Digital Forensic Analyst

Duties

Typical Duties (May include, but are not limited to, those duties listed below)

• Conducts complex forensic examinations and analysis of digital devices such as computers, laptops, hard drive imaging, vehicle infotainment systems, video surveillance systems, and cell phones.
• Determines best methods and techniques appropriate for extracting data from a variety of digital evidence items.
• Uses forensic software applications to access password-protected devices, secure files, and analyze data.
• Secures and collects digital and electronic devices and/or surveillance video.
• Prevents the transference of viruses, destructive programs, and inadvertent writes to and from the original media in the office or in the field.
• Physically disassembles and examines computers and related hardware components and documents computer hardware configurations and conditions.
• Prepares clear, comprehensive, technically sound, and accurate reports that include determined facts and conclusions to support investigations.
• As an expert witness, prepares and presents fair and impartial court testimony concerning findings established by analyses; may prepare courtroom displays and exhibits.
• Independently conducts routine preliminary investigations to assist a team of investigative sworn staff.
• Creates forensic images of original digital evidence; examines digital evidence utilizing various analytical techniques.
• Assists sworn staff to identify and log field evidence in compliance with search warrants and maintain the chain of evidence.
• Performs other related duties that may be reasonably expected as part of this classification.

 Earn a Degree in Crime Scene Investigation, Forensic Science, or Computer Forensics

Requirements

Education and Experience:

• Bachelor’s degree from an accredited college or university in computer forensics, computer science, information technology, or criminal justice or a closely related field and,
• Two (2) years of experience in a position with a local, state, or federal law enforcement agency with responsibility for assisting with criminal investigations, identifying and collecting evidence, extracting and processing digital evidence, completing crime reports, and testifying in court regarding criminal cases.
OR
• High School Diploma or tested equivalent and,
• Four (4) years of responsible experience with a local, state, or federal law enforcement agency with responsibility for assisting with criminal investigations, identifying and collecting evidence, extracting and processing digital evidence, completing crime reports, and testifying in court regarding criminal cases.

Knowledge:

• Advanced investigative techniques related to computer and digital device forensics and forensic-related software.
• Methods and techniques used to access, recover, review, validate, and preserve electronically stored data files.
• Advanced use of digital forensic extraction and analysis equipment and software.
• Procedures, practices, and laws regarding evidence collection, preservation, and integrity.
• Acceptable practices and standards recognized as best practices for digital evidence collection and processing from the appropriate forensic accreditation board.
• Methods of restoring deleted files and accessing secured and encrypted data.
• Police procedures.
• Court testimony procedures and techniques.
• English usage, spelling, grammar, and punctuation.
• Computer equipment and software applications related to assignment.

Abilities:

• Examine and analyze computer hardware, software, and electronically stored data pertaining to law enforcement investigations.
• Find and extract electronically stored information to be used as evidence.
• Analyze data and information retrieved during duties related to a specific investigation or crime, including disturbing and traumatic videos and images.
• Download and analyze surveillance videos.
• Prepare clear, accurate, and comprehensive written and oral reports.
• Use specialized digital forensics laboratory equipment and software.
• Maintain confidentiality of information; read, understand, and follow departmental policies, instructions, laws, and ordinances.
• Establish and maintain good working relationships with those contacted in the course of work, demonstrating tact, diplomacy, patience, and compassion.
• Work in a safe and prudent manner.
• Comply with laws, regulations, and professional practices governing law enforcement services and operations.
• Prepare and maintain clear, accurate and concise reports, records, and case statistics/findings.
• Effectively communicate with various people such as court officials, peace officers, attorneys, victims, witnesses, and suspects in diverse situations and environments.
• Use appropriate judgment to make immediate field decisions.
• Use initiative to develop leads and to research case information.

Licenses and Certificates

• Obtain vendor certifications for digital forensic tools in use by a department or vendor agnostic certifications as noted below within one year of date of hire.
• Required basic course - CCO (Cellebrite Certified Operator), and
• Required basic course - CCPA (Cellebrite Certified Physical Analyst),
• CCE (Certified Computer Examiner) (desirable),
• CFCE (Certified Forensic Computer Examiner) (desirable)
• Possession and continued maintenance of a valid California C driver’s license.

DESIRABLE QUALIFICATIONS

• Basic laws, ordinances, and procedures associated with the operation of the criminal justice system
• Major coursework in computer forensics.
• Subject matter and practices within an area of specialization, such as Crime Scene Investigation, Photography, and/or Digital Evidence.

Do you have the Education Required? See available on-line and campus-based degree programs now!