FORENSIC ANALYST INFORMATION TECHNOLOGY
DEFINITION
Under direction extracts, preserves, and analyzes electronically stored information from electronic devices and digital storage media using specialized tools and current forensic technology and methods; archives relevant electronic evidence; testifies, and prepares reports of findings for presentation in criminal case proceedings; does related work as required.
NOTE: The examples of work for this title are for illustrative purposes only. A particular position using this title may not perform all duties listed in this job specification. Conversely, all duties performed on the job may not be listed.
EXAMPLES OF WORK:
Examines computers and other electronic storage devices submitted as evidence using non-intrusive forensic tools and methods to extract data for analysis.
Disassembles and reassembles various types of electronic data or communication devices including but not limited to personal computers, laptops, cellular phones, pagers, and personal digital assistants during the examination process.
Performs forensic examinations of digital media using the most current versions of validated forensic software programs such as: EnCase, FTK, Subrosa Soft, Blackbag Technologies, Helix, etc.
Uses validated software and hardware write blocking devices to preserve digital evidence integrity.
Uses computer forensic software and specialized tools to copy data found on electronic devices so that the integrity of original evidence is preserved and the copy can be used for forensic analysis.
Uses technology to prepare copied data for archiving into digital media.
Prepares comprehensive analysis reports to be used in the course of investigations, and to be entered into evidence during court proceedings.
Testifies in court regarding analytical processes and resulting findings.
Installs, programs, maintains, and troubleshoots computerized interception equipment, RF receivers/transmitters, GPS tracking devices, and other remote surveillance technologies for observation and evidence collection.
Configures and maintains computer hardware for use during evidence acquisition and analysis.
Attends seminars and classes for training in specialized forensic software applications, forensic analysis techniques, and other specialized areas to stay abreast of developments within the field of Computer Forensics and Multimedia Digital Evidence.
Maintains essential records and files.
Prepares reports containing findings, conclusions, and recommendations.
Will be required to learn to utilize various types of electronic and/or manual recording and information systems used by the agency, office, or related units.
REQUIREMENTS:
EDUCATION:
A Bachelor¿s Degree in Computer Science, Computer Forensics, or other related field of technology with a specialization in digital forensics.
EXPERIENCE:
Three (3) years of experience conducting computer forensic examinations, cellular phone data extractions, mobile device forensics, and/or mobile tracking technologies in a law enforcement, military, public, or other investigative agency.
NOTE:A Master¿s Degree in Computer Science, Information Technology, or related field may be substituted for one (1) year of the experience indicated above.
LICENSE:
Appointees will be required to possess a driver's license valid in New Jersey only if the operation of a vehicle, rather than employee mobility, is necessary to perform essential duties of the position.
KNOWLEDGE AND ABILITIES:
Knowledge of the methods and techniques used to access, recover, review, validate, and preserve electronically stored data.
Knowledge of the principles and practices of electronic data storage, data encryption, and computer security systems.
Knowledge of current computer forensic industry standards, publications, developments, and trends.
Knowledge of computers and associated hardware and peripheral devices.
Knowledge of computer software and operating systems such as: Windows, Linux, Unix, MacOS, DOS and various proprietary formats.
Knowledge of a variety of forensic software programs such as EnCase, FTK, ADACS 4, PRTK, Registry Viewer, Mac Forensic Labs software, Blackbag Technology software, Paraben, Datapilot, Cellebrite, Helix, Knoppix, Raptor and other commercially available forensic programs.
Knowledge of computerized interception equipment, RF receivers and transmitters, GPS tracking devices, and other remote surveillance technologies for observation and evidence collection.
Knowledge of the presentation of evidence in a court setting.
Ability to examine and analyze computer hardware, software, and electronically stored data pertaining to law enforcement investigations.
Ability to find and extract electronically stored information to be used as evidence.
Ability to collect, transport, process, and secure evidentiary materials.
Ability to work across most hardware platforms including desktops, laptops, servers, and enterprise-level storage devices.
Ability to work with various operating systems including but not limited to Windows, MacOS, Linux, and Unix file systems.
Ability to articulate and visually present forensics investigation and analysis results to both professional and lay groups.
Ability to manage several projects at one time and maintain precise notes and required documentation.
Ability to prepare detailed reports of findings.
Ability to communicate effectively both orally and in writing.
Ability to establish and maintain effective working relationships.
Ability to learn to utilize various types of electronic and/or manual recording and information systems used by the agency, office, or related units.
Ability to read, write, speak, understand, and communicate in English sufficiently to perform the duties of this position. American Sign Language or Braille may also be considered as acceptable forms of communication.
Persons with mental or physical disabilities are eligible as long as they can perform essential functions of the job with or without reasonable accommodation. If the accommodation cannot be made because it would cause the employer undue hardship, such persons may not be eligible.
This job specification is applicable to the following title code:
