IT Forensics Examiner I

The County of Riverside's Law Offices of the Public Defender is seeking an IT Forensics Examiner I to support their office located in Riverside. This position will also travel once a week to support the Indio Office. The Forensics Examiners will be responsible for analyzing digital discovery from various agencies and preserving them in a format compatible with Defender Data (case management system) while keeping the integrity of the original source. They will also be tasked with analyzing Cellebrite and other cell phone data dumps, interpreting reports for the attorneys, and creating and using secure virtual machines when handling digital discovery. Additionally, the incumbents will handle Encase images, manage access to view the images, and manage permissions on file servers. The department desires candidates with experience analyzing digital discovery, using case management systems such as Defender Data, and those who have experience working in a legal office. Meet the Team! It is the mission of the Law Offices of the Public Defender to provide the highest quality legal representation to any person unable to afford it for criminal, juvenile, or certain civil proceedings. The Public Defender strives to preserve human dignity in all cases where citizens' liberties are at stake. The Public Defender is dedicated to the principle that no citizen shall be deprived of life, liberty, or property without competent, professional, and vigorous representation so that due process is implemented fairly, equitably, and without prejudice. The Public Defender is headquartered in Riverside, with additional offices providing support to residents in Banning, Blythe, Murrieta, and Indio. Who May Apply? This recruitment is open to all applicants.

• Acquire skill in designing and building computer(s) and peripheral devices to meet computer forensic requests; acquire skill in maintaining the functionality of assigned computers and peripheral equipment used to perform forensic duties.
• Assist in the preparation of statistical and operational logs, records, and reports; assist in maintaining computerized databases related to the assigned investigative activities.
• Review case files to locate alleged violations, determine evidentiary needs, and extract case file information useful to criminal and / or civil investigations.
• Identify, collect, organize, and analyze IT device-related evidence located at search warrant location(s); may participate in surveillance and undercover investigations; may load, transport and store evidence.
• Perform specialized IT forensic examinations of computers, servers, hard drives, and other digital devices (e.g., palm pilots, cell phones, digital cameras, and video recorders), and learn accepted digital forensic examination techniques in the collection, examination, evaluation, documentation, and storage of computer related evidence.
• Learn to analyze, isolate and organize data recovered from examination of devices and other storage media; learn to store and maintain computer related evidence according to accepted protocols.
• Create investigative reports documenting the findings of the forensic examination; observe IT Forensics Examiners providing expert testimony in court related to computer analysis.Education : Graduation from an accredited college or university with an Associate's degree in computer science or a related field to the assignment. (Additional qualifying IT job-related experience may substitute for the required education on the basis of 30 semester or 45 quarter units equaling one year of full-time experience.) Experience : Two years of IT job-related experience with Riverside County or its equivalent, which involved administrating network and operating systems. License / Certificate : Possession of a valid California Driver's License may be required. Knowledge of : Appropriate English usage and grammar; computer operating systems (i.e., Novell, Windows 98, 2000, NT, XP, Unix, Solaris, Linux); networked systems (DSL, firewalls, VPN, and cable modems). Ability to : Acquire skill in sound research methods and techniques related to IT device forensics and forensic-related software usage; learn to understand, interpret and apply basic laws, rules and regulations; communicate effectively both orally and in writing; learn to conduct IT device forensic investigations under close supervision; build and maintain stand alone and networked computer stations; establish and maintain effective working relationships with those contacted in the course of work; maintain records and files related to the assigned duties; learn to analyze, interpret and understand criminal court documents, criminal complaints, search warrants, and grand jury documents; learn to apply basic laws, rules and regulations related to the assigned investigative area; prepare clear and concise reports.For more information regarding the position, please contact the recruiter Mary Miller at 951-955-3464 or via email at mmiller@rivco.org .