Computer Forensic Examiner
The Massachusetts State Police Computer Crimes Unit seeks a Computer Forensic Examiner/Digital Evidence Specialist for a contracted position in the Computer Forensics Lab. The contracted examiner will work full-time in the lab under the supervision of the Unit Commander.
· Responsible for the identification, preservation and analysis of digital evidence
· Acquire electronic data from computer systems, mobile devices, and servers in a forensically sound manner
· Analyze and interpret digital evidence such as e-mail, accounting data, various database extracts, and other information stored on electronic devices to develop information necessary to meet the objectives of the engagement.
· Examine digital evidence in support of criminal investigations
· Testify in state and federal court as an expert witness
· Assist with the imaging of hard drives and all related media
· Assist with the archiving of evidence for long term storage
· Assist with the preparation of reports related to examinations
· Research technical information as well as writing and editing technical documentation and reports
· Accept and return computer evidence for submitting agencies
· Ensure that submitting agencies requests for service and investigative needs are met in reasonable amount of time.
· Research legal issues and case law as it relates to digital forensics.
· Create and deliver presentations internally and to outside groups related to the search and seizure of digital evidence and other technical topics.
· Obtain and maintain quotes for purchase, purchase orders and inventory
· Perform computer hardware, software, network, and Internet related research to troubleshoot and maintain computer forensics laboratory equipment and networkPerforms all related duties as required
Office of Juvenile Justice and Delinquency Prevention (OJJDP) will require agencies to select personnel for the position from a pool of eligible candidate who fulfill either of the below criteria:
- Priority consideration will be given to Human Exploitation Rescue Operative (HERO) Child Rescue Corps candidates per OJJDP funding stipulations. Graduates of the HERO Program must upload documentation to verify their status as a graduate of the HERO program.
- OJJDP permits agencies to consider other identified wounded, injured, or ill veteran candidates in cases where they were unable to fill the position with a HERO candidate. Applicants who meet this criterion should self identify as an injured ill or wounded veteran. Applicants should not upload medical or personal information to this site. Again, you will be asked to provide such documentation if an offer to interview is extended to you. If considered for the position, candidates will be required to provide proof of their status as a wounded, injured or ill veteran of the U.S. Armed Forces. If you do not meet one of these requirements, you will not be considered for this position.
Applicants should have a strong knowledge of computer systems. Applicants should have experience in digital forensics or similar experience in the Information Technology / Digital Forensics field. Preference will be given to familiarity with Encase and FTK software applications (Certifications a plus), as well as other software tools used to recover evidence from digital media. Applicants must have strong organizational, writing, and communication skills. Applicants may be required to work on sensitive and confidential materials, including cases involving the sexual exploitation of children. Applicants must be willing to pursue appropriate certifications (EnCE, ACE, CISSP, CCE, CFCE) and receive ongoing training in computer forensics as required.
· Bachelor’s degree in Computer Science, Information Security/Systems, or related field preferred; Equivalent combination of education and demonstrated experience will be considered.
· Demonstrated understanding of evidence preservation and chain of custody rules.
· Proficiency with the Windows Operating System, PC hardware and networking, and network security hardware and software. Proficiency in UNIX/Linux is a plus.
· Ability to understand and apply the laws, rules, regulations, policies and procedures governing the Massachusetts State Police;
· Willingness to work closely with State, Federal and Local Law Enforcement as well as Federal, State, and County Prosecutors;
· Ability to exercise discretion in handling confidential information;
· Ability to follow oral and written instructions;
· Ability to gather information by examining records and documents;
· Ability to effectively communicate using oral and written expression;
· Ability to file material in accordance with standard filing procedures;
· Ability to establish and maintain harmonious working relationships with others.
· Ability to manage multiple tasks and competing priorities in a fast-paced, interactive, environment.