Wyoming Attorney General’s Office – Cheyenne, WY

DCI Investigator

Closes: When filled


This position is for an Investigator in the Division of Criminal Investigation (DCI), under the direction of the Computer Crime Team Supervisor, to perform investigative functions related to the processing and analysis of digital evidence, provide support and systems administration of the office IT infrastructure, and support the day-to-day investigative functions of the Wyoming DCI Computer Crime Team and Internet Crimes Against Children (ICAC) Task Force.

DCI provides employees an opportunity to develop expertise while maintaining a healthy work-life balance.

Human Resource Contact: Candice Dillmon 307-777-5312   candice.dillmon@wyo.gov   

ESSENTIAL FUNCTIONS:  The listed functions are illustrative only and are not intended to describe every function which may be performed at the job level.

  • Perform computer forensic analysis by identifying, preserving, and analyzing data and technical items for evidence involving breaking encryption, recovering and analyzing files from hard drives, examining computers and data storage media, etc.
  • Employ forensically sound methods to preserve digital evidence, including computer hard drives, flash media, solid-state drives, and cellular phones, process it, and interpret the results in a meaningful and presentable manner in court.
  • Act as part of search warrant teams to search for, identify, and seize evidence according to established policies, procedures, and laws.
  • Serve as a subject matter expert in performing onsite previews, processing live systems, wired networks, and wireless networks.
  • Provide testimony as a qualified expert in the areas of computer forensics, digital media analysis, evidence seizure, and crime scene processing for computers, cellular phones, digital storage devices, wired networks, and wireless networks.
  • Support and scale infrastructures of networks to meet the Task Force needs pertaining to the maintenance and configuration of undercover and classroom networks and equipment such as firewalls, switches, and routers.
  • Provide direct support, maintenance, and configuration of systems used for investigative de-confliction queries, geolocation of IP addresses, images and image hash queries, forensic analysis request services, and activity tracking as required by the Office of Juvenile Justice Delinquency Prevention Program for ICAC grant reporting.
  • Manage such server technical aspects including, but not limited to, DNS, DHCP, IP addressing, firewall configuration, remote access, core OS setup/configuration, backup/restore, security groups, trust relationships, user/group administration, admin delegation, security certificates, and web services.
  • Provide direct support, operation, and maintenance of a lab that utilizes Mac and Windows desktop environments and requires maintenance of the software applications used in each environment.
  • Maintain the training environment through system and software updates and maintenance of the wired and wireless network equipment.
  • Operate as a liaison with the ICAC De-confliction System (IDS) operators and establish and maintain communication protocols between the Wyoming de-confliction system and IDS to naturally provide de-confliction services.
  • Provide direct hardware and software support of Apple computers implemented to run desktop versions of Mac OS X and Windows to ensure that investigators perform their duties.
  • Responsible for maintaining software and hardware licenses, facilitating repairs when needed, providing input and detailed specifications of the software and hardware to be used, and assisting the Task Force team leader in establishing the budget for equipment, training, and software.
  • Responsible for the maintenance of the mobile forensic laboratory, operating and maintaining the interview equipment, forensic equipment, internal wired and wireless network and equipment, undercover Internet connection via a cellular carrier, evidence storage equipment, printer/copier equipment, file server, and search warrant supplies. 
  • The Task Force implements highly specialized equipment for recovering data from damaged or secured cell phones. 



Preference will be given to candidates with either a Bachelor’s Degree and/or certification of forensic investigative tools (Griffeye, Digital Evidence Forensic Acquisition, OS Triage or similar forensic investigative tools) plus at least one year of law enforcement experience in the intelligence area.



  • Forensic knowledge of Windows, Mac, and Linux operating systems as well as forensic knowledge of common applications used in these operating systems that can contain evidence of criminal activity.
  • Knowledge of the use of that equipment for performing the JTAG method to acquire data from locked cell phones. 
  • Knowledge and ability to perform soldering to repair and/or replace cell phone components using this equipment. 
  • Knowledge and understanding of Bootcamp and virtual machine environments for these functions. 
  • Knowledge and experience in the use of the Wyoming de-confliction systems for performing lookups of images, videos, and files related to child pornography investigations.
  • Knowledge of onsite preview tools, as well as the implementation of hardware, write- blockers.
  • Knowledge of capturing volatile data, such as RAM contents, from a running system. 
  • Knowledge and experience of Ubuntu Linux server, PHP programming, HTML coding, XML coding, SQL scripting, bash scripting, MySQL database administration, VPN server operations, and making data backups.
  • Knowledge of virtual machine software, software used for conducting distributed network attacks in order to crack encrypted data, software for distributing processing of high volume data, masking system identities, restoring systems to their baseline configuration, and conducting in-depth forensic analysis of recovered data when necessary.
  • Knowledge and understanding of Bootcamp and virtual machine environments. 
  • Knowledge of the use of highly specialized equipment for performing the JTAG method to acquire data from locked cell phones.
  • Knowledge and ability to perform soldering to repair and/or replace cell phone components.
  • Knowledge of data entry and collection and data reporting systems. 
  • Knowledge of the criminal justice system.
  • Knowledge of the various criminal justice and counter-terrorism systems, programs, networks, and agencies.
  • Skill in conducting subject and telephone interviews.
  • Skill in computer-aided searches and database management. 
  • Skill in oral and written communication.
  • Skill in collection, analysis, utilization, and interpretation of data pertaining to records management.
  • Skill in decision-making in regard to the value of specific records.
  • Ability to interpret and clearly communicate policies and procedures and statutory mandates to various criminal justice agencies.
  • Ability to produce written documents with clearly organized thoughts using proper sentence construction, punctuation, and grammar.
  • Ability to communicate in English by phone or in-person in a group or one-to-one setting. 
  • Ability to think analytically and interpret data in a variety of records systems.
  • Ability to read, analyze, interpret and evaluate research findings and recommendations. 
  • Ability to work cooperatively with employees from other law enforcement agencies.
  • Ability to organize and present accurate information in a logical sequence.


Education:Bachelor’s Degree (typically in Criminal Justice) Experience:0-3 years of progressive work experience in Investigation
OREducation & Experience Substitution:4-6 years of progressive work experience in Investigation
Certificates, Licenses, Registrations:None Necessary Special Requirements



  • On-call 24/7.
  • Ability to travel statewide and nationwide. 
  • Ability to work overtime as required.


  • FLSA: Non-Exempt
  • Successful applicants must pass a background investigation
  • This position is solely funded by an Internet Crimes Against Children (ICAC) federal grant
  • The State of Wyoming’s total compensation package is excellent and includes:
    Paid annual and sick leave
    Paid holidays
    Retirement with employer contributions
    Deferred Compensation Plan with employer contributions
    Health insurance with employer contribution towards premiums
    Insurance options for health, dental, life, vision, ambulance, and short and long term disability
    Longevity pay

Supplemental Information

015-Attorney General’s Office – Division of Criminal Investigation 

Click here to view the State of Wyoming Classification and Pay Structure.

URL: http://agency.governmentjobs.com/wyoming/default.cfm

The State of Wyoming is an Equal Opportunity Employer and actively supports the ADA and reasonably accommodates qualified applicants with disabilities.
 Class Specifications are subject to change, please refer to the A & I HRD Website to ensure that you have the most recent version.