Digital Forensics Examiner

The purpose of the Digital Forensics Examiner position is to provide law enforcement with complex forensic analytical support. Primary duties include assisting with search and seizure, and examination and analysis of all forms of digital media storage devices. The Digital Forensics Examiner will identify, analyze, and disseminate pertinent information related to advanced computer forensic findings. The Examiner will ensure the integrity of the computer hardware, software, and network systems used to conduct computer forensics by conducting vulnerability studies and validation studies on such equipment. This position will serve as technical consultant to federal, state, and local law enforcement agencies on computer crime and digital forensic analysis, as well as serve as a member of the International Crimes Against Children (ICAC) Task Force., * Reviews requests for complex forensic computer examinations and determines the type and methodology of examination needed

• Conducts forensic examinations of computers and associated digital media using a variety of approved methods and tools

• Analyzes information to determine relevance and applicability to criminal investigations

• Utilizes data retrieval utilities to accurately recover evidence and information from computers and related storage media

• Prepares complete and accurate reports of the results of forensic examinations

• Assists law enforcement agencies and law enforcement officers in the preparation of affidavits and search warrants

• Works with prosecuting attorneys to ensure proper presentation of digital evidence before and during criminal justice hearings

• Follows up on services by communicating with the requesting agencies to ensure that all data recovery needs have been met

• Generate monthly, quarterly, and yearly asset reports to assist in budget preparation

• Conducts vulnerability studies and validation studies on computer hardware, software, and network systems used to conduct computer forensics and cybercrime investigations

• Maintains servers and systems attached to the Forensic Local Area Network (FLAN) and the Undercover Local Area Network (UCLAN) of the CU

• Provides courtroom testimony in relation to examinations conducted and digital forensic matters

• Assists in the development and implementation of computer forensic training programs for police officers and civilians

• Researches, tests, recommends, and updates numerous digital forensics hardware and software tools

• Establishes and maintains working relationships with federal, state, local and community stakeholders, The job requires employees to view graphic material (including images and videos of Child Sexual Abuse) daily. The job duties may require an employee to lift and/or move heavy objects. The job duties may require an employee to stand for extended periods. The job duties require an employee to possess the agility and coordination to handle equipment and evidence required in the work. The job requires employees to be able to respond after hours, weekends and holidays, on a call-out basis.

• Knowledge of the methods and procedures used in the collection and processing of forensic evidence obtained from database, archiving, and backup systems. Ability to conduct digital forensics examinations and data-analysis required. Ability to prepare concise reports detailing findings and conclusions of digital forensic examinations. Familiarity with criminal theory and practice, investigating techniques, police department organizational structure. Ability to gather and analyze facts, define problems, and devise solutions. Ability to maintain proficiency with industry standard tools and practices. Understanding of the Freedom of Information and Privacy Act’s (FOIA) provisions and procedures to ensure confidential information is protected.

• Extensive knowledge of Windows, Apple, and Linux based computer technologies. Knowledge of Android, iOS, and other mobile device operating systems Ability to operate computer equipment and software to include Microsoft Office (Excel, Access, Word, Publisher, PowerPoint, Teams. Knowledge of servers and systems maintenance attached to the Forensic Local Area Network (FLAN) and the Undercover Local Area Network (UCLAN) of the CU.

• Demonstrates exceptional critical-thinking and problem-solving skills. Uses logic, reasoning, and independent judgement to understand, analyze, and evaluate situations and use good judgment to render decisions.

• Ability to provide testimony in depositions, trials, and other proceedings . Effectively communicates to a diverse audience. Provides responsive communication in a professional and empathetic manner. Ability to listen and understand information, directions and/or assignments (written and verbal).

• Develops and maintains cooperative and professional relationships with co-workers, supervisors, and internal/external stakeholders. Committed to teamwork and contributes to a positive work environment where employees feel valued and appreciated. Provides mentorship and training to personnel regarding digital forensics and the impact upon incident investigations. Ability to maintain confidentiality.

• Uses time productively and efficiently. Ability to multitask and manage several projects at any given time. Able to prioritize and effectively manage competing assignments and deadlines. Requires minimal supervision to stay on task., * Requires a Bachelor’s Degree from an accredited college or university in a field related to digital forensics, computer forensics, digital forensic science, computer science/engineering, computer information systems, information security, cybersecurity, administration of justice or a similarly related field
• Minimum of three years of experience conducting multi-faceted digital forensic investigations
• Current industry recognized vendor-neutral and vendor-specific certifications related to the field of digital forensics (e.g. EnCE, CFCE, CFE, ACE, BCERT, AFT, DMFE, Cellebrite Certified Mobile Examiner)
• Proficiency with forensic software and computer and mobile operating systems (e.g. Microsoft Windows, Mac OS, Linux, Android, iOS, Windows Mobile, Blackberry)
• Some experience with acquisition of CCTV and IP Video from various proprietary video systems and servers
• A familiarity with, and experience working in, a law enforcement environment, including conducting and/or assisting with forensic investigations, sound knowledge of search and seizure, rules of evidence, preparing evidence for and testifying in judicial proceedings

The salary range for this position is $41.64 - $46.03 per hour (approximately $64,958.40 - $71,806.80 per year, based off 30 hours a week). Starting offer is based on applicable education beyond minimum, experience and internal equity. This is a temporary, FLSA non-exempt position. Internal candidates will receive pay adjustments in accordance with Local Government Personnel Policy, §P-60.