Digital Forensic Examiner

Job Description

Job Description

Overview

The Digital Forensic Examiner is responsible for providing expertise in digital forensics, call detail record and geolocation analysis, and video evidence recovery, with a preferred focus in public safety. This role assists law enforcement officers with enforcing criminal laws through the forensic collection, recovery, processing, preservation, analysis, storage, maintenance, and presentation of digital evidence. Duties may also include serving as a liaison with vendors, recommending purchases, assisting with budget monitoring, selecting new equipment, and installing or configuring digital forensic lab equipment.

Supervision Exercised / Received

Exercised : This classification typically does not supervise other employees.

Received : Reports to a coordinator, supervisor, or manager (other reporting relationships may apply).

Key Duties and Responsibilities

Identify, acquire, and analyze digital evidence from multiple media sources using validated processes, ensuring accuracy and efficiency in analysis.

Utilize forensic programs such as Magnet Axiom, Forensic Explorer, Access Data FTK Imager, WinHex, Cellebrite, and Graykey to analyze Windows, Apple, iOS, and Android systems.

Serve as a technical advisor throughout digital investigations, providing guidance, strategies, and updates to investigators.

Apply expert knowledge of digital forensics principles, methods, operating systems, and hardware.

Provide training and instruction to law enforcement officers and civilians on proper digital forensic techniques, evidence handling, and investigation methods.

Produce detailed reports documenting examinations of digital evidence, call detail records, and internet communications.

Maintain and recommend digital forensic equipment, software, and training to ensure best practices.

Research and contribute to legal issues and case law related to digital forensics and call detail record analysis.

Assist law enforcement officers and prosecutors with search warrants, investigations, and documentation.

Prepare expert reports, opinions, and correspondence; maintain case files and records in databases.

Provide expert witness testimony in computer forensics, mobile extractions, geolocation, internet communications, and video evidence presentation.

Conduct in-depth analysis of emails, communications, and extracted data to identify patterns relevant to investigations.

Perform surveillance video recovery, analysis, and editing using forensic software.

Perform other related duties as assigned.

Minimum Training and Experience

Bachelors degree in computer science, business, or a related field.

Related hardware / software support experience.

Experience working in a law enforcement environment, including participation in forensic investigations related to complex criminal or administrative cases.

Equivalent combinations of training and experience may be considered.

Preferred Training and Experience

Certifications such as Certified Forensic Computer Examiner (CFCE), EnCase Certified Examiner (EnCE), Magnet Certified Forensic Examiner (MCFE), and Cellebrite mobile forensic certifications (CCO / CCPA / CCPO / CCME) are strongly preferred.

Licensing, Certifications, and Other Special Requirements

Some assignments may require a valid Drivers License with a satisfactory driving record and the ability to obtain a valid state license within 30 days of hire.

Required to maintain proficiency and certifications in digital forensic examinations.

Knowledge, Skills, and Abilities

Knowledge : Microsoft Office Suite, electronic databases, software applications, and process improvement.

Skills : Reviewing work orders, communicating across departments, interacting with diverse groups, evaluating equipment, customer service, and effective oral / written communication.

Abilities : Adaptability, analytical thinking, attention to detail, adherence to procedures, multitasking, problem-solving, teamwork, vendor relations, and prioritization.

ADA Statement

Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the job.

Environmental Hazards

Work may involve travel, exposure to hazardous conditions such as electrical currents, fumes, poor ventilation, intense noise, or disruptive environments.

Physical Requirements and Work Environment

Must manage detailed work on concurrent tasks with frequent interruptions and deadlines.

Regular activities include repetitive motions, seeing, hearing, talking, grasping, fingering, walking, and light lifting.

Frequent reaching, pushing, and pulling; occasional standing, crouching, kneeling, stooping, balancing, and climbing.

Classified as light work : exerting up to 20 lbs occasionally, 10 lbs frequently, and negligible force constantly to move objects.