Forensic Computer Analyst
Sheriff’s Forensic Computer Analyst
(Computers, Phones and Digital Storage Devices)
Position Summary: The Forensic Analyst supports all Divisions of the Sheriff’s Office by providing forensic analysis of computer systems, cellular phones, video evidence and other electronic devices. Assists and conducts investigation of computer-related crimes and criminal activity, preserves evidence, prepares reports documenting his/her forensic analysis, testifies in court, and assists other law enforcement/public safety agencies as directed. The position requires the applicant to have and maintain Colorado POST peace officer certification.
Examples of Duties
- Conducts the forensic analysis of computer systems and other forms of digital evidence, with the goal of preserving, identifying, extracting, interpreting, and documenting the evidence found.
- Analyzes and preserves video forensic evidence with the goal of preserving, identifying, extracting, interpreting, and documenting the evidence found.
- Uses experience and knowledge of a wide variety of advanced computer technologies and theories to conduct analysis of submitted evidence.
- Receives, inventories, and signs for physical evidence submitted for examination.
- Reviews laboratory requests and determines the type of examination needed.
- In data recovery cases, determines the most appropriate method of protecting original evidence and recovering deleted, erased, hidden and encrypted data.
- Authors affidavits and serves search warrants.
- Prepares cases and testifies in court.
- Conducts proactive on-line investigations involving sexual predators, computer fraud, and identity theft.
- Works closely with other employees, law enforcement agencies, social workers, lawyers, volunteers, and other members of governmental agencies.
- Required to complete detailed computer offense and incident reports.
- Acts as the agency liaison for the ICAC (Internet Crimes Against Children) Association for Colorado. Makes entries and queries via the use of an on-line computer system.
- Makes public presentations regarding Internet safety.
- Ability to obtain and maintain the Certified Forensic Computer Examiner certification from The International Association of Computer Investigative Specialists.
- Ability to independently conduct comprehensive analysis in all types of forensic microcomputer, computer media searches, cellular telephones and examinations.
- Knowledge of computer science and laws related to computer evidence recovery as well as procedures for the collection, preservation and presentation of computer evidence.
- Skilled in the application of computer science to recover data that has been deleted/erased, fragmented, hidden, or encrypted from data storage devices.
- Demonstrated ability to evaluate and maintain hardware and software necessary for the performance of computer related investigations.
- Knowledge of state-of-the-art computer hardware and software technology that impacts computer related investigations.
- Maintain familiarity with the ever-changing world of computers and electronics being analyzed.
- Be Colorado P.O.S.T. certified or P.O.S.T. certifiable.
Background information, including criminal history.
- Must be at least 21 years old and a United States Citizen.
- Must not have any felony convictions. Committed no felonies, including illegal drug use, in the past three years.
- Must not have any domestic violence offense related convictions or domestic violence related restraining orders in effect.
- Must not have any DUI/DWAI convictions or drivers license suspensions or revocations within 24 months of application or more than one DUI/DWAI conviction in lifetime.
- Must not have used marijuana within one year of application. A history of excessive use of illegal drugs, or other offenses could disqualify an applicant.
- Must be a resident of Colorado and possess a valid Colorado Driver’s License at time of appointment and must have a good driving record.
Education and Experience:
High school diploma or equivalent (G.E.D.) required. College Degree in the Behavioral Sciences or Criminal Justice is preferred.
Enforcement/investigative experience and professional training in computer investigative techniques, application, and legal aspects is highly desired.
Knowledge, Skills, and Abilities:
- Must have ability to accurately perceive, soundly reason, and correctly judge situations, occurrences and circumstances.
- Must have good communications skills and be able to express clearly and precisely, orally and in writing.
- Must have a great deal of initiative and tenacity to actively influence events rather that passively accepting them.
- Must have a proper degree of stress-tolerance, including stability and the ability to perform under pressure.
- Must have the personality traits conducive to working with superiors, peers, subordinates, and members of the public from all socio-economic and cultural backgrounds.
- Must possess the following personality traits: Maturity, honesty, integrity, adaptability, sensitivity, compassion, common sense, good self-esteem, patience, wisdom, reliability, self-discipline, creativity, fortitude, assertiveness, pride in work, initiative, dedication to public service, and problem solving skills.
- Ability to manage complex computer or internet based investigations including authoring of affidavits and service of warrants.
- Must be able to complete all annual requirements to maintain Colorado P.O.S.T. certification.
Physical and Emotional Demands of the Job:
- Depending on daily assignment, some sedentary physical work with frequent sitting up to 4-6 hours/day alternating with constant standing/walking up to 8-10 hours/day.
- Constant use of the hands for simple grasping and fine manipulation.
- Frequent eye/hand coordination to operate personal computer and office equipment. Frequent bending, squatting, kneeling, climbing step stools and stairs, and reaching overhead.
- Occasional lifting up to 20#. Vision for reading and working at a monitor for prolonged periods of time, interpreting and entering information into multiple databases.
- Speech communication and hearing to maintain communication with co-workers and citizens.
- Must have high level of emotional tolerance for viewing and investigating crimes involving sexually exploitive material involving children.