Digital Forensic Examiner

The Digital Forensic Examiner is responsible for providing expertise in digital forensics, call detail record with geolocation analysis, and video evidence recovery with a preferred focus in public safety. This role will assist law enforcement officers with enforcing criminal laws through forensic collection, recovery, processing, preservation, analysis, storage, maintenance, and/or presentation of digital evidence. As assigned, work may include serving as a liaison with vendors;

recommending purchases; assisting with budget monitoring; assisting in the selection of new equipment; installing and configuring digital forensic lab equipment.

Supervision Exercised/Received:

• Exercised: This classification typically does not supervise other employees.
• Received: This classification typically reports to a coordinator, supervisor, or manager.
• Note: Other reporting relationships may apply.

• Identify, acquire, and analyze digital evidence from a multitude of media sources using scientifically accepted and validated processes and leading the entire digital forensic process, implementing best practices, and ensuring the highest standards of accuracy and efficiency in evidence analysis.
• Proficient in using various computer forensic programs such as:
  Magnet Axiom, Forensic Explorer, Access Data FTK lmager, Win Hex, and others to perform analysis on Windows and Apple operating systems along with cell phone forensic programs such as:
  Cellebrite and Graykey to include proper preservation and extraction of digital evidence from iOS and Android operating systems.
• Serve as the technical advisor throughout the life cycle of digital investigations. Gathering all available information to assess the needs of the case to provide technical guidance, investigative strategies, and provide case updates as deemed necessary to investigators.
• Possess expert knowledge of the principles, methods, and techniques used in the field of digital forensics and thorough knowledge of general operating system software and computer hardware.
• Provides training and instruction to law enforcement officers and civilians on proper digital forensic techniques used to identify, seize, secure, and transport digital evidence, e.g., computers, digital equipment, and electronic media; on computer-related crimes and forensic techniques; and on proper handling of evidence. Produce thorough and detailed reports documenting the examinations and analysis of digital evidence, call detail records, internet communications, etc.
• Maintains all digital forensic equipment in satisfactory condition. Researches and recommends software, hardware and training to maintain best practices. Is responsible in the contribution of research concerning legal issues and case law as it relates to digital forensics and call detail record analysis. Attends and completes all required coursework and instruction to obtain and maintain digital forensic examiner certifications.
• Works with law enforcement officers and prosecutors to assist with the preparation of search warrants for digital evidence; investigating and gathering information; and documenting findings.
• Prepares reports, expert court opinions, and other correspondence accurately and timely. Maintains case files on the digital evidence server and accurately records case information into the RMS database.
• Provide expert witness courtroom testimony in the fields of computer forensics, cellphone data extractions, geolocation analysis, internet communications, and presentation of video evidence. Prepares documents and media for case agents and Commonwealth Attorneys as required.
• Conduct in-depth analysis of emails, and other internet communications data to identify evidence in criminal investigations. Analyzing extracted data to identify relevant patterns and trends related to communication activities. Identify and interpret patterns in extracted data that maybe relevant to investigations.
• Proficient in surveillance video recovery, analysis, and editing using forensic programs.
• Performs other duties as assigned.

• Bachelor's degree in computer science, business or a related field
• Related hardware/software support experience.
• Experience working in a law enforcement environment, including conducting and/or assisting with forensic investigations related to complex criminal and administrative investigations.
• An equivalent combination of training and experience (as approved by the department) may be used to meet the minimum qualifications of the classification.

• Computer forensic examiner certifications such as Certified Forensic Computer Examiner (CFCE), Encase Certified Examiner (EnCE), Magnet Certified Forensic Examiner (MCFE), and Cellebrite mobile forensic certifications such as CCO/CCPA/CCPO/CCME is strongly preferred.

• Some assignments may require a valid Virginia Driver's License with a satisfactory driving record and a valid Commonwealth…