Digital Forensics Examiner (CD)
Hanover County Government
Full-time
On-site
Hanover, Virginia, United States
$71,400 - $96,390 USD yearly
Description
General Description:
This is a professional nonsworn position that requires expertise in digital forensics, call detail record with geolocation analysis, and video evidence recovery with a preferred focus in public safety. The incumbent will assist law enforcement officers with enforcing criminal laws through forensic collection, recovery, processing, preservation, analysis, storage, maintenance, and/or presentation of digital evidence. This is a 3-tier career ladder position is assigned the steps of Digital Forensics Examiner 1, Digital Forensics Examiner 2, Digital Forensics Examiner 3. This position has no supervisory responsibilities or authority.
Organization:
The Digital Forensic Examiner reports directly to a Sergeant assigned to the General Investigation Unit and receives general supervision and policy guidance. The incumbent is responsible for investigating and analyzing digital evidence in support of investigative and legal processes.
Essential Functions:- Identify, acquire, and analyze digital evidence from a multitude of media sources using scientifically accepted and validated processes and leading the entire digital forensic process, implementing best practices, and ensuring the highest standards of accuracy and efficiency in evidence analysis.
- Proficient in using various computer forensic programs such as: EnCase, Magnet Axiom, Forensic Explorer, Access Data FTK Imager, WinHex, and others to perform analysis on Windows and Apple operating systems along with cell phone forensic programs such as: Cellebrite and Graykey to include proper preservation and extraction of digital evidence from iOS and Android operating systems.
- Serve as the technical advisor throughout the life cycle of digital investigations. Gathering all available information to assess the needs of the case to provide technical guidance, investigative strategies, and provide case updates as deemed necessary to all stakeholders.
- Possess expert knowledge of the principles, methods, and techniques used in the field of digital forensics and thorough knowledge of general operating system software and computer hardware.
- Provides training and instruction to law enforcement officers and civilians on proper digital forensic techniques used to identify, seize, secure, and transport digital evidence, e.g., computers, digital equipment, and electronic media; on computer-related crimes and forensic techniques; and on proper handling of evidence. Produce thorough and detailed reports documenting the examinations and analysis of digital evidence, call detail records, internet communications, etc.
- Maintains all digital forensic equipment in satisfactory condition. Researches and recommends software, hardware and training to maintain best practices. Is responsible in the contribution of research concerning legal issues and case law as it relates to digital forensics and call detail record analysis. Attends and completes all required coursework and instruction to obtain and maintain digital forensic examiner certifications.
- Works with law enforcement officers and prosecutors to assist with the preparation of search warrants for digital evidence; investigating and gathering information; and documenting findings.
- Prepares reports, expert court opinions, and other correspondence accurately and timely. Maintains case files on the digital evidence server and accurately records case information into the RMS database.
- Provide expert witness testimony in the fields of computer forensics, cell phone data extractions, call detail record with geolocation analysis, internet communications, and presentation of video evidence. Prepares documents and media for case agents and Commonwealth Attorneys as required.
- Conduct in-depth analysis of call detail records, emails, and other internet communications data to identify evidence in criminal investigations. Analyzing call detail records to extract relevant information, patterns, and trends related to communication activities. Identify and interpret patterns in call detail records that may be relevant to investigations.
- Proficient in surveillance video recovery, analysis, and editing using programs such as: Axon Investigate.
- Performs other duties as assigned.
Working Conditions:- Hazards: Exposure to child sexual abuse material, nudity, and violent content
- Environment: Primarily office and courtroom testimony. Field work and travel may be required for investigative support, training, and conferences.
- May work beyond normal schedule.
- Physical effort: Moderate – lifts supplies and equipment (PC’s, digital forensic equipment, etc.)
- Exempt
Knowledge, Skills, and Abilities:
Considerable knowledge on constructing and disassembling computers; of Windows operating systems, servers, cell phones, and other digital devices for purposes of extracting, examining, and analyzing computer hardware, software, electronically stored data, and other computer related evidentiary materials to assist with investigation and prosecution of criminal cases. Working knowledge of computer operating systems other than Windows, e.g., MacOS, Linux, and Unix; criminal laws of the Commonwealth; the methods and techniques of conducting criminal investigations; and of the judicial system. Skill in using multiple versions of Windows operating systems; in assembling and disassembling computers and other digital devices; in troubleshooting basic hardware and software problems; and in examining desktop, laptop, tablets computer hardware and mobile devices to include game systems, e.g., Play Stations and Xbox. Demonstrated ability to use forensic software applications and hardware to analyze electronically stored data; to identify, document and analyze evidence discovered during investigations; to preserve the evidentiary chain of custody; to organize, present and document findings in a concise, organized, and understandable framework, and within established guidelines; and to testify in court, providing expert testimony, in support of evidence discovery, handling and findings.
Excellent case management skills with ability to manage cases involving digital evidence of all sizes and complexity levels from concept to completion; demonstrated ability to work effectively as a team member and as a technical advisor; excellent communication skills with the ability to present ideas and recommendations clearly and concisely both orally and in writing to diverse audiences; demonstrated ability to establish and maintain effective working relationships with County officials, employees and the public as well as other resources (e.g. user groups, vendors, etc.); demonstrated ability to collaborate effectively to achieve department and County goals; demonstrated ability to multitask and effectively manage competing priorities and make sound decisions; sound critical thinking skills with the demonstrated ability to problem solve and make sound decisions, including but not limited to under pressure and in emergency situations; excellent customer service skills; tact; and courtesy.
Education, Experience, and Training:
Graduation from high school or equivalent. Bachelor’s degree in Computer Science or related field preferred. Computer and computer forensic examiner certifications such as A+, Certified Computer Forensic Examiner (CFCE), EnCase Certified Examiner (EnCE), Magnet Certified Forensic Examiner (MCFE), and Cellebrite mobile forensic certifications such as CCO/CCPA/CCPO/CCME is strongly preferred.
A familiarity with and experience working in a law enforcement environment, including conducting and/or assisting with forensic investigations related to complex criminal and administrative investigations. An advanced level of proficiency with forensic software currently utilized in the digital forensics field. Knowledge of and proficiency with conducting forensic examinations on various computer and mobile operating systems (e.g., Microsoft Windows, MacOS, Linux, Android, iOS, Windows Mobile, etc.).
Experience with and proficiency interpreting various electronic communication records (e.g., Internet Protocol logs, email records and headers, cellular communication records, GPS location history records, mobile and computer application data, etc.) Experience with the acquisition of CCTV and IP video from various proprietary video systems and servers and subsequent processing of video files to prepare demonstrative evidence. Experience preparing and documenting evidence to support probable cause and testifying in judicial proceedings.
An equivalent combination of training and experience indicating possession of the preceding knowledge, skills and abilities may substitute for the education and experience, with the approval of the Sheriff.
Special Conditions:- Serves at the will of the Sheriff.
- Comprehensive background investigation to include fingerprinting and polygraph.
- Valid Commonwealth of Virginia Driver’s License.
- Twelve-month probationary period.
- Work beyond normal hours.
- U.S Citizenship Required – Sheriff’s Office only