Investigative Technologist

About the role

The Utah Office of the Attorney General is hiring for a new role as a Technologist & Investigator in the Antitrust & Data Privacy Division. This position involves building and supporting the Attorney General’s enforcement efforts in data privacy and cybersecurity matters.

Responsibilities

• Provide industry research, data analysis, and technical expertise to attorneys and staff in pursuit of investigations and enforcement actions.
• Review and analyze business cybersecurity policies and procedures and notifications of data breaches from private and government entities.
• Conduct industry research projects on issues impacting consumer privacy, gather and interpret qualitative and quantitative data, and prepare reports and recommendations to management and attorneys.
• Learn and explain the technological intricacies of digital privacy, online data flows, online advertising, cybersecurity, artificial intelligence, machine learning, algorithmic design, application development, and human-computer interaction.
• Serve on high-profile and sensitive cases, task forces, or working groups with wide-ranging impacts on consumers.
• Assess the reasonableness of businesses' cybersecurity policies and practices, including alignment with recognized security frameworks (e.g., NIST CSF), industry norms, and statutory obligations.
• Analyze the technical root causes of data breaches and evaluate the adequacy of organizations' security controls, access management practices, system configurations, logging/monitoring systems, breach containment, data exfiltration prevention measures, and incident response actions taken before, during, and after the breach.
• Support investigative work by helping to craft targeted civil investigative demands.
• Analyze materials received through civil investigative demands to help build case theories and identify additional lines of inquiry.
• Aid in the review of data and documents related to investigations and investigative findings.
• Conduct presentations and briefings of investigative conclusions through written reports.
• Support the development of case theories and aid in the creation of effective remedies.
• Develop internal guidance and educational materials that translate cybersecurity concepts into clear, accessible information for non-technical staff.
• Develop technology-related policies, procedures, tools, examination techniques, and inquiry methods to be applied in connection with consumer protection.

Qualifications

• Minimum qualifications: Bachelor of Science Degree in Computer Science, Computer Engineering, or Cybersecurity and five years of relevant experience; or seven years of recent and relevant experience with advanced technology research, software engineering, or cybersecurity, two of which must be as an expert advisor, supervisor, or team lead.
• Desirable skills: Excellent written and verbal communication skills, presentation and interpersonal skills, demonstrated interest in emerging technology and related policy issues, highly organized, self-directed, and resourceful, ability to work both independently and as part of a team, good problem-solving skills and the confidence to know when to ask questions, experience executing technology projects, products, platforms, or services using expertise in software development, design, data science, or research, experience examining large data sets using scripting languages (e.g., Python, R, SQL, etc.) to investigate allegations of illegal conduct, experience analyzing, collecting, and using information and data for law enforcement or investigation purposes, ability to be self-directed and manage workload, experience advising leaders or stakeholders on technical concepts to achieve organizational or project objectives.