Class specifications are intended to present a descriptive list of the range of duties performed by employees in the class. Specifications are not intended to reflect all duties performed within the job.
DEFINITION
Perform forensic computer/digital evidence recovery and analysis on a wide variety of specialized visual and/or computer based related peripheral equipment and data storage devices; perform advanced analytical procedures to determine authenticity and integrity of evidence and comparative evaluations; provide expert testimony in court articulating advanced concepts pertaining to digital multimedia evidence.
JOB CLASSIFICATION
Non-Exempt, Safety Sensitive.
SUPERVISION RECEIVED AND EXERCISED
Receives direction from Police Civilian Manager.
PRIMARY DUTIES--The following are examples of primary duties assigned to positions in this classification. Other related duties and responsibilities may be assigned.
1. Perform forensic computer/digital evidence recovery and analysis on a wide variety of specialized visual and/or computer based related peripheral equipment and data storage devices, such as hard drive discs, solid-state drives, optical discs, mobile devices as well as various other forms of computer media.
2. Perform a variety of advanced procedures to analyze digital multimedia evidence for investigative and court purposes; clarification of audio, compare unknown objects to known objects, determine speed of vehicles and height of suspects through the use of photogrammetry.
3. Prepare clear and concise reports that demonstrate analytical procedures follow scientific methodology and can be reproduced; provide expert testimony in court articulating advanced concepts pertaining to digital multimedia evidence.
4. Review search warrants to validate authority and accompany police to execute search warrants and collect evidence.
5. Conduct crime scene investigations, digitally document; identify, collect and preserve digital evidence; reconstruct crime scenes.
6. Maintain and manage the proper handling procedures regarding protection, collection, and storage of physical and digital evidence.
7. Provide instruction to other department employees on digital evidence collection concepts and best practices.
8. Maintain digital lab software, equipment, and program licenses.
9. Perform other duties of a similar nature or level.
QUALIFICATIONS
Knowledge of:
Best practices and guidelines for processing digital evidence, hard drive file systems, mobile device operating file systems, registry entries, user/system-generated artifacts, binary data, and deleted files/folders, encoded time stamps, application and system logs.
Repair, reconstruction, decoding, identification, capture, and clarification techniques regarding video, still images, and audio recordings.
Non-linear video editing systems.
Comparing class and unique characteristics in criminalistics investigations.
Principles of DVR operating systems, hard drive file formats, and export options.
Computer systems and peripheral devices, including hard drive discs, solid-state drives, optical discs, flash memory, and mobile devices.
Digital encryption and decryption techniques.
Methods and techniques of crime scene documentation and evidence collection.
Applicable Federal, State, County and/or City statues, rules, regulations, case law and procedures.
Ability to:
Use digital evidence technology and processing tools.
Transcode, duplicate, and troubleshoot digital multimedia evidence files.
Process and analyze large quantities of data in computer/mobile examinations.
Distinguish between system-generated data and user-generated data.
Work with investigation teams in the identification of suspects through digital evidence.
Process and search for items of sensitive material stored on digital devices.
Troubleshoot complex electronic devices.
Testify in court as an expert in digital forensics.
Maintain accurate records.
Effectively communicate verbally and in writing.
Perform analysis, interpret data and develop conclusions.
Interpret and apply Federal, State and local policies, laws and regulations.
Establish and maintain effective working relationships with those contacted in the course of work.
Speak, read, comprehend, and write the English language fluently.
Experience and Training Guidelines
Minimum Requirements:
Experience:
No experience required, one (1) year of progressively responsible forensic digital analysis experience preferred.
Training:
Bachelor’s degree from an accredited college or university with an emphasis in computer science, information technology or related field.
Other combinations of experience and education that meet the minimum requirements may be substituted.
License or Certificate
Possession of, or the ability to obtain, a valid Colorado driver license.
Possession of, or the ability to obtain, certification in a digital forensics disciple through an international association (LEVA, IAI, IACIS) within two (2) years of hire.
WORKING CONDITIONS
Environmental Conditions:
The job is performed in the following working environment:
Office environment; exposure to computer screens.
Field environment.
The following condition(s) may be present on a continuing basis:
Atmospheric Conditions (fumes, odors, dusts, gases, poor ventilation)
Hazardous materials (chemicals, blood and other body fluids, etc.)
Local Travel
Physical Conditions:
The job is characterized by:
Medium Work: Exerting up to 50 pounds of force occasionally, and/or up to 20 pounds of force frequently, and/or up to 10 pounds of force constantly to move objects.
The following activities are very or extremely important in accomplishing the job’s purpose and are performed on a daily basis:
While performing the duties of this job, the employee is regularly required to see, stand, walk, kneel, stoop, squat, pull, push, climb and demonstrate manual dexterity. The employee is required to lift up to 20 pounds on a regular basis and 50 pounds occasionally.