Digital Forensics Technician
To perform technical work in the examination, identification, and preservation of digital evidence including computers, cellular phones, digital media, electronic data storage, and related materials pertaining to law enforcement investigations; to log in evidence and maintain records; and do related work as required.
Distinguishing Characteristics: This is the entry-level class in the Digital Forensics Technician series. Positions in this class typically have limited work experience and work under immediate supervision while learning job tasks progressing to general supervision as procedures and processes of assigned area of responsibility are learned. The Digital Forensics Technician I is distinguished from the Digital Forensics Technician II by the level of duties performed and the full range of duties assigned to the Technician II level.
Essential Functions: Functions may include, but are not limited to, the following (under immediate supervision while learning job tasks): conduct forensic examinations of digital devices, computer systems, storage media and electronic storage devices to obtain evidence contained within; determine methods and techniques appropriate for extracting data from a variety of digital evidence items; use forensic software applications to analyze electronic media; extract digital information from cellular telephones using a variety of approved methods and tools; preserve and copy original media; restore recoverable deleted files; access password-protected and secured files; use digital forensic extraction and analysis equipment including the use of digital camera and video capture software to acquire electronic images; maintain specialized equipment assigned to the Crime Laboratory; prepare reports documenting examination procedures and results; maintain inventory records, repairs, maintenance, upgrades, and modifications of digital devices and equipment maintained by the Police Department such as cellular phones and body worn cameras; provide basic training to department personnel on digital devices used in the course of their duties such as cellular phones and body worn cameras; provide support to the Police Department with utilizing digital imaging techniques including video capture and enhancement; build and maintain positive working relationships with co-workers, other City employees and the public using principles of good customer service; and performs related duties as assigned.
Any combination of education and/or experience and training that would likely provide the required knowledge and abilities is qualifying. A typical way to obtain the knowledge and abilities would be: Experience: Six months of experience involving forensic examinations of digital devices and computer systems or one year of experience in the installation, use and maintenance of computer hardware, software, and related peripheral equipment; AND
Training: College level courses from an accredited college in Computer Science, Information Technology, Criminal Justice, Computer Forensics or a related field.
License or Certificate: Possession of a valid California driver’s license.
Knowledge, Skills and Abilities / Physical Demands and Working Conditions:
Knowledge of: basic investigative techniques related to computer and digital device forensics; methods and techniques used to access, recover, review, validate, and preserve electronically stored data files; the principles and practices of evidence collection, preservation and handling; methods of restoring deleted files and accessing secured unencrypted data; exercise independent judgment and initiative without close supervision; applicable laws, codes, ordinances and regulations; English usage, spelling, grammar, and punctuation; and computer equipment and software applications related to assignment.
Ability to: learn police procedures, court testimony procedures and techniques; learn to examine and analyze computer hardware, software, and electronically stored data pertaining to law enforcement investigations; learn to use digital forensic extraction and analysis equipment including the use of digital camera and video capture software; find and extract electronically stored information to be used as evidence; restore deleted files; learn to access secured data; find and extract electronically stored information to be used as evidence; learn to prepare and present reports of findings; learn to prepare and maintain accurate records and files; learn to redact and enhance video/photos; testify in court; learn, understand, interpret and apply basic laws, rules and regulations; prepare clear, detailed, and concise reports; work nights, holidays and weekends and be available for stand-by and call outs after regular working hours; operate computer equipment and software applications related to assignment; communicate clearly and concisely, both orally and in writing; establish and maintain effective working relationships with those contacted in the course of work and work with various cultural and ethnic groups in a tactful and effective manner.
Physical Demands: On a continuous basis walk, stand, bend, crouch, stoop and sit for varying periods of time; use hands and fingers to grasp and use various types of equipment and tools used in forensics work; make repetitive hand and body motions; twist and reach below and above shoulder. Fieldwork may include activities involving climbing stairs and ladders, bending, lifting, and/or crawling into small/confined spaces. Must be able to use telephone and use a keyboard to communicate through written means, review information and enter/retrieve data; see in the normal vision range with or without correction; hear in the normal range with or without correction; lift weight up to 50 lbs. of varying weight and shape.
Working Environment: Primary work is performed indoors and may work outdoors with exposure to varying weather conditions when conducting fieldwork. Indoor tasks are usually in a carpeted and air-conditioned office or laboratory environment with fluorescent lighting and moderate noise level; some movement is required from office to office.