Forensic Examiner

Overview of the Position A Forensic Examiner performs digital forensic examinations and provides technical and investigative support in cases involving defendants and persons under supervision who utilize computers, mobile devices, digital storage media, or other electronic technology as an instrument or tool for criminal activity. Such cases may involve computer fraud, hacking, stalking, credit card fraud, money laundering, counterfeiting, child sexual exploitation, identity theft, and other criminal conduct involving digital evidence.

A Forensic Examiner conducts forensic examinations of digital evidence, collects and preserves electronic evidence, prepares reports of examination findings, assists with the district's computer and internet monitoring program, and provides technical assistance and training to probation and pretrial services officers. The Forensic Examiner works closely with and assists the Cybercrime Investigation Lab Manager in the operation, development, and maintenance of the district's cybercrime investigation and digital forensics program.

Representative Duties and Responsibilities

• Conduct forensic examinations of digital evidence using established policies, procedures, forensic methodologies, and accepted techniques. Examinations may involve computers, mobile phones, tablets, digital storage devices, GPS devices, Internet of Things (IoT) devices, gaming systems, and other electronic equipment.
• Collect, preserve, image, process, and analyze digital evidence in a forensically sound manner while maintaining proper evidence handling procedures and chain of custody.
• Ensure cases are properly updated within applicable case management and tracking systems, including entries in SIRS and PACTS.
• Conduct investigations and examinations involving digital evidence associated with criminal activity, violations of conditions of release or supervision, and other matters within the responsibilities of the Office of Probation and Pretrial Services.
• Develop, prepare, and present clear and comprehensive reports detailing the procedures used, evidence examined, analytical methods employed, and findings of forensic examinations.
• Testify as necessary in court proceedings regarding the collection, preservation, examination, and analysis of digital evidence, including the procedures and methods used to obtain and analyze data and the findings of the examination.
• Assist probation and pretrial services officers with the identification, collection, preservation, and evaluation of digital evidence and provide technical guidance regarding computer- and internet-related investigations.
• Train employees within the district and, as requested, employees from other districts regarding digital forensics, evidence collection, evidence handling, chain of custody, forensic procedures, and related technical matters. Training may be provided in person or through video or teleconference.
• Assist with the district's computer and internet monitoring program, including the initial examination of electronic devices, installation and configuration of monitoring software, troubleshooting technical issues, and providing technical assistance to officers and persons under supervision.
• Perform validation and verification of forensic tools and assist in ensuring that forensic hardware and software are properly maintained, tested, updated, and suitable for use.
• Coordinate routine maintenance and troubleshooting of forensic hardware, software, workstations, and related technical equipment. Identify, diagnose, and correct technical errors and operational problems.
• Prepare and maintain technical documentation, standard operating procedures, checklists, examination protocols, and other written guidance for forensic laboratory personnel, officers, and other end users.
• Conduct periodic inventories of evidence maintained by the cybercrime investigation lab. Track evidence to determine whether continued retention is necessary and assist with the proper disposition and documentation of evidence that is no longer required.
• Ensure evidence tracking records accurately reflect the receipt, custody, transfer, retention, and disposition of digital evidence.
• Maintain knowledge of current developments in digital forensics, computer technology, cybersecurity, forensic examination techniques, investigative methods, hardware, software, and emerging technologies.
• Recommend forensic hardware, software, equipment, training, and technical resources needed to maintain effective cybercrime investigation and forensic operations.
• Assist the Cybercrime Investigation Lab Manager in researching, testing, and evaluating new forensic tools, monitoring technologies, software applications, and equipment.
• Assist the Cybercrime Investigation Lab Manager in developing, reviewing, and updating policies, procedures, protocols, and proposals related to digital evidence, forensic examinations, computer monitoring, and cybercrime investigations.
• Assist the Cybercrime Investigation Lab Manager in…