Forensic Computer Analyst

J  o  b    D  e  s  c  r  i  p  t  i  o  n

Job Information

Title:

Forensic Computer Analyst

Market Range:

IT15

Approved Date:

9/15/2023 10:42:12 AM

FLSA:

Exempt

EEO Code:

PROFESSIONALS

Career Level:

P1

Career Level Description:

Professional Level 1

Job Code:

101001

Job Family:

IT - Information Technology

Sub Family:

Forensic Technology

Primary Purpose

Retrieve and analyze information and data from a broad spectrum of Information Technology (IT) hardware architectures, software applications, operating systems, and file structures utilizing various computer hardware and software tools. Provide assistance and support for investigations of criminal activity by law enforcement agencies. Maintain specialized forensic hardware and software tools. Provide additional technical support for CCBI departmental IT business systems and operations.

•

Parse and retrieve information and data in a forensically sound manner from servers, desktops, laptops, mobile devices, USB media, audio visual devices, automobile electronic control units, networks, circuit boards, RAM, and RAIDs), operating systems (e.g., Linux/Unix, Android, MacOS, iOS, MSWindows), and file systems / structures (e.g., NTFS, FAT16, FAT32, exFAT, APFS, HFS, ext4, Windows Registry, SQL database).

1

35%

•

Analyze, test, and validate parsed information, data, and artifacts to establish provenance of user activities, and prepare notes and reports detailing analysis methods and findings.

2

35%

•

Maintain working knowledge and understanding of underlying IT theories, functions (e.g., cloud-based systems, social media platforms, artificial intelligence), hardware, software, operating systems, file systems, and data structures. Research new and evolving IT when necessary to retrieve and analyze information and data.

3

10%

•

Present findings as an IT expert in legal proceedings.

4

10%

•

Complete departmental IT projects with deliverables. Support, install, configure, and maintain departmental computer hardware, software applications, and local area networks

5

10%

Position(s) may perform other duties in addition to the above as assigned by management.

*IMPORTANT* In the event of an emergency, as determined by the County Manager or designee, participation in preparedness and response operations should be expected. Employee may be required to fill a temporary assignment in a role different from standard duties, work hours and/or work location in preparation for, during and after the emergency. Employee may also be required to participate in relevant exercises and regular preparedness training.

Career Level Dimensions

Career Level:

P1

Career Level Description:

Professional Level 1

•

Works on small, routine projects or task-related activities that have some impact on the overall the Work Group.

•

Work is closely supervised.

•

Responsible for making minor changes in systems and processes to solve problems.

•

Identifies, defines and addresses problems that are not complex. Problems are typically within the immediate Work Group.

•

Communicates within or outside of the Work Group to provide information about policies, procedures, or analyses.

•

N/A – Jobs at this level are focused on self-development.

•

Requires basic, theoretical understanding of professional principles and skills, typically obtained through advanced education.

Qualifications

•

Bachelor's degree in Physical Science or related field

•

Three years experience as forensic examiner or cyber security professional OR completion of in-house training program

•

Valid Driver's License and "safe" driving record

•

IACIS CFCE Certification or equivalent required within two years; certification must then be maintained

•

Equivalent education and experience are accepted

•

Knowledge of computer system concepts, protocols, networks and security methodologies

•

Knowledge of physical computer systems, components, hard drives, memory cards, routers, modems, printers, removable storage devices, mobile telephones, and mobile computing devices

•

Ability to disassemble physical Information technology devices

•

Ability to setup forensic computer workstations

•

Knowledge of various server and client operating operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems

•

Knowledge of laws, policies, and ethics as they relate to information technology privacy. Knowledge of processes for seizing and preserving information technology evidence

•

Ability to install, configure, and maintenance new software applications

•

Knowledge of processes for seizing and preserving information technology evidence

An individual must be able to perform each essential duty satisfactorily to perform this job successfully. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Competencies

Attention to Detail

Thoroughness in accomplishing a task through concern for all the areas involved, no matter how small. Monitors and checks work or information and plans and organizes time and resources efficiently.

Analysis

Examines data to grasp issues, draw conclusions, and solve problems.

Good Judgment

Makes decisions authoritatively and wisely, after adequately contemplating various available courses of action.

Quality Assurance

Produces results or provides service that meets or exceeds organizational standards. May audit the work of others to ensure quality standards are met.

Integrity

Act with honesty, transparency and respect in our interactions with co-workers and those we serve. Adhere, without exception, to laws, policies, procedures and professional standards.

Accountability

Establish high-quality standards for work. Add value. Measure results and hold self and others accountable for making progress toward desired outcomes. Take a logical and data-driven approach to decision-making.

Diversity

Believe that different backgrounds and experiences strengthen the organization and produce better results. Value inclusion across race, gender, age, religion, identity and experience, and strive to reflect in our workforce the diversity of our community.

Collaboration

Foster a work culture in which different ideas and opinions are encouraged and expected. Listen carefully and speak thoughtfully. Work together toward shared goals with mutual respect and cooperation.

Continuous Improvement

Continuously improve work processes and products. Provide a safe environment to be innovative and creative and try new things. When things don't go as planned, use it as an opportunity to learn, regroup and begin again. Provide time and resources for individuals to grow and develop both personally and professionally.

Wellness

Take proactive steps to be physically fit and healthy, emotionally strong, financially secure and socially fulfilled, while inspiring and empowering others to do the same.

Service Orientation

Commit to making a difference within the community. Actively engage in and enjoy our work. Deliver services that exceed expectations, with courtesy, politeness and sensitivity to the experiences, concerns and feelings of all co-workers and customers.

ADA Checklist

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions

Standard ADA Selection:

Office Environment

Standing

X

Walking

X

Sitting

X

Lifting/Carrying 0-10 pounds

X

Lifting/Carrying 10-20 pounds

X

Lifting/Carrying 20-50 pounds

X

Lifting/Carrying 50-100 pounds

X

Pushing

X

Pulling

X

Climbing

X

Balancing

X

Stooping

X

Kneeling

X

Crouching

X

Crawling

X

Reaching

X

Handling

X

Grasping

X

Fingering

X

Feeling

X

Talking

X

Hearing

X

Visual Perception

X

Repetitive Motions

X

Eye/Hand/Foot Coordination

X

Memorization/Concentration

X

Learning/Knowledge Retention

X

Preparing/Analyzing Numerical Figures

X

Use of Interfaced Commmunication Devices (Phone, Computer, Radio etc.)

X

Analyzing/Examining/Testing Data

X

Emotional/Behavioral Self-Regulation

X

Interacting with Others

X

Comprehension

X

Organization

X

Decision Making

X

Comprehension

Understand and apply routine verbal and/or written instructions

Organization

Organize and prioritize individual work schedule to manage multiple tasks and/or projects

Decision Making

Make decisions that have an impact on the immediate work unit's operations and/or services

Communication

Communicate and explain a variety of information

Extreme cold

X

Extreme heat

X

Humid

X

Wet

X

Noise

X

Hazards

X

Temperature Change

X

Atmospheric Conditions

X

Vibration

X

Computers/Monitors

X