Digital Forensics Specialist

The Position

The Digital Forensics Specialist is responsible for identifying, preserving, analyzing and presenting digital evidence from computers, mobile devices, networks, cloud platforms and video and surveillance systems to support investigations involving legal cases or criminal activity. This role requires deep technical expertise in forensic tools and methodologies, a keen understanding of legal standards, and the ability to prepare detailed documentation and expert testimony.

• Oral Panel Interview week of June 23, date TBD.
• Background Appraisal Interview: Completion and review of detailed Personal History Statement.
• Candidates meeting the basic criteria will continue with a background investigation.
• Comprehensive Background Investigation: A detailed investigation of the candidate's personal history and suitability for employment within the law enforcement profession. This investigation includes a lie detection polygraph screening.
• Captains' Interview: Personal interviews with the Captain of Field Operations and the Captain of Support Operations.
• Final Steps: Psychological and medical evaluations before hire are required. The Chief of Police may select/appoint any individual who has successfully completed the process. Appointments are probationary for one year.

The Digital Forensics Specialist advises the unit supervisor in planning, coordinating, and directing digital forensic activities.

Inventories, examines and performs complex technical analyses of computer-related evidence such as digital media, including hard drives, cell phones, optical disks, memory cards, and other electronic data storage media.

Locates, examines, and collects digital evidence that may exist on external "cloud" servers.

Prepares written findings, displays, or graphic representations for court presentation; testifies and interprets findings established by laboratory analyses and may serve as a qualified expert witness.

Conducts research into new methods and procedures of scientific criminal investigation; maintains awareness of new developments in digital forensics; and incorporates new developments as appropriate within policy guidelines.

Works with other law enforcement agencies to coordinate findings or seek alternative digital forensic analysis methods.

Participates in law enforcement working groups and/or task forces as directed. Participates in meetings or other related groups.

Provides local law enforcement agencies with forensic research, application, advanced casework, methodology development, and training.

Processes crime scenes and/or clandestine laboratory scenes for video evidence and physical evidence and reconstructs the events of the crime from the evidence.

Performs other related duties as assigned.

Ability to:

• Troubleshoot, repair, and optimize a variety of computer types, peripheral equipment, software, and networks.
• Disassemble suspect computers.
• Identify and analyze data available on computers taken in investigations.
• Gather and preserve evidence.
• Work as a team member.
• Operate laboratory computer equipment and software.
• Provide technical support to Police Investigators.
• Give and follow oral and written instructions.
• Maintain adequate record-keeping systems.
• Write reports and correspondence.
• Testify in court.

• Principles, practices, and techniques used in computer systems criminal investigation.
• Evidence collection.
• Analysis and documentation of investigations.
• Computer hardware, software, and networks.
• Specialized forensic software.
• Standard business and personal computer software and the internet.
• Computer operating systems.
• Departmental practices and procedures.
• Applicable laws, rules and regulations such as California Penal Code, California Health & Safety Code, California Vehicle Code, California Evidence Code, Municipal Code and various training and information bulletins.

Any combination equivalent to experience and education that could likely provide the required abilities is qualifying. A typical way to obtain these abilities would be:

Equivalent to an Associate's degree from an accredited college or university in criminal justice, forensic science, or related field and a minimum of two years' experience in criminal investigation and/or personal computer and network hardware and software.

LICENSE AND CERTIFICATION

Possession of a valid California Motor Vehicle Operator's license upon appointment; must pass an extensive background check.

The employee may be required to be on-call for crime scene investigations after normal working hours.