Racine County Sheriff’s Office

Computer Forensic Analyst

Closes: Continuous

Basic Function

To aid in computer forensics, analytical case support, IT support and electronic media analysis within the Racine County Sheriff’s Office. Analytical support will consist of computer forensic case analysis, field response and law enforcement program support.Essential Duties

  1. Preview and analyze sensitive materials involving Crimes Against Children. More specifically, support members of the ICAC Unit with viewing and documenting highly sensitive video and data involving juveniles to ensure successful case outcomes.
  2. Provide investigative support by organizing and analyzing computerized information in computerized crime investigations.
  3. Receive and handle items of evidence, following procedures, rules of evidence and guidelines of computer forensics and the Racine County Sheriff’s Office.
  4. Conduct field previews of computers and other digital medium.
  5. Use computer forensic analytical tools to prepare reports, document evidence, and search submitted computer(s) / digital devices(s) for files that may be relevant to a criminal case or criminal charges.
  6. Prepare and discuss programming and case plans with investigators to ensure positive case outcomes and identify additional follow-up considerations.
  7. Perform duplicate image back-up of evidence received to preserve the state of those materials at the time of receipt.
  8. Restore corrupted and deleted files when possible and relevant.
  9. Prepare and organize case materials and court exhibits for potential court testimony.
  10. Participate in computer forensics analytical training and other professional development activities to enhance job skills and expand overall knowledge.
  11. Work with investigators and other members of the ICAC Unit to gain and develop new skills and proficiency.
  12. Assist in the development and installation on new equipment.
  13. Provide input and assist with the development of policies related to evidence evaluation, analysis and collection involving ICAC cases.
  14. All other duties as assigned

Supervision Received

Receives general supervision from the Criminal Investigations Bureau Sergeant and Lieutenant.Qualifications

  • Degree in Digital Forensics, Computer Science, or related field preferred.
  • 1-2 Years’ Experience in Digital Forensics, Computer Programming or a related field.
  • Non-vendor specific certification (e.g. CompTIA A+ and IACIS Certified Forensic Computer Examiner (CFCE)) preferred.
  • Vendor-specific certification (Cellebrite Certified Mobile Examiner (CCME), Magnet Certified Forensics Examiner (MCFE)) preferred.

Knowledge Skills & Abilities

  1. Experience in state and federal computer systems helpful.
  2. General knowledge of state and federal statutes, laws and regulations.
  3. General knowledge of investigative techniques and practices.
  4. Knowledge/familiarity with operating systems such as Windows, MacOS, Linux, Android, and iOS.
  5. Experience using forensic software and tools including Cellebrite UFED, XRY, AXIOM, Autopsy, and Macquisition.
  6. Knowledge of evidence handling of digital devices both on-scene and in lab.
  7. Ability to write detailed but concise reports that convey technical terms in an understandable way.
  8. Ability to use PC hardware / software, including word processing, presentation, spreadsheets, mapping software, databases and e-mail management programs.
  9. Ability to work independent of direct supervision.
  10. Ability to follow written and oral instructions and work harmoniously with others.
  11. Strong written and oral communication skills.

This description has been prepared to assist in properly evaluating various classes of responsibilities, skills, working conditions, etc., present in the classification.  It is intended to indicate the kinds of tasks and characteristic levels of work difficulty that will be required of positions that will be given this title.  It is not intended as a complete list of specific duties and responsibilities, nor is it intended to limit or in any way modify the right of any supervisor to assign, direct, and control the work of employees under his/her supervision.  The use of an expression or illustration describing duties shall not be held to exclude other duties not mentioned that are of a similar kind and level of difficulty.