Ventura County District Attorney’s Office – California

Computer Forensics Examiner

Description

THE COUNTY COMMUNITY
Ventura County is located on California’s “Gold Coast,” approximately 35 miles northwest of Los Angeles and 20 miles southeast of Santa Barbara.  Residents enjoy rolling hills and sweeping ocean views in a nearly perfect Mediterranean climate with an average annual temperature of 74.2 degrees.  The beauty and weather combined with a wonderful quality of life are among the many reasons our residents choose to call Ventura County “home.”

THE AGENCY
The Ventura County District Attorney’s Office is the public prosecutor for the county’s 850,000 residents.  Our office employs approximately 280 employees including attorneys, investigators, victim advocates, and other professional support staff who strive to seek justice, ensure public safety, and protect the rights of crime victims.
 
THE POSITION
The District Attorney’s Office has one immediate opening for an Office Systems Coordinator III who will work as a Computer Forensic Examiner assigned to the High Tech Task Force (HTTF).
 
Under general direction of the HTTF supervisor, incumbent will provide technical assistance to department personnel in office automation systems.  Specific to this assignment, Computer Forensic Examiners inspect legally seized electronic devices for digital evidence to present in court.  The selected candidate will assist with search warrants, as well as crime scene, administrative, and criminal investigations.  Incumbent will also be required to testify in court on the findings of his/her examinations.  Specialized training in technical report writing, crime scene investigation, legal updates, and software/hardware topics will be provided.  Work is performed primarily in an office environment; however, there will be a need to perform field duties as directed and some of the required training will involve out of state travel.  The position works a Monday through Friday schedule, 8 AM to 5 PM, but hours and workdays may vary depending on a particular investigation.
 
The ideal candidate will have specialized knowledge of and experience with the principles and procedures used for investigative computer forensics including experience using software such as Cellebrite, Axoim, and EnCase, as well as different versions of Windows, Mac, Linux, and other operating systems. The ideal applicant will also have experience writing complex reports in a manner that is easy to follow. 
 
PAYROLL TITLE:  Office Systems Coordinator III
 
EDUCATIONAL/BILINGUAL INCENTIVE
Incumbents may be eligible for an educational incentive of 2.5%, 3.5%, or 5% based on completion of an Associate’s, Bachelor’s, or Master’s degree that is not required for the classification. Incumbents may also be eligible for bilingual incentive depending upon operational need and certification of skill.
 
DEPARTMENT/AGENCY: District Attorney’s Office 
 
Computer Forensics Examiner (Office Systems Coordinator III) is represented by the Service Employees International Union (SEIU) and is not eligible for overtime compensation.Examples Of Duties

Duties may include, but are not limited to the following:

• Completes forensic computer examinations to include: data recovery, damaged, fragmented, files, erased or hidden files; recovery of data from damaged or modified electronic devices.
• Assists law enforcement in the field at crime scenes or investigative scenes to recover electronic evidence.
• Prepares documentation to include forensic reports based on observations noted during forensic examinations.
• Assists with criminal investigations and prepares cases for filing relating to technology crimes and crimes involving the internet.
• Maintains knowledge of laws, regulations, policies or other issuances pertaining to digital forensics or information privacy.
• Preserves and maintains digital forensic evidence for analysis.
• Develops plans for investigating alleged computer crimes, violations, or suspicious activity.
• Prepares digital evidence to be provided to defense counsel for purposes of discovery or work closely with the defense team when digital evidence involves privileged communications.
• Conducts research regarding new forensic techniques using new hardware or software.
• Performs training and assistance to law enforcement personnel in the preparation and collection of electronic evidence.
• Responsible for courtroom preparation and testimony related to computer forensics.
• Acts as a liaison with other Local, State and Federal agencies.
• Performs other duties as assigned.

Typical Qualifications

There are entrance requirements to the examination process and assure neither continuance in the process nor placement on an eligible list.
 
EDUCATION, TRAINING, and EXPERIENCE: Extensive experience in automated office systems coordination which has led to the acquisition of the required knowledge, skills and abilities. The required knowledge, skills and abilities may be obtained by completion of four (4) or more years of automated office systems coordination or related experience, including, but not limited to IT Security, e-Discovery, and computer incident response teams.
 
NECESSARY SPECIAL REQUIREMENTS:
 

• Independent travel is required for this position and therefore, a valid California driver license must also be maintained throughout employment.   
• Basic skills in computers and mobile devices
• Experience installing and updating software
• Strong writing skills 

DESIRED:

• Experience with computer network, firewall and servers
• Experience in forensic examinations of computers and related peripherals
• Experience in IT Security, viruses, trojan horses and malware
• Experience in product evaluation and procurement in the workplace
• Experience in systems registry and system networks
• Experience with video surveillance or security systems

KNOWLEDGE, SKILL, AND ABILITIES:

Knowledge of:

• Information technology including computers and related peripherals. 
• Principles and procedures used for investigative computer forensics.
• A variety of software and hardware products, specifically forensic tools used in computer forensics examinations.
• IT security, computer viruses, trojan horses and malware.
• A wide range of electronic communication devices. 

Skilled in:

• Written and verbal communication both inside and outside the organization.

Ability to:

• Use a variety of software and hardware products, specifically forensic tools used in computer forensics examinations.
• Work with the systems registry.
• Use multiple operating systems, such as SQLite.
• Operate a wide range of electronic communication devices.
• Tolerate exposure to images of a graphic and/or pornographic nature.
• Organize and prioritize work.
• Conduct research into new software and technologies for the purposes of investigative forensics.
• Learn new technologies and train users.
• Oversee and support projects.
• Establish and maintain effective working relationships with others.
• Work independently in the performance of assigned duties.
• Effectively prepare written reports.

Recruitment Process

FINAL FILING DATE:  This recruitment is continuous and may close at any time; therefore, apply as soon as possible if you are interested in it. Applications must be received by County of Ventura Human Resources in Ventura, California, no later than 5:00 p.m. on the closing date.
 
FIRST REVIEW: The first review of the applications is anticipated to occur on or around April 26, 2022 and subsequent reviews may be conducted until sufficient applications are received to meet business needs.

To apply online, please refer to our web site at www.ventura.org/jobs.  If you prefer to fill out a paper application form, please call (805) 654-5129 for application materials and submit them to County of Ventura Human Resources, 800 South Victoria Avenue, L-1970, Ventura, CA  93009.
 
Information for Transfer Candidates: NOTE: If presently permanently employed in another “merit” or “civil service” public agency/entity in the same or substantively similar position as is advertised, and if appointed to that position by successful performance in a “merit” or “civil service” style examination, then appointment by “Lateral Transfer” may be possible. If interested, please click here (Download PDF reader) for additional information.

Note to Applicants:  It is essential that you complete all sections of your application and supplemental questionnaire thoroughly and accurately to demonstrate your qualifications. A resume and/or other related documents may be attached to supplement the information in your application and supplemental questionnaire; however, it/they may not be submitted in lieu of the application.
 
SUPPLEMENTAL QUESTIONNAIRE – qualifying:  All applicants are required to complete and submit the questionnaire for this exam AT THE TIME OF FILING.  The supplemental questionnaire may be used throughout the exam process to assist in determining qualifications for the position.  Failure to complete and submit the questionnaire may result in removal of the application from further consideration.
 
APPLICATION EVALUATION – qualifying:  All applications will be reviewed to determine whether the stated requirements are met.  Applicants meeting the stated requirements will be invited to continue to the next step in the examination process.
 
TRAINING & EXPERIENCE EVALUATION (100%): A Training and Experience Evaluation (T&E) is a structured evaluation of the job application materials submitted by a candidate, including the written responses to the supplemental questionnaire. The T&E is NOT a determination of whether the candidate meets the stated requirements; rather, the T&E is one method for determining who are the better qualified among those who have shown that they meet the stated requirements. In a T&E, applications are either scored or rank ordered according to criteria that most closely meet the business needs of the department. Candidates are typically scored/ranked in relation to one another; consequently, when the pool of candidates is exceptionally strong, many qualified candidates may receive a score or rank which is moderate or even low resulting in them not being advanced in the process.
   
The eligible list established will be created from the scores resulting from a Training and Experience Evaluation (T&E). In a typical T&E, your training and experience are evaluated in relation to the background, experience and factors identified for successful job performance during a job analysis. For this reason, it is recommended that your application materials clearly show your relevant background and specialized knowledge, skills, and abilities. It is also highly recommended that the supplemental questions within the application are completed with care and diligence. Response such as “See Resume” or “Refer to Resume” are not acceptable and may disqualify an applicant from further evaluation. Applicants must earn a score of seventy percent (70%) or higher to qualify for placement on the eligible list.
 
If there are three (3) or fewer qualified applicants, a T&E will not be conducted. Instead, a score of seventy percent (70%) will be assigned to each application, and each applicant will be placed on the eligible list.
 
Candidates successfully completing the examination process may be placed on an eligible list for a period of one (1) year. The eligible list established from this recruitment may be used to fill current and future Regular (including Temporary, Fixed-Term), Intermittent, and Extra Help vacancies for this and similar positions within the District Attorney’s Office. There is currently one (1) regular vacancy within the District Attorney’s Office, High Tech Task Force.
 
BACKGROUND INVESTIGATION:  A thorough pre-employment, post offer background investigation which may include inquiry into past employment, education, criminal background information and driving record is required for this position.
 
For further information about this recruitment, please contact Kim Mariscal by email at kim.mariscal@ventura.org or by telephone at (805) 477-5153.