Davenport Police Department – Iowa

Civilian Digital Forensic Tech

Definition

Under general direction, the Digital Forensic Technician analyzes and assesses digital evidence by performing hardware, software and virtual analyses of digital evidence in the laboratory and in the field. The Digital Forensic Technician processes and analyzes digital evidence, including disassembly of computer hardware, forensic imaging of digital media, examination of data related to criminal offenses, and recovery of data from cellular telephones.  The Digital Forensic Technician interprets the results of findings to law enforcement officers/attorneys, prepares materials for presentation in court, appears as an expert witness, and performs other related duties as required.Examples Of Duties

Creates forensic images of original digital evidence in a variety of formats using validated Imaging programs such as Magnet and other similar programs. 

Performs forensic examinations of digital media using the most current versions of validated forensic software programs such as Magnet, Cellebrite, DVR Examiner, X-Ways Forensics, Paladin Pro and other similar programs.  

Assesses and analyzes complex seized phones, DVRs, peripherals, and digital media as they relate to crime investigations. 

Uses validated software and hardware write blocking devices to preserve digital evidence integrity.

Extracts digital information from cellular telephones using a variety of approved methods and tools such as Cellebrite and others. 

Maintains chain of custody and documents entire analysis using approved methods and forms. 

Prepares clear and complete reports detailing the entire digital evidence examination. 

Prepares materials for presentation in a court of law and testifies as an expert witness. 

Maintains records of repairs, maintenance, preventative maintenance, upgrades, and modifications to equipment. 

Maintains logs on all issued equipment and keeps issued equipment in working condition and error free from software or hardware conflicts. 

Assists with the development of new procedures for evidence recovery and technical policies and procedures; provides training to law enforcement personnel. 

Maintains confidentiality while handling complex and sensitive material.

Serves in an on-call capacity for emergency situations.

Researches, reviews, and assists in the development of techniques for implementation in the examination of computer-related crimes and activities.

Researches cases and defendant information (when applicable) to determine if digital evidence stored on secured servers is eligible for destruction as required by law or departmental policy and guidelines.   

Attends technical training classes, in virtual format, related to computer crimes and evidence recovery tools and techniques in order to obtain and retain comprehensive knowledge and skill level.  Limited travel may be required to attend training when virtual training format is not available.

Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.Qualifications

Bachelor’s degree from an accredited college or university including a minimum of fifteen (15) hours/credits of coursework in computer forensics, digital forensics, or closely related computer field.

OR

Associate’s degree from an accredited college or university including a minimum of fifteen (15) hours/credits of coursework in computer forensics, digital forensics or closely related computer field and two (2) years of continuous, verifiable work experience with computers and/or information technology involving the use of computers, Excel spreadsheets, analysis or similar field for a public or private agency.  Work experience may be substituted by current professional certifications in the digital forensics field such as Cellebrite Physical Analyzer, Magnet Certified Forensic Examiner, or similar certification in the discretion of the Police Chief or designee. 

Must possess and maintain a valid driver’s license for duration of employment.

Must pass a thorough background investigation and polygraph examination.  Review Background Check Guidelines (Download PDF reader) ( Click here (Download PDF reader) ) and supplemental questions on application prior to completing and submitting application.  

This position requires the employee to sit, stand, walk, talk, see, and hear.  The employee is required to use hands to handle or operate objects, controls, reach with hands and arms, climb or balance, stoop, kneel crouch or crawl and see.  The employee must occasionally lift and/or move more than 30 lbs. 

Must be able to pass a pre-employment physical as prescribed by the City of Davenport.  

Must reside in Iowa or Illinois within two (2) years of hire date and maintain residency throughout duration of employment.  

Must adhere to Professional Standards set forth by the Davenport Police Department addressing the display of tattoos.  Tattooing of the head, neck, or hands is forbidden.  SELECTION PROCESS:

Examination:  The examination/screening process will consist of the following sections with each section weighted as indicated (each section must have a 70% in order to continue in the process):

1.   Written Examination:   30%
2.   Interview:                     70%

A written exam will be administered virtually to qualified applicants on Friday, May 13, 2022, at 1:00 P.M. or 5:00 P.M. OR Sunday, May 15, 2022, at 10:00 A.M. or 3:00 P.M. Applicants will be required to select one exam time.  The written exam will be a competency test to determine knowledge related to the technical aspects of the Digital Forensic Technician position.  Applicants must score a minimum of 70% to proceed in the selection process.

All applicants passing the written exam will be required to submit copies of high school diploma, certified transcripts and copies of diplomas from colleges or universities attended and complete a Personal History Statement (background questionnaire) and turn in the completed questionnaire prior to their scheduled interview time.

Interviews will be conducted May 19 – 31, 2022.

Background investigations and polygraph exams will be conducted following interviews.

A civil service list of no more than 15 names is expected to be certified at the July 13, 2022, Civil Service Meeting.  

Applicants who are disqualified at any step of this process are encouraged to reapply during the next recruitment process.Knowledge and Skills

Knowledge of: 

• mobile device repair and current data acquisition methods. 
• distinguishing between user-generated and system-generated data.
• searching raw binary data for known or unknown data structures and file content.
• parsing encoded data, SQLite and Extensible Storage Engine (ESE) databases, application and system logs, and Registry hives and Property List (plist) files.
• the use of forensic computer software programs such as X-Ways Forensics, Cellebrite Products, Microsoft Office Suite, and other commercially available forensic programs.  
• cell phones, computers and associated hardware and peripheral devices. 
• software and operating systems such as Windows, Linux, Unix, iOS, MacOS, Android, and various proprietary formats. 
• principles and practices of electronic data storage, data encryption and computer security systems. 
• methods and techniques used to access, recover, review, validate and preserve electronically stored data. 
• the principles and practices of evidence collection, preservation and handling. 
• law enforcement operations, Iowa Code, and criminal procedure including search and seizure.

Ability to:

• Work effectively in an environment in which sensitive/confidential information and data that contains sexually explicit or disturbing content, including child pornography, is encountered. 
• Work independently, set priorities, work efficiently, keep accurate records, and effectively communicate (verbally and in writing) in a clear and concise manner.
• Examine and analyze computer hardware, software and electronically stored data pertaining to law enforcement investigations. 
• Collect, transport, process, and secure evidentiary materials. 
• Work extended hours on specific assignments.
• Professionally and honestly present evidence in a court setting. 
• Develop, install and evaluate new and revised methods, procedures and performance standards related to digital forensics.
• Effectively prepare and present detailed reports of findings. 
• Find and extract electronically stored information to be used as evidence. 
• Work with different levels of Redundant Array of Independent Disks (RAID) 0, 1, 5, 10, etc. 
• Work across most hardware platforms, including desktops, laptops, phones, and servers. 
• Manage several projects at once and maintain precise notes and required documentation. 
• Establish and maintain effective working relationships and exercise tact when dealing with law enforcement officials/agencies, governmental officials, outside agencies, co-workers, and supervisors. 
• Explain technical concepts in a manner that is simple, concise and accessible to all levels of technical understanding.