Technology Analyst

Job Description

This is non-sworn technical work in conducting forensic examinations of computer operating systems and computer data recovery. Work involves responsibility for assisting in investigating criminal activity by retrieving stored data from computers utilized in criminal activities. Duties include operating multiple computer systems and their peripherals, back-ups devices, modems, and any other dedicated devices, according to standard operating manuals and related experience. Work requires a continuous self-educational program to maintain a high level of the latest technology in changing data processing concepts for computers. Work requires a high level of communications skills to prepare detailed written reports and provide testimony in court proceedings. Work is performed with considerable independence under the direction of a police supervisor who makes assignments, participates as necessary and reviews and approves work products. 

Essential Duties:

• Demonstrates knowledge and skill in performing primary functions related to operating a wide variety of computer systems, software and peripherals.
• Determines type and methodology of forensic examination needed for specific computers and other electronic devices.
• In forensic data recovery cases, determines the most appropriate method of protecting original evidence and recovering deleted, erased, hidden, and encrypted data.
• Demonstrates skill in using state of the art hardware and software programs to recover data, from a range of computer technologies, including older computers and software, DOS, Unix, all Windows versions, varied email applications, fragmented or damaged files and altered data storage devices.
• Completes forensic examinations of standard and modified systems using a variety of methods including hardware, software, and diagnostic tools.
• Utilizes data retrieval utilities to accurately recover evidence and information from computers and related storage media.
• Prepares accurate and complete logs describing forensic examination procedures, analysis, and techniques used in case analysis and evidence retrieval.
• Provides professional and concise courtroom testimony concerning the accuracy and results of multiple data recovery methods.
• Documents investigative activities by keeping detailed notes and using them to generate investigative summaries, intelligence reports and a description of applicable investigative procedures.
• Performs administrative duties in a timely and accurate manner.
• Performs related work as required.

Typical Qualifications

Education and Experience
Bachelor’s degree in computer science or directly related field and two years of experience related to assignment, preferably in computer forensics and technical investigations. 
OR
An equivalent combination of education and experience sufficient to successfully perform the essential duties of the job such as those listed above, unless otherwise subject to any other requirements set forth in law or regulation.
 
License and Certifications
Depending on assignment, some positions may require:

• Specific technology-related certifications based upon assignment.
• Certifications in one or more of the following : CFCE, EnCE, SCERS, A+, Net+, Security+, CISSP, or the ability and willingness to obtain some or all of these certifications (or equivalent), if required.
• Valid Driver’s License with satisfactory driving historymay be required.

Additional Qualifications
Training and experience leading to demonstrated competencies in reading and understanding technical written materials and oral instructions; effective oral and written communications skills; knowledge and skill in operating computer operating systems and their peripherals; knowledge and skills with computer forensic methodologies and protocols. Ability to successfully pass required trainings on specific data recovery equipment devices.Additional Information

KNOWLEDGE

• Of multiple computer systems, their peripherals, back-up devices, modems, and other dedicated devices.
• Of multiple software programs including operating systems, email systems, logging, diagnostics and networking.
• Of forensic computer examination types, protocols, and methodologies.
• Of forensic data recovery equipment.

 
ABILITY

• To conduct forensic examinations of computers and to develop new forensically sound procedures for examining new electronic devices as the need arises.
• To accurately and in a timely manner prepare required written reports in the appropriate technical format.
• To effectively testify in court proceedings when appropriate.

SKILL

• In written and verbal communication, including public speaking.
• In problem solving.

ADA and Other Requirements:
Positions in this class typically require: fingering, grasping, talking, hearing, seeing and repetitive motions.

Light Work: 
Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force frequently, and/or a negligible amount of force constantly to move objects.  If the use of arm and/or leg controls requires exertion of forces greater than that for Sedentary Work, and the worker sits most of the time, the job is rated for Light work.

Working Conditions: 
Work is routinely performed in an indoor, office environment.

Note:
This job classification description is intended to be generic in nature.  It is not necessarily an exhaustive list of all duties and responsibilities.  The essential duties, functions and responsibilities and Fair Labor Standards Act (FLSA) designation may vary based on the specific tasks assigned to the position.