Forensic Computer Examiner

Duties may include, but are not limited to, the following:

• Examine, disassemble, reassemble, evaluate, extract data, and interpret extracted data from computer hardware, smart phones, data storage devices, media storage devices, compact discs, digital video discs (DVDs), and detached or attached hard drives. 
  
  
• Collect evidence, transfer data from evidentiary items to other forms of media for presentation in court and for long term storage as evidence. 
  
  
• Investigate complex crimes involving digital media under the jurisdiction of Merced County Sheriff’s Office. 
  
  
• Perform specialized investigative assignments in the collection, preservation, analysis of evidence. 
  
  
• Incorporate computer forensic methods for searching seized computers in accordance with the rules of evidence and laws of search and seizure. 
  
  
• Prepare written reports on the analysis completed and verbally communicate significant findings to appropriate Sheriff’s Office personnel.
   
• Testify in court and serve as an expert witness on evidence related issues.
  
  
• Provide training to department personnel who may encounter electronic evidence in the course of their duties. 
  
  
• Create and maintain image archives.
  
  
• Provide image output, including but not limited to, photographic prints, video images, and computer files. 
  
  
• Provide support to Sheriff’s Office units utilizing digital imaging techniques including video capture and enhancement and latent fingerprint photographic and enhancement services. 
  
  
• Use and maintain specialized equipment and digital imaging technologies. 
  
  
• Maintain forensic server and network. Perform system backups; troubleshoot server connectivity issues and apply fixes in coordination with County Information Services personnel as required. 

Experience: 
Two (2) years of experience conducting forensic computer examination or cellular phone data extraction for a public or private agency, or four years of progressively responsible work in a similar field with extensive experience detecting, recovering, and analyzing data recovered from electronics. 

Education:
Equivalent of two-year degree from an accredited college or vocational school with major coursework in computer science, business, law enforcement, administration of justice, or closely related field. 

OR

Experience: 
One year of experience conducting forensic computer examination or cellular phone data extractions for a public or private agency, or two years of progressively responsible work in a similar field with extensive experience detecting, recovering, and analyzing data recovered from electronics. 

Education:
Equivalent of four-year degree from an accredited college or vocational school with major coursework in computer science, business, law enforcement, administration of justice, or closely related field. 

Special Requirements:
Must possess and maintain a valid California driver license; must successfully pass a comprehensive background investigation.
Possession of Certified Forensic Computer Examiner (CFCE) Certification is required within one year of appointment in the position. 
ESSENTIAL FUNCTIONS:

• Examine and analyze computer hardware, software, and electronically stored data pertaining to law enforcement investigations. 
  
  
• Collect, transport, process, and secure evidentiary materials. 
  
  
• Work with various operating systems including but not limited to Windows, MacOS, Linux, and Unix file systems. 
  
  
• Work across most hardware platforms including desktops, laptops, servers, and enterprise-level storage devices. 
  
  
• Communicate effectively with others in person and over the telephone.
  
  
• Establish and maintain effective working relationships.
  
  
• Perform job duties under stressful conditions and respond appropriately to situations, coordinate multiple tasks, and prioritize timelines.
  
  
• Maintain confidential information in accordance with legal standards and/or County regulations.
  
  
• Frequent use of depth perception, peripheral vision, and color perception.
  
  
• Frequently lift, carry, reach, push, pull, twist and manipulate large and small objects.
  
  
• Kneel, bend, twist, squat, balance, and crawl, occasionally lift and carry up to 40 pounds.
  
  
• Frequent use of hand-eye coordination and repetitive hand and arm motion.
  
  
• Normal dexterity, frequent holding and grasping.
  
  
• Sit, and stand or walk for extended periods of time.
  
  
• Frequent public contact, concentration in noisy conditions, exposure to emergency situations.
  
  
• Occasional exposure to hazardous materials, cold and heat.
  
  
• Exposure to graphic images associated with criminal activity, of a sexual or pornographic nature, including images of children. 
  
  
• Accept stand-by, call back, and overtime assignments, including nights, weekends, and holidays, as required.   
  
  
• Regular attendance is an essential function. 
  
  

 Knowledge of: 

• Principles and practices of digital media processing necessary to conduct computer forensic examinations.
  
  
• Principles and practices of electronic data storage, data encryption, and computer security systems. 
  
  
• Relevant law enforcement and criminal prosecution codes and laws.
  
  
• Rules of evidence and court room procedures.
  
  
• Multiple operating systems including Windows, OSX, Android, IOS, Macintosh. 
  
  
• Various computer forensics software and equipment.
  
  
• American Society of Crime Laboratory Director/ Laboratory Accreditation Board standards applying to digital forensics. 
  
  

Ability to:

• Independently perform complex, exacting, and detailed computer analysis requiring the exercise of a high degree of analytical ability and reasoning.
  
  
• Set and meet work priorities and critical deadlines. 
  
  
• Maintain confidentiality of highly sensitive information. 
  
  
• Prepare detailed and technical written reports. 
  
  
• Devise and adapt work procedures, forms, spreadsheets and record-keeping to meet department needs. 
  
  
• Collect, preserve, label, catalog, and store evidentiary items for presentation in criminal proceedings in accordance with legal standards. 
  
  
• Maintain current knowledge of tools and trends in the field of Digital Forensics. 
  
  
• Understand, interpret, and apply detailed instructions, rules, and regulations.
  
  
• Learn a variety of computer applications.
  
  
• Review, evaluate and analyze current crime/intelligence data, current events, periodicals, and publications related to criminals and their activity.
  
  
• Comprehend, interpret, and respond to crime/intelligence information and conduct analytical investigation.

Salary : $77,834 - $94,640