Digital Forensic Examiner - Jefferson County Sheriff's Office

Job Summary

The Jefferson County Sheriff's Office is seeking to hire a well-qualified, motivated Digital Forensic Examiner to play a critical role in the criminal justice and investigative process by identifying, acquiring, preserving, analyzing, and presenting digital evidence derived from electronic devices and information systems. Incumbents will apply advanced forensic methodologies and tools to uncover digital traces and reconstruct events that are vital to ongoing investigations and legal proceedings.

The role requires comprehensive knowledge of digital storage technologies, operating systems, network protocols, and cybercrime tactics, along with the ability to stay ahead of rapidly evolving digital threats and forensic technologies. The incumbent handles digital evidence from a variety of platforms, including computers, mobile phones, external storage devices, cloud environments, and network systems, ensuring adherence to legal standards and chain-of-custody protocols.

The incumbent works collaboratively with detectives, attorneys, prosecutors, and IT specialists, translating complex technical findings into comprehensible, legally admissible reports and may also deliver expert witness testimony in court.

Jefferson County provides competitive pay and comprehensive benefits packages to include medical and dental insurance, employer-sponsored retirement plan (pension), generous paid holidays, sick and vacation leave, and more.

Pay range: $58,032 - $90,022.

06/22/2026

• Experience performing digital forensic examinations or cybersecurity using forensic tools such as FTK, Cellebrite, X-Ways, or comparable software.
• Experience interpreting search warrants and maintaining the chain of custody.
• Experience writing technical reports.
• Experience with legal procedures to include execution of search.

• Industry certifications such as GCFA (GIAC Certified Forensic Analyst), CFCE (GIAC Certified Forensic Examiner), CCE (Certified Forensic Computer Examiner), or EnCE (EnCase Certified Examiner).
• Must be willing to obtain and maintain a security clearance (if required).
• APOST Certified.

• Perform comprehensive forensic examinations of digital evidence, including computers, mobile devices, external media, cloud-based services, email systems, and network infrastructure.
• Use industry-standard forensic hardware and software tools (e.g., FTK, EnCase, Cellebrite, X-Ways, Magnet AXIOM) to image, recover, carve, and analyze digital artifacts, ensuring adherence to best practices and forensic soundness.
• Develop and execute investigative strategies tailored to the specific needs of each case, including keyword searches, timeline analysis, file signature analysis, and artifact correlation across multiple platforms.
• Ensure meticulous documentation and handling of digital evidence throughout its lifecycle, maintaining strict compliance with chain-of-custody procedures, data integrity requirements, and evidence admissibility standards.
• Prepare clear, detailed, and technically accurate forensic examination reports suitable for legal proceedings and non-technical stakeholders.
• Work closely with detectives, prosecutors, attorneys, and other stakeholders to provide expert-level technical consultation during the investigation and litigation phases, including strategic recommendations for evidence acquisition and interpretation.
• Provide sworn expert testimony in court, depositions, and administrative hearings as required, effectively communicating complex forensic findings to judges, juries, and legal professionals.
• Maintain, calibrate, and update laboratory equipment and forensic workstations to ensure reliability, compliance, and readiness for operational deployment.
• Assist in the development and implementation of standard operating procedures (SOPs), quality assurance protocols, and forensic workflow improvements within the digital forensics lab.
• Conduct peer reviews of forensic work products to ensure accuracy, consistency, and adherence to internal and external standards.
• Monitor emerging technologies, software updates, and legal precedents impacting digital evidence through professional development, conferences, training courses, and independent study.
• Provide training, mentorship, or technical guidance to junior forensic examiners, investigators, or other personnel as needed.

Job may require working on a computer, exposed to glare and/or PC light. Job may require work that is essentially sedentary with occasional walking, bending, lifting or minimal physical activities. Job may require manual handling of digital devices and equipment.

Job may require working in an office environment and may require working in a laboratory. Job may require work performed outside year-round and may require occasional travel for field investigations, court appearances, or training. Job may require occasional handling of sensitive or graphic…