the documents to determine hidden assets and false statements that are used to hide
illicit assets from investigators and to make the assets appear to be legitimate.

• Review, process, and analyze information sufficient to assist in determining the amount

to seek forfeiture;

• Identify and trace assets during the course of investigations; and assist the Government in

perfecting its interest in the property.

• Assist in the location and repatriation of assets that are subject to forfeiture.

• Identify the individuals and entities making deposits and all related bank

accounts, properties, investments, and any other assets..

• Maintain detailed case documentation and database files of financial investigative

research to trace proceeds of criminal activities and investigative interests in targeted
property.

• Research and analyze the information derived from various investigative and business-

related automated systems including, but not limited to, ChoicePoint, Autotrack, TECS,
FINCEN, CLEAR, THREADS, Accurint, ISYS, Lexis-Nexis, PACER, CourtLink, West
Law, NADA, Used Price.com, and other Internet capabilities (e.g., law enforcement
databases to provide forfeiture-specific case support to the Government in civil and
criminal forfeiture matters). Examples of research and analysis activities include:
analyzing and documenting the ownership interests of targeted properties; analyzing
financial records to trace the proceeds of criminal violations to their current form;
creating a database from financial records to document the source of targeted property;
preparing seizure warrants, civil complaints, and forfeiture counts; preparing exhibits on
the source and ownership of targeted property; documenting and cataloging evidence
on the source and ownership of targeted property; and identifying, analyzing, and
documenting potential substitute assets.

• Research and identify assets utilizing various Social Media and Cyber research tools.

• Provide additional services, including the parsing of dialed number strings, to identify

amounts and property that may be subject to forfeiture in a particular investigation and
to perfect the Government’s interest in forfeitable property.

• Organize and conduct detailed examinations of information generated during complex

criminal/civil investigations as well as alternative sources for the purpose of conducting
financial analyses of personal/business assets of targeted organizations/individuals.

• Assist with the development of sufficient probable cause to enable the Government to

pursue seizure warrants, temporary restraining orders, civil complaints, and forfeiture
counts against targeted property and parties.

• Provide investigative support to the Government with coordinated planning to mitigate

excessive risks in seizing targeted property. This includes assessing impacts on the local
community. An example would be the seizure of an occupied apartment complex.

• Prepare documents and catalog case exhibits on the source and ownership of targeted

properties.

• Perform analytical research to identify and record potential substitute assets.

• Identify witnesses and subjects and assist the case agent/attorney during interviews and

courtroom proceedings regarding the ownership and source of targeted property of
ongoing case investigations.

• Provide courtroom testimony and depositions regarding their investigative analysis and

identification of assets derived from specific unlawful activities.

• Conduct detailed link analyses, specific to forfeiture, utilizing the results of financial

analysis and other investigative techniques, such as Title III court-authorized “wiretap”
surveillance to determine relationships between the subjects of the investigation and the
events that lead to the alleged forfeitability of property and proceeds.

• Research and identify assets utilizing data amplification programs/systems and through

various forms of crypto-currencies.

Position Description:

Performs the same services as the SFI for lower complexity tasks and investigations.
Performance requires law enforcement experience including specialized experience in asset
forfeiture or financial investigations. The services shall be performed using working knowledge
of current financial investigative techniques, including the use of commercial databases and
other sources of information. Performance requires travel to local establishments to obtain
information, so a valid driver’s license is necessary. Individuals performing these services may
need to speak to individuals that do not speak English as their first language. FIs shall possess
bachelor’s degree and no less than 5 years law enforcement experience with planning,
conducting, and participating in complex financial investigations. TS clearance is required,
dependent upon government agency being supported on contract .

Positions Description:

The services are required to be performed with expert-level knowledge of law enforcement,
seized assets, inventory management, and complex asset disposal methods. The contractor shall
monitor asset management/tracking systems and coordinate updating of the status of forfeited
assets. The contractor shall perform tasks and services necessary to manage and dispose of
seized assets including firearms, ammunition, and explosives. SPIs shall possess a bachelor’s
degree or no less than 10 years law enforcement experience with planning, conducting, and
participating in complex financial investigations. TS clearance is required.

Position Descriptions:

These services include tasks and services necessary to investigate and analyze all components of
the financial infrastructure of criminals including syndicates, their methods of criminal money
movements, and the professional money laundering infrastructure facilitating these movements.

Performance requires demonstration of intermediate to expert knowledge of complex financial
investigations, audits, and or analysis in support of the federal government law enforcement or
financial institutions. FAs shall possess an undergraduate degree and no less than 2 years law
enforcement experience with planning, conducting, and participating in financial investigations.

Requirements:

The CFE shall possess a bachelor’s degree with no less than 5 years of experience in computer forensics. In addition, the CFE shall possess at least one of the following certifications: ISFCECCE - Certified Computer Examiner; SANS CGFA - Forensic Analyst or GCFE- ForensicExaminer; or (ISC (2) –CCFP - Certified Cyber Forensics Professional, and at least one of the following certifications: Microsoft Certified Professional (MCP); Microsoft Certified SolutionsDeveloper (MCSD); CompTIA Linux+ and CompTIA Server+; or Microsoft Certified SolutionsExpert (MCSE). TS clearance is required, dependent upon government agency being supported on contract.

​

Position Description:

Performs tasks and services to provide Federal entities with the application of investigation and
analysis techniques to gather and preserve evidence from a particular computing device in a way
that is suitable for presentation in a court of law. The contractor shall support Federal entities in
combatting cyber forensics, including the acquisition, chain of custody and analysis of
electronic evidence from computers, mobile devices, and other digital storage media.
Performance requires demonstration of intermediate to expert knowledge of computer forensics,
processing, and analysis of electronic data.

​

Requirements:

Contractor shall ensure that personnel can demonstrate experience and training sufficient to perform Cryptocurrency analysis, Blockchain analytics, Open Internet, including social media, Deep and Dark Web intelligence gathering and analysis, data analytics, and electronic evidence analysis related to cybercrime investigations. Performance also requires demonstration and experience of SFI, LA, FA, or CFE assigned to the contract. SME would ideally be an industry-recognized expert in Virtual/Crypto currency including reference in professional journals.

​

Position Description:

Crypto & Ransomware: A form of malware targeting both human and technical weaknesses in organizations and individual networks in an effort to deny the availability of critical data and/or systems. Ransomware is frequently delivered through spear phishing emails to end users, resulting in the rapid encryption of sensitive files on a corporate network. When the victim organization determines they are no longer able to access their data, the cyber perpetrator demands the payment of a ransom, typically in virtual currency such as Bitcoin, at which time the actor will purportedly provide an avenue to the victim to regain access to their data AFMS AFISS 2 19 (f) Cryptocurrency/Blockchain Analytics and Deep/Dark Web Research Services. The contractor shall provide tasks and services required to perform Cryptocurrency analysis, Blockchain analytics, Open Internet, including social media, Deep and Dark Web intelligence gathering and analysis, data analytics, and electronic evidence analysis related to cybercrime investigations. (g) Cryptocurrency/Blockchain Analytics and Deep/Dark Web Research Services. The contractor shall perform tasks and services necessary for research and development related to the identification, analysis, and techniques of cutting-edge government and private sector information technology and services aimed at enhancing the investigative capabilities of Federal Agencies’ Cyber Crimes Units. This engagement will involve pursuing expertise, guidance, and recommendations that meet the needs of Federal Agencies’ mission and their stakeholders. (h) Cryptocurrency/Blockchain Analytics and Deep/Dark Web Research Services.

 

The contractor shall perform on-site analytical case support, including Internet monitoring, evidence analysis, and data collection and exploitation. Contractors shall provide expertise in cybercrime investigative and analytical case support, with specific expertise in attribution, cyber data analytics, and virtual currency tracing (i) Cryptocurrency/Blockchain Analytics and Deep/Dark Web Research Services. The contractor shall be required to perform services that require working directly on cases with Federal Agencies agents and partner law enforcement agencies to provide on-site analytical input by leveraging CI-provided data, systems, services, and tools. (j) Cryptocurrency/Blockchain Analytics and Deep/Dark Web Research Services. The contractor will be required to utilize querying and managing unstructured datasets and relational databases to perform tasks and services required. (k) Cryptocurrency/Blockchain Analytics and Deep/Dark Web Research Services. The contractor will be required to provide factual witness testimony during federal prosecutions (l) Other cyber investigative support services.

 

The contractor shall be required to perform the following: (1) Cyber targeting, Cyber Recon, Cyber Fraud, and analysis. (2) Database forensics, analysis, and modeling. (3) Virtual currency analysis and tracing of dominant and alternate crypto currencies, defi tokens and/or privacy coins. (m) The contractor shall be required to input all researched and analyzed data into various professional products for statistical analysis data, intelligence summaries, and power point presentations for law enforcement use. (n) The contractor shall provide tasks and services necessary to complete ingestion, processing, and analysis of varied datasets acquired during investigations by leveraging existing government toolsets. This support requires that the contractor collaborate and consult with government data scientists, system engineers, and software developers to extract insight from proprietary data that result in investigative and law enforcement outcomes. (o) The contractor will be required to deliver accurate, complete, and timely data analysis to AFMS AFISS 2 20 users across the organization. In addition, contractor will be required to collect feedback from stakeholders to assist with the design and implementation of tools, applications, and solutions that provide Federal agencies the capability to export data to external systems when directed by the Government. Lastly, the contractor will be required to field test the efficacy of proprietary, COTS/GOTS, and open-source solutions using Federal Agency data and investigative analytics platforms. (p) The tasks and services required to be performed in this category shall be performed by Computer Forensics Examiner (CFE) and Crypto-Currency SME (CCSs).

​