Salary: $40,915 - $61,671

Final Filing Date: April 7, 2007

Duties: Responsible for a variety of highly specialized forensic examinations on seized digital evidence in computer related investigations; collects, processes, preserves, analyzes, present and archive computer-related evidence including data retrieval, password recovery, and finding deleted and/or hidden information; executes verification tests of forensic software and hardware, and methods to independently validate functionality; generates reports of findings to use in the prosecution of criminal offenses; testifies in court on cases involving computer-related evidence. Individual operates in a multi-jurisdictional environment at the local, state and federal level in cooperation with investigators in other departments. Gathers evidence utilizing video capture and maintenance of the video capture equipment/software. Provides training and performs general technical duties in support of the Durham Police Department. Work is performed under the general supervision of the Forensic Supervisor.

1. Provide specific technological support to investigative units, including the search, seizure, evidence preservation, and forensic recovery of data from crime scenes and systems.
2. Establish and maintain a computer forensic laboratory by obtaining and equipping facilities and developing procedures and policies that relate to the analysis of computer evidence.
3. Receive, inventory, and sign for computer evidence submitted to the Computer Forensics Unit for examination.
4. Release properly packaged evidence back to property room when examination is completed.
5. Collect information from investigators to determine best forensic analysis strategy required.
6. Conduct forensic data recovery and analysis of computer systems seized by the sheriff's department and other law enforcement agencies requesting our assistance.
7. Adhere to guidelines that are consistent with U.S. Department of Justice guidelines and industry standard practices in investigation, forensic evidence recovery, and forensic data analysis.
8. Develop public, private sector, and law enforcement agency relations in areas associated with crimes involving high technology.
9. Respond to requests for public appearances and speaking requests on high-technology crimes, computer and data security, Internet safety for children and adults, and computer ethics.
10. Prepare detailed reports of examination findings.
11. Prepare evidence and present testimony in court on results of seizure and handling of evidence, and results of analysis conducted.
12. Executes vertification tests of forensic software and methods to independently validate functionality.
13. Communicate with ISPs, network administrators, etc. to assist in the clarification of an issue.
14. Designs, configures, and maintains computer hardware for use in case work and program development.
15. Resolves technical issues involving equipment connectivity and communication.
16. Work with investigaotrs and prosecutors to assist in the preparation of search warrants, subpoenas, investigative information and cases for court appearances.
17. Serve as department’s liason for Computer Crimes in general.
18. Drafts and follows up on purchase order requests.
19. Attends seminars and classes for training in specialized forensic software applications, forensic analysis techniques and other specialized areas.
20. Participates in professional networking forums.
21. Perform related duties and responsibilities as required.

Requirements:

Minimum Education:

• Bachelor’s degree in computer science or a closely related field supplemented by specialized training in microcomputers, and/or computer forensics and/or data recovery.

Minimum Experience:

• 2 - 3 years of work in a related computer science field where there is increasingly responsible experience providing technical support for microcomputer systems on multiple hardware and software platforms, preferably in a law enforcement environment.
• Considerable knowledge of information technologies and computer hardware and software specifications in order to utilize specialized tools and procedures to collect, preserve and examine computer related evidence.
• Certification and/or training directly related to the field of computer forensics may substitute for years of experience on a case by case basis.

Special Requirements:

• Valid North Carolina Class Driver's License.
• Must have CFCE (Computer Forensic Examiner Certification) or have attained CFCE within 18 months of hiring date.

Physical Requirements:

• Must be able to work effectively in an office and field environment.
• No special physical requirements are necessary.

Knowledge & Skills--Candidates should, ideally:

• Possess strong computer skills, particularly in the use of DOS commands and various Windows programs; and comprehensive knowledge of the characteristics of a wide variety of microcomputer systems and computer equipment, operating systems, application software, utility programs, and magnetic media storage devices.
• Be trained in the use of standard word processing, database, and spreadsheet applications.
• Fundamental principles and procedures of record keeping.
• English usage, spelling, grammar and punctuation.
• Learn to interpret and apply local policies, procedures, laws, and regulations.
• Work indepently with minimal supervision.
• Maintain confidentiality related to area of work.
• Communicate clearly and concisely, both orally and in writing.
• Establish and maintain cooperative working relationships with those contacted in the course of work.
• Be familiar with Internet applications and environments, and associated communications software, e-mail, list-serves, World Wide Web, search engines, etc.
• Be conversant with graphic images viewing programs.
• Adequate knowledge of law enforcement and criminal law
• Knowledge of principles, methods and practices of investigation, evidence identification and collection according to legal standards.
• Knowledge of rules of evidence.
• Ability to utilize computer hardware and software and other equipment commonly used in analysis and recovery of computer data.
• Ability to assist officers with video capture evidence and perform maintence and software updates on video capture equiptment.
• Ability to deal with many variables and determine specific action.
• Cleared through appropriate background investigation procedures.

Abilities:

• Must be able to present ideas effectively, either orally or in written form.
• Must be prepared for court cases and coherently communicate in a courtroom environment.
• Ability to develop and use audiovisual materials.
• Must be able to work independently and use independent judgment and initiative.
• Must be able to prepare presentations and give speeches.

How to apply:

• Job listing web site: http://www.durhamnc.gov/employment/DisplayJob.cfm?vJobID=871
• Durham Forensics web site: http://www.durhampolice.com/units/id.cfm

Posted: March 17, 2007

NOTE: crime-scene-investigator.net is not responsible for typographical errors or omissions in employment notices on this web site. Often, employers change final filing dates, change duties and/or requirements, or close employment openings without notice. If you are interested in a job posted on this site be sure to contact the employer to see if changes in the filing date or job announcement have been made. Employers can also provide more information about open positions that does not appear in the announcements on these pages.

• To sign up for the Crime Scene Investigator Newletter and be notified of job openings as they are posted, go to the subscibe to the newsletter page.
• For more job listings, return to the Crime Scene Investigator Employment page.
• To learn how to get a job in crime scene investigations, go to the Training and Employment page.