DCI Senior Investigator ICAC

Open Until Filled

This position is for a non-sworn Senior Investigator in the Division of Criminal Investigation (DCI), under the direction of the Computer Crime Team Supervisor. The role includes investigative functions with emphasis on the processing and analysis of digital evidence, support and systems administration of the office IT infrastructure, and day-to-day investigative functions of the Wyoming DCI, the DCI Computer Crime Team, and Internet Crimes Against Children (ICAC) Task Force.

It is a grant-funded position funded through the Office of Juvenile Justice and Delinquency Program (OJJDP) ICAC Grant.

• Paid annual and sick leave
• Paid holidays
• Retirement with employer contributions
• Deferred Compensation Plan with employer contributions
• Health insurance with an employer contribution toward premiums
• Insurance options for health, dental, life, vision, ambulance, and short and long-term disability
• Longevity pay

• Perform investigations in a non-sworn capacity.
• Conduct computer forensic analysis by identifying, preserving, and analyzing data and technical items for evidence involving breaking encryption, recovering and analyzing files from hard drives, and examining computers and data storage media.
• Employ forensically sound methods to preserve digital evidence, process it, and interpret results for court presentations.
• Act as part of search warrant teams to search for, identify, and seize evidence according to established policies, procedures, and laws.
• Serve as a subject matter expert in performing onsite previews, processing live systems, wired networks, and wireless networks.
• Provide expert testimony in computer forensics, digital media analysis, evidence seizure, and crime scene processing for computers, cellular phones, digital storage devices, wired networks, and wireless networks.
• Support and scale network infrastructures to meet the Computer Crime Team’s needs, including maintenance and configuration of undercover and classroom networks and equipment such as firewalls, switches, and routers.
• Provide direct support, maintenance, and configuration of systems used for investigative queries, geolocation of IP addresses, image hash queries, forensic analysis request services, and activity tracking for ICAC grant reporting.
• Manage server technical aspects including DNS, DHCP, IP addressing, firewall configuration, remote access, core OS setup, backup/restore, security groups, trust relationships, user/group administration, security certificates, and web services.
• Provide direct support, operation, and maintenance of a lab using Windows desktop environments and required software applications.
• Maintain the training environment through system and software updates and maintenance of wired and wireless network equipment.
• Operate as a liaison with the ICAC De-confliction System (IDS) operators and maintain communication protocols between the Wyoming de-confliction system and IDS.
• Maintain software and hardware licenses, facilitate repairs, provide input on specifications, and assist in budgeting for equipment, training, and software.
• Maintain the mobile forensic laboratory, operating and maintaining interview equipment, forensic equipment, internal wired and wireless networks, undercover Internet connections via cellular carriers, evidence storage equipment, printer/copier equipment, file servers, and search warrant supplies.
• Operate specialized equipment for recovering data from damaged or secured cell phones.

Preference will be given to candidates with computer forensics certifications, a Bachelor’s Degree in Criminal Justice or Computer Forensics related studies, and at least one year of law enforcement experience.

• Forensic knowledge of Windows, Mac, and Linux operating systems and common applications containing evidence of criminal activity.
• Knowledge of Bootcamp and virtual machine environments.
• Experience with Wyoming de-confliction systems for child pornography investigations.
• Knowledge of onsite preview tools and hardware write blockers.
• Knowledge of capturing volatile data such as RAM contents from running systems.
• Knowledge of Ubuntu…