Salary: $40,914 - $61,671

Final Filing Date: November 23, 2007

Duties: This is a non-sworn position that will be responsible for a variety of highly specialized forensic examinations on seized digital evidence in computer related investigations; collects, processes, preserves, analyzes, present and archive computer-related evidence including data retrieval, password recovery, and finding deleted and/or hidden information; executes verification tests of forensic software and hardware, and methods to independently validate functionality; generates reports of findings to use in the prosecution of criminal offenses; testifies in court on cases involving computer-related evidence. Individual operates in a multi-jurisdictional environment at the local, state and federal level in cooperation with investigators in other departments. Gathers evidence utilizing video capture and maintenance of the video capture equipment/software. Provides training and performs general technical duties in support of the Durham Police Department. Work is performed under the general supervision of the Forensic Supervisor.

1. Provide specific technological support to investigative units, including the search, seizure, evidence preservation, and forensic recovery of data from crime scenes and systems.
2. Establish and maintain a computer forensic laboratory by obtaining and equipping facilities and developing procedures and policies that relate to the analysis of computer evidence.
3. Receive, inventory, and signs for computer evidence submitted to the Computer Forensics Unit for examination.
4. Release properly packaged evidence back to property room when examination is completed.
5. Collect information from investigators to determine best forensic analysis strategy required.
6. Conduct forensic data recovery and analysis of computer systems seized by the sheriff's department and other law enforcement agencies requesting our assistance.
7. Adhere to guidelines that are consistent with U.S. Department of Justice guidelines and industry standard practices in investigation, forensic evidence recovery, and forensic data analysis.
8. Develop public, private sector, and law enforcement agency relations in areas associated with crimes involving high technology.
9. Respond to requests for public appearances and speaking requests on high-technology crimes, computer and data security, Internet safety for children and adults, and computer ethics.
10. Prepare detailed reports of examination findings.
11. Prepare evidence and present testimony in court on results of seizure and handling of evidence, and results of analysis conducted.
12. Executes vertification tests of forensic software and methods to independently validate functionality.
13. Communicate with ISPs, network administrators, etc. to assist in the clarification of an issue.
14. Designs, configures, and maintains computer hardware for use in case work and program development.
15. Resolves technical issues involving equipment connectivity and communication.
16. Work with investigators and prosecutors to assist in the preparation of search warrants, subpoenas, investigative information and cases for court appearances.
17. Drafts and follows up on purchase order requests.
18. Attends seminars and classes for training in specialized forensic software applications, forensic analysis techniques and other specialized areas.
19. Participates in professional networking forums.
20. Perform related duties and responsibilities as required.

Requirements: Minimum Education: Bachelor's degree in computer science or a closely related field supplemented by specialized training in microcomputers, and/or computer forensics and/or data recovery. Certification and/or training directly related to the field of computer forensics may substitute for years of experience on a case by case basis.

Minimum Experience: 2 - 3 years of work in a related computer science field where there is increasingly responsible experience providing technical support for microcomputer systems on multiple hardware and software platforms, preferably in a law enforcement environment. Knowledge of information technologies and computer hardware and software specifications in order to utilize specialized tools and procedures to collect, preserve and examine computer related evidence. Certification and/or training directly related to the field of computer forensics may substitute for years of experience on a case by case basis.

1. Possess strong computer skills, particularly in the use of DOS commands and various Windows programs; and comprehensive knowledge of the characteristics of a wide variety of microcomputer systems and computer equipment, operating systems, application software, utility programs, and magnetic media storage devices.
2. Be trained in the use of standard word processing, database, and spreadsheet applications.
3. Fundamental principles and procedures of record keeping.
4. Have command of the english language, spelling, grammar and punctuation.
5. Learn to interpret and apply local policies, procedures, laws, and regulations.
6. Work indepently with minimal supervision.
7. Maintain confidentiality related to area of work.
8. Communicate clearly and concisely, both orally and in writing.
9. Establish and maintain cooperative working relationships with those contacted in the course of work.
10. Be familiar with Internet applications and environments, and associated communications software, e-mail, list-serves, World Wide Web, search engines, etc.
11. Be conversant with graphic images viewing programs.
12. Adequate knowledge of law enforcement and criminal law.
13. Knowledge of principles, methods and practices of investigation, evidence identification and collection according to legal standards.
14. Knowledge of rules of evidence.
15. Ability to utilize computer hardware and software and other equipment commonly used in analysis and recovery of computer data.
16. Ability to assist officers with video capture evidence and perform maintence and software updates on video capture equiptment.
17. Ability to deal with many variables and determine specific action.

• Must be able to present ideas effectively, orally and in written form.
• Must be prepared for court cases and coherently communicate in a courtroom environment.
• Ability to develop and use audiovisual materials.
• Must be able to work independently and use independent judgment and initiative.
• Must be able to prepare presentations and give speeches.
• Must have strong people skills that promote an effective working relationship with sworn and non-sworn personnel.

How to apply: