Forensics, Cybercrime
Temporary employment
Den Haag
Bachelor (EQF 6), Master (EQF 7)
Apply before:
Hours p/wk:


The Operations Directorate deals with the core business of Europol, improving the effectiveness and cooperation of the competent authorities in the Member States in preventing and combating serious and organised crime, as well as terrorism affecting the Member States. This requires close cooperation with the Liaison Bureaux at Europol and via them with the Operational Teams in the Member States.

Europol delivers a number of products and services to national law enforcement agencies to support them in their fight against international serious and organised crime, as well as terrorism.

The Operations Directorate hosts five distinct Departments: Operational and Analysis Centre, European Serious Organised Crime Centre, European Cyber Crime Centre (EC3), European Counter Terrorism Centre and the European Financial and Economic Crime Centre.

The position of Specialist – Child Sexual Exploitation is located in EC3.

EC3 serves as the centre for the Member States’ fight against cybercrime in the European Union, delivering operational and investigative support to the Member States on complex cybercrime investigations.

It also provides support to the European Union’s institutions and Member States in building operational and analytical capacity for investigations and cooperation with external partners. EC3 is the collective voice of European cybercrime investigators across law enforcement and as such is responsible for the coordination and delivery of all strategic products and external liaison.

Under the supervision of the Head of Team, the successful applicant is responsible for the delivery of operational products and services foreseen in the Europol Work Programme.


The successful applicant will have to carry out the following main duties:
• Provide specialised knowledge and experience to operational activities aimed to fight cybercriminal activities related to child sexual exploitation;
• Conduct advanced live and post mortem forensic analysis on any provided device;
• Perform tasks related with decryption including deployment of advanced tactical and offensive tools; liaise with Europol’s relevant teams and external partners to improve the organisation’s capabilities in this field;
• Develop tools to support the intelligence and forensic workflows within the team and EC3 where relevant;
• Conduct research and evaluate all source intelligence, including OSINT with specific emphasis on cybercriminal tactics, techniques and procedures;
• Develop their specialist knowledge and record it to increase institutional knowledge and make it available to complement the analytical efforts;
• Provide specialist guidance to, and participate in Joint Investigation Teams (JITs);
• Identify, initiate and assist in producing analytical outputs (operational and strategic) and other relevant intelligence products;
• Based on Member States information, prepare reports on possible opportunities for Europol and the Member States to work together on specific intelligence and information;
• Establish close contacts with designated external members of the Analysis Unit, the Member States and Third Parties’ Liaison Officers to encourage and support operational activities in the field of responsibility of the focal point;
• Participate in stand-by duty as and when required;
• Deliver training to Member States and internally;
• Any other duties in the area of competence as assigned by the management.