Police-Computer Forensic Examiner
An employee in this job class is responsible for the identification, preservation, forensic imaging, and analysis of digital storage devices. Work is performed under the direction of the Section Supervisor and/or Technical Manager. Upon completion of the detailed examination of digital storage devices, the computer examiner will complete thorough reports and provide expert testimony in court when required.
Examples of Duties
- Document digital storage devices seized as evidence.
- Disassembly of computer and mobile device components where needed for forensic imaging.
- Creation of a forensic image of digital storage devices such as hard drives, flash drives, memory cards, DVD’s, diskettes, and mobile device storage.
- Locate and review logically defined files located in digital storage devices such as images, videos, documents, spreadsheets, link files, internet history, etc.
- Recover deleted files and examine file slack and unallocated space.
- Search for hidden files with altered extensions, imbedded in other data, or encrypted.
- Validate hardware and software tools used during forensic examinations.
- Maintain computer hardware, software, data and lab network infrastructure – hardware repair and update, software updates, data backup and archiving.
- Maintain proper chain of custody for evidence items seized and provided for analysis.
- Respond to assist on search warrant service and crime scenes for the purpose of digital evidence identification and triage.
- Provide training to law enforcement on the proper identification and seizure of digital storage devices.
- Communicate with law enforcement and prosecutors to provide guidance and explain analysis, results and conclusions.
- Performs related work as required.
Knowledge, Skills and Abilities:
- Knowledge/familiarity with operating systems such as Windows XP, Vista, 7, 8, 10, Macintosh, Linux, iOS, and Android.
- Ability to successfully complete multiple rigorous certification processes, specifically obtaining a Certified Forensic Computer Examiner certification from the International Association of Investigative Specialists.
- Successfully complete annual proficiency tests in each discipline of expertise.
- Ability to view large volumes of visual evidence, including sexually explicit material and child pornography on a daily basis where required by the nature of a case.
- Ability to work with computers for a prolonged period of time.
- Knowledge of evidence handling procedures in lab and on scene.
- Demonstrate an ability to write detailed, clear and concise reports that can relate technical concepts to the layperson.
- Strong ability to type.
- Have or would be able to successfully complete computer related courses at a college level.
- Have a strong desire to learn digital forensics and best practices associated with the discipline.
- Have the ability to creatively solve problems or find answers to unexpected questions or circumstances raised during the course of an examination.
- Strong ability to work with other examiners in a cooperative atmosphere for the purpose of solving case specific problems and advancing the general technical knowledge of the computer forensics lab as a whole.
- Ability to communicate effectively with law enforcement officials, attorneys, medical examiners and the public.
Training and Experience:
Graduation from an accredited college or university with a Baccalaureate or advanced degree, preferably a computer science or related field. Previous experience in digital forensic examinations may be considered in lieu of a Baccalaureate degree.
- There is a two year probationary period for newly appointed Computer Forensic Examiners. Employee must satisfactorily complete all required training and competency testing and is subject to dismissal for failing to complete probation.
- Possess a valid driver’s license and the ability to operate the Mobile Crime Laboratory vehicle or other Department vehicles.
- Work will include call back to duty assignments and an on-call rotation.
AGE REQUIREMENT: Eighteen (18) years of age at the time of appointment.
RESIDENCY: No residency requirement. Must be a citizen of the United States or must possess a valid work permit and must submit an application for United States citizenship when eligible.
EDUCATION REQUIREMENT: Educational requirements and skills will be determined by the position classification.
ARREST RECORD: Must be free from conviction of a Felony. A Class “A” Misdemeanor conviction will be cause for immediate dismissal from the process, unless otherwise directed by the Chief of Police.
MILITARY: Must not have a “Dishonorable” discharge or “Bad Conduct” discharge if having served in the military. All “Other Than Honorable” discharges will be reviewed on an individual basis.
COMPETITIVE SELECTION PROCESS
Under the regulations of the Police Department, all appointments to the St. Louis County Police Department are made on the basis of a continuously open, competitive hiring process conducted under the supervision of the Personnel Services Unit. Each applicant must successfully complete each stage of the selection process before becoming eligible to proceed to the next step.
AN EQUAL OPPORTUNITY EMPLOYER: The Board of Police Commissioners resolved that subject to all applicable State and Federal statutory or judicial exemptions, all qualified applicants for employment and/or advancement, whether commissioned or civilian, shall be given equal opportunity for consideration, selection, appointment and retention, regardless of race, color, religion, sex, national origin, age, disability, or political affiliation.