Digital Forensics Investigator
| Closes: 3/10/2020 |
Job Summary
The purpose of this position is to conduct highly technical analyses and procedures in the collection, processing, preservation, and presentation of digital evidence to assist law enforcement in a variety of criminal investigations; act as technical expert within the department regarding Police Computer Forensics; prepare detailed reports of investigations and analysis; assist prosecuting attorneys with trial preparation to coordinate digital evidence presentation; make court appearances and give testimony relating to cases; deploy into the field to locate digital evidence at crimes scenes, and support search warrant services.
This is a full-time, regular, non-exempt position .The schedule for this position is a 4/10 work schedule Monday – Thursday or Tuesday – Friday.
Job Details
Essential Functions:
- Conduct seizures and examinations of electronic devices including cell phones/smart phones, tablets, laptops, personal computers and corresponding electronic data storage media to secure and recover data as evidence; Assist in the execution of search warrants for evidence in criminal investigations. Conduct on-site forensic analysis previews of digital evidence. Act as subject matter expert; make determinations and recommendations regarding appropriate items to be seized based on search warrant particulars and relevant case law.
- Assist VPD Detectives and multi-jurisdictional law enforcement agencies in legal preparation and authoring of search warrants and subpoenas to properly obtain subscriber records and seizure of all types of electronic devices and media as evidence and for ESP/ISP subscriber records and content.
- Assist detectives and other law enforcement agencies with criminal investigation that have a digital component, including persons crimes such as murder, rape and robbery; child sexual exploitation crimes such as child pornography, child abuse and child sex trafficking; cyberstalking and domestic violence related crimes and; department investigations of its members that include a non-criminal administrative computer forensic need.
- Collect, preserve, label, catalog, and store evidentiary items for presentation in criminal proceedings in accordance with legal standards and best practices. Put together all relevant digital case evidence in easy-to-understand format. Present the digital evidence extraction and analysis to prosecutors and defense teams for pre-trial defense interviews. Present digital evidence in trial and respond to questions regarding findings.
- Compose reports on findings from digital evidence extraction and analysis.
- Keep abreast of changes in local, state, and federal laws and best practices. Provide recommendations for changes to departmental policy or procedure and the purchase of equipment as it relates digital forensics.
- Perform other duties and responsibilities as assigned.
Qualifications
Experience and Education
Experience:
- Two (2) years of increasingly responsible experience in digital evidence analysis, preferably in a law enforcement environment.
Education:
- Equivalent to an Associate’s Degree
Equivalent combinations of education and experience may be considered.
Computer Skills
- Intermediate skills utilizing one or more of the following platforms used for digital forensics analysis: EnCase, Cellebrite, X-Ways, Axiom, Griffeye, Recon and AccessData FTK.
- Intermediate skills in Microsoft Word, Excel, Outlook, PowerPoint.
Required Licenses and/or Certifications
- At least one industry accepted certification directly related to digital forensics, such as IACIS, EnCase (EnCE), SCERS, or other industry accepted certification(s) directly related to digital forensics.
- A valid driver’s license.
Knowledge
- Principles, methods and practices of investigation, evidence identification and collection.
- PC and MAC operating systems, hardware, and other peripherals.
- Rules of evidence and applicable laws is critical.
- Fundamental principles and procedures of record keeping.
- English usage, spelling, grammar and punctuation.
- Comprehensive knowledge of computer forensic software.
- Pertinent federal, state and local laws that pertain to: collection, processing, and preservation of computer related evidence.
- Modern office procedures, methods and computer equipment.
- Use of personal computers and basic software.
Abilities
- Collect, preserve, label, catalog, and store evidentiary items for presentation in criminal proceedings in accordance with legal standards.
- Utilize computer hardware and software and other equipment commonly used in analysis and recovery of computer data.
- Learn to interpret and apply Federal, State, and local policies, procedures, laws and regulations.
- Work independently with minimal supervision.
- Maintain confidentiality related to the area of work.
- Operate and use modern office equipment including a personal computer and appropriate computer programs.
- Communicate clearly and concisely, both orally and in writing.
- Operate a personal computer and appropriate software.
- Work in a manner consistent with the City of Vancouver’s Operating Principles.
- Work and act as a team player in all interactions with other City employees.
- Provide a high level of customer service at all times.
- Project and maintain a positive image with those contacted in the course of work.
- Develop and maintain collaborative and respectful working relationships with team members and others.
- Consistently provide quality service.
- Maintain regular and dependable attendance.