Technology Forensic Analyst

Duties

Conduct forensic investigations, data recovery, and electronic discovery of computers and all forms of digital media.

• Detect and recover deleted / erased / hidden files. Image and examine data from computers, cellular telephones, and various forms of digital media.
• Conduct evidence collection using network and physical collection protocols in a forensically sound manner while maintaining chain of custody throughout the collection and preservation process.
• Collect, analyze, and prepare data related to call records and data transmissions of cellular and digital information in order to assist with criminal investigations, to include the mapping of this data for both prosecutorial and law enforcement use.
• Acquire video evidence such as security surveillance videos and cellular telephone videos, and converting such video to usable formats for investigation, and presentation for later use.
• Create investigative reports documenting forensic and investigative procedures that occur in the lab and in the on scene environment.
• Assist investigators with technical information needed to apply for search warrants and subpoenas involving high technology crimes.
• Acquire computer related evidence which may include seizure of physical hardware or copying computer evidence at the search site. Must have the capability to respond to scheduled search warrants when required to assist in the acquisition and preservation of electronic evidence.
• Retrieve data from custom, modified, or damaged software or hardware.
• Disassemble and reassemble a variety of hardware devices.
• Collect and transport items of evidence which specifically relate to the forensic job function.
• Proactively conduct internet crime related investigations that impact the Rochester community. This may include child pornography, online predators, fraud, theft, harassment, identity theft, stalking, as well other crimes.
• Testify at trials, hearings, grand juries, and depositions, and answer all questions in a coherent, truthful and impartial manner.

Assist in the Administration of the RPD high technology lab, equipment, and related functions.

• Maintain technical proficiency and/or knowledge on current and future technology forensic methods, and initiate the use of new methods that improve the quality of the department's forensic work.
• Serve as the departmental subject matter expert (SME) in the development of Standard Operating Procedures, protocols, and forms centered on the examination of digital media and any other related high technology investigative matters.
• Conduct validation of tools used in forensic examinations. Remain competent in understanding forensic software licensing and validation, and assist with making budgetary decisions related to expenditure of department funds used in the operation of the high technology lab and related equipment.
• Interact professionally with law enforcement investigators and other stakeholders when obtaining information necessary to perform forensic examinations.

Stay apprised of trends and current software to remain technologically proficient.

• Operate a wide variety of computer software and applications to retrieve, compare, and analyze data.
• Review various court decisions relating to the field of computer forensics.
• Maintain proficient forensic examination procedures, and other related tasks, by pursuing continuing education courses in digital and multimedia evidence technology.
• Expand and use operational knowledge regarding various computer operating systems including Windows, MAC, IOS, Android, and Linux, as well as computer forensic tools.
• Stay informed of social media trends in order to serve as an adviser and consultant to officers, investigators, and administrators on investigations or matters involving this area.

Perform other assignments as assigned or necessary.

 Earn a Degree in Crime Scene Investigation, Forensic Science, Computer Forensics or Forensic Psychology

Requirements

Education and Experience

• A Bachelor's degree in Computer forensics, computer science, software engineering, information systems, data science, digital forensics, statistics, mathematics, informatics or closely related field from an accredited four-year college or university AND three (3) years of full-time employment experience working with data, databases, and business process analysis, including gathering, modeling, and mining of data, as well as report and visualization development.
OR
• An Associate's degree in computer forensics, computer science, software engineering, information systems, data science, statistics, mathematics, informatics or closely related field from an accredited four-year college or university AND five (5) years of full-time employment experience working with data, databases, and business process analysis, including gathering, modeling, and mining of data, as well as report and visualization development.

Licenses and/or Certifications

• Valid driver's license

Desirable Qualifications

• Experience with investigative techniques used in taking statements and conducting interviews in relation to computer evidence
• Certifications - Although not necessary to apply for this opportunity, one or more of the following certifications will be helpful to the individual hired.
• Certified Computer Forensics Examiner (CCFE)
• Certified Forensic Computer Examiner (CFCE)
• Certified Computer Examiner (CCE)
• Basic Computer Forensics Examiner (BCFE)
• Computer Hacking Forensic Investigator (CHFI)
• Certified Mobile Forensics Examiner (CMFE)
• Access Data Certified Examiner (ACE)
• EnCase Certified Engineer (EnCE)
• Certified Forensic Examiner (GCFE)
• Certified Forensic Analyst (GCFA)
• Advanced Smartphone Forensics (GASF)
• CyberSecurity Forensic Analyst (CSFA)
• Professional Certified Investigator (PCI)
• Certified Computer Crime Investigator
• Certified Computer Forensic Technician
• Managing a Digital Forensic Lab (IACIS MDFL)
• Preparing for Labe Accreditation (IACIS PLA)
• Computer Forensic Lab Operation and Management (NICCS DFS 565)

Special Requirements

• A psychological examination and background investigation, including fingerprinting, are required as a condition of employment.

ADDITIONAL INFORMATION

Knowledge, Skills and Abilities

• Knowledge of: basic investigative techniques; theories used in forensic data collection; operating systems including Windows, MAC, IOS, Android, and Linux, Internet browsers, search engines, e-mail systems, and research tools; software applications utilized by suspects during the commission of crimes with digital media; forensic tools such as Penlink, PLX, Graykey, Cellhawk, Gladuiator, Cellebrite, LAN/WAN/MAN network structures and protocols; data acquisition methodologies; methods and procedures used in a wide variety of e-mail, archiving, and backup systems; Windows, Apple, and Linux based computer technologies; cell phone architecture and operating systems; methods and procedures used in the collection and processing of forensic evidence obtained from database, archiving, and backup systems; and design and development of relational databases in support of large-scale digital forensic investigations and data-analysis.
• Skill in: communicating effectively in both oral and written forms within all levels of the organization including peers and investigators as well as with other agencies, task forces, vendors, and associated businesses and the public; coordinating work when collaborating with others in a group or task force setting; evaluating and maintaining hardware and software necessary for the performance of criminal investigations; utilizing business analysis, working with database design and development; data processing, wrangling, mining, warehousing and reporting; creating and maintaining dashboards; developing applications for business needs; anticipating change and future needs.
• Ability to: gather and analyze facts, define problems, and devise solutions; conduct digital forensics examinations and data-analysis required in the work; prepare concise reports detailing findings and conclusions of digital forensic examinations; maintain proficiency with industry standard tools and practices; maintain a high level of professionalism in all areas of performance; provide expert testimony in depositions, trials, and other proceedings; multitask and manage several projects at any given time; and testify competently in court.

PHYSICAL AND ENVIRONMENTAL CRITERIA - In compliance with the Americans with Disabilities Act, the following represents the physical and environmental demands for this position. The employee must be able to perform the essential functions with or without accommodation.

• In consideration of the overall amount of physical effort required to perform this position, the work is best described as Sedentary to Medium Work: Primarily exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met. This role on occasion requires the individual to lift objects weighing up to 50 pounds which would be considered Medium work.

Physical demands that may be required continuously (2/3 or more of the time), frequently (1/3 to 2/3 of the time), and occasionally (up to 1/3 of the time) are noted below:

• Continuous demands: sitting, fine dexterity,
• Frequent demands: standing, walking, reaching, handling,
• Occasional demands: lifting, carrying, pushing/pulling, kneeling, crouching, crawling, bending, twisting, climbing, and balancing.
• Sensory requirements necessary in the performance of the essential functions of this position include: sight, hearing, and touch.
• Environmental conditions that may exist in the performance of the essential functions of this job include: exposure to elements that may be found at a crime scene.

Do you have the Education Required? See available on-line and campus-based degree programs now!