Digital Forensics Analyst

Overview

Acquires, processes, analyzes, and preserves digital forensic evidence in support of criminal investigations; prepares evidence for examination; reports orally and in writing; and testifies in court about the procedures used and results obtained.

Note:

This description indicates the kinds of activities and levels of work difficulty required of positions in this class and is not intended as a complete list of duties and responsibilities.

• Plans and coordinates digital forensic science activities, and determines strategies for digital forensic analysis based upon specific criminal case requirements. Identifies and acquires digital evidence from modern computer sources including personal computers, thumb drives, cell phones and tablets, Internet of Things devices, and local and server-based storage.
• Maintains chain of custody and forensic validity of evidence and related documentation. Prepares digital media for imaging by ensuring data integrity. Preserves digital data and evidence.
• Creates forensically sound duplicates of evidence that ensure the original evidence is not unintentionally modified. Documents original condition of digital and other evidence, and makes backup copies of digital information.
• Recovers hidden, deleted, or corrupted files; traces network, internet, and cellular communications. Detects, accesses, and analyzes password-protected or encrypted data, alternate data streams, and other forms of concealed data. Performs virus scanning on digital media.
• Performs forensic keyword searches and records results. Queries, extracts, and reports on data from relational databases while maintaining data integrity.
• Analyzes data and provides technically accurate results and reports.
• Researches and adopts new hardware, software, and processes in the digital forensic field. Maintains, calibrates and validates tools, techniques, equipment, and software used in the forensic examination process.
• Provides technical guidance and training to investigators and prosecutors.
• Documents hardware and software configuration of examiner’s system and systems to be examined, including drive conditions and internal components. Documents irregularities encountered, actions taken in response, and any changes made to systems.
• Acts as an expert witness in court, grand jury, or other legal proceedings through oral testimony, written reports or affidavits, or other legal instruments. Prepares and provides oral and written reports.
• Performs related work as required.

• Education:
  
  Bachelor’s degree in computer science, information systems, information security, or related field.
• Experience:
  
  Two years of experience conducting digital forensic examinations on personal computers and mobile devices.
• Equivalency:
  We may accept different combinations of education and experience. We welcome job seekers with relevant backgrounds to apply.

• Possession of a valid driver’s license, to be maintained throughout employment.
• Possession of a certification comparable to one of the following is required within six months of appointment: IACIS Certified Mobile Device Examiner, IACIS Certified Forensic Computer Examiner, or LEVA Certified Video Forensic Technician.
• Possession of all three certifications (or comparable) is required within 18 months of appointment. These certifications must be maintained throughout employment.

All applicants are subject to a thorough police background investigation, including but not limited to criminal history, pre-employment drug screening, and polygraph.

For information on what to expect with the hiring process, a test information guide, and frequently asked questions, please visit our website (note: remove this if not applicable).

Applicants must meet the minimum qualifications and pass the examination for this position to be eligible for hire.

Qualified applicants are encouraged to apply immediately. All applicants must complete and submit a City employment application online by the specified filing cut-off date.

Upon request, at time of application, the City will provide alternative accessible tests to individuals with disabilities…