Digital Forensics Examiner

Duties

Essential Duties and Responsibilities:

• Conducts technical forensic examination of digital and multi-media evidence, including computer hard drives, external drives, cell phones, network devices, information systems, tablets, digital storage, and other devices for evidentiary value.
• Utilizes digital forensic techniques to recover and/or decrypt data from digital and multimedia devices.
• Investigate and analyzes digital records and other types of data to aid in the investigation of criminal activities.
• Interprets and documents examination results in a variety of analytical and/or narrative reports, which may include investigative analyses, findings, and recommendations.
• Take custody of seized items following accepted evidentiary procedures and policies for the storage of computers or computer related items or components and cellular devices; maintain proper chain of custody.
• Identifies and recommends information technology resources and processes to be used in the course of related work.
• Assists investigators, pursuant to a search warrant or consent, with the proper seizure of computers, storage medium, peripherals, and other items functionally reliant upon computer components such as cell phones, video and still cameras, and other items utilizing microprocessor(s) and/or with data storage capability in an accepted technical manner that ensures preservation of or prevents the destruction of potential evidence.
• Provide ongoing analysis of technology trends to incorporate proven forensic investigation and supporting technologies into best practice; provides training and consultation on proper seizure, access, interpretation, and preservation of digital evidence.
• Provide analytical support for investigators to include social media research, data mining, cell-site mapping, and geo-location of various devices and technologies; creates analytical reports, charts, timelines, and researches new technology to support investigations.
• May respond to crime scenes to collect or advise in the collection of digital and multimedia evidence.
• Works cooperatively with a variety of law enforcement, corrections, and criminal prosecution professionals during all phases of any digital analysis and investigation process.
• Serves as a technical expert and testifies in court proceedings.

For a complete list of duties and qualifications, please refer to the job description.

 Earn a Degree in Crime Scene Investigation, Forensic Science, Computer Forensics or Forensic Psychology

Requirements

Required / Minimum Qualifications

• Associate’s degree or equivalent in Computer Science, Computer Engineering, Computer Forensics, Cybersecurity or a related field AND one (1) year of related technical and/or business experience. Three years of related technical and business experience may substitute for the education requirement on a year-for-year basis; OR
• Post high school coursework in Computer Science, Computer Engineering, Computer Forensics, Cybersecurity or a related field and four (4) years of related technical and/or business experience.
• Possession of a valid Illinois driver’s license or have the ability to obtain one within fifteen (15) days of employment.
• L.E.A.D.S. certification within one year of employment.
• GIAC Certified Forensics Examiner (GCFE), IACIS Certified Forensic Computer Examiner (CFCE), IFSCE Certified Computer Examiner (CCE) or equivalent within 18 months of employment.
• Ability to obtain and retain security clearance with appropriate law enforcement information sources.

Preferred Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Computer Forensics, Cybersecurity or equivalent experience in a computer related field, i.e. programming, networking, troubleshooting systems, user assistance, systems maintenance, etc.
• Experience in or knowledge of law enforcement functions, including investigations.
• Possession of a related industry certification, such as GIAC Certified Forensics Examiner (GCFE), IACIS Certified Forensic Computer Examiner (CFCE), IFSCE Certified Computer Examiner (CCE) or equivalent.
• Experience with network configurations and with Linux servers and workstations is preferred.

For a complete list of duties and qualifications, please refer to the job description.

Do you have the Education Required? See available on-line and campus-based degree programs now!