Digital Forensic Examiner

City of Goodyear • Goodyear, AZ

3d • Onsite

About The Position

Under general supervision, this role is responsible for performing forensic examination and evaluation of mobile devices, computers, computer hardware, software, electronically stored data, and other computer-related evidentiary materials to assist with investigations of criminal activity. The position handles routine to complex cases and involves ongoing analysis of technology trends to incorporate proven forensic investigation and supporting technologies into practice. A key responsibility includes providing expert testimony in courts of law. The ideal candidate will have hands-on experience with digital forensic examinations, including the identification, collection, and preservation of electronic devices, forensic acquisition and analysis of data, on-scene previewing and triaging of electronic devices, and collection of data from digital video recording systems. They must be knowledgeable in preparing and reporting evidence for investigation and prosecution purposes, adhering to best practices. The role also requires availability for callouts outside normal business hours for crime scenes, priority examinations, and time-sensitive evidence collection/processing. At the City of Goodyear, employees are valued as the greatest asset, working within a dedicated team committed to a highly engaged workforce, employee development, career-building, and innovation. The organization values Adaptability, Integrity, Initiative, Empathy, Optimism, and Innovation.

Requirements

• Bachelor’s degree in criminal justice, forensic science, computer science, information systems or a related field.
• Minimum three years of experience in computer and mobile forensics.
• Valid Arizona Driver’s License, or ability to obtain a valid Arizona Driver’s License, with an acceptable driving record.
• One or more certifications or training in digital/mobile device forensics, including IACIS (CFCE, CMDE, BCFE, MDF), NCFI (BCERT, MDE), FLETC (MDIP, DFI/SCERS), Cellebrite, Magnet/GrayKey, FTK, or GetData Forensic Explorer.
• Ability to read State, City and other applicable statutes, and ability to read reports, correspondence, software manuals, trade journals, and policies at a college level.
• Ability to perform general and advanced math calculations, such as addition, subtraction, multiplication, division, and general accounting.
• Ability to write and update policies, procedures, and guidelines; training manuals; presentations; reports; and correspondence at a college level.
• Job has no responsibility for the direction or supervision of others, but may provide advice/direction to an employee with less experience/skills or tenure.
• Moderate Policy/Decision Making - The employee normally performs the duty assignment within broad parameters defined by general organizational requirements and accepted practices. End results determine effectiveness of job performance. This position independently decides how objectives are achieved and what resources are needed.
• Limited Technical Skills - Work requires advanced skills and knowledge in approaches and systems, which affect the design and implementation of major programs, solutions for highly complex issues, and/or processes organization-wide. Independent judgment and decision-making abilities are necessary to apply technical skills effectively.
• Moderate Interpersonal/Human Relations Skills – Interactions at this level typically result in recommendations regarding policy development, changes, and implementation. Interactions at this level are typically concerned with providing communications at higher levels of organizational operations and may utilize activities such as evaluating customer satisfaction, developing cooperative associations, and allocating resources to improve work operations, work quality, overall achievement of organizational goals and objectives, and customer satisfaction.

Nice To Haves

• Attend Goodyear Employee Orientation (GEO) and complete all assignments, trainings, and meetings associated with GEO.
• Become familiar with the City’s Core Values and the Department Vision and Mission.
• Take the opportunity to connect your role to the big picture.
• Become familiar with the policies and procedures related to your job function.
• Participate in any meetings related to Digital Forensics and/or Major Crimes.
• Become familiar with digital forensics equipment and software that you’ll be utilizing.
• Become familiar with general policies and procedures for the city and Police Department.
• Become familiar with assisting with managing evidence within and outside of the lab.
• Learn processes as it relates to the electronic storage lockers and faraday bags.
• Visit ACTIC computer forensic lab and USSS forensic lab.
• Be able to provide advice and assistance in creating a more efficient lab / evidence process.
• Show that you can be respectful, treating other investigators/technicians/co-workers with respect.
• Be aware, actively listen to others and seek to understand their perspective.
• Seek to understand the challenges and opportunities facing digital forensics and how it interacts and supports other divisions.
• Be certified in Cellebrite Software (Operator and Analyzer).
• Be certified in Magnet Software (Graykey Operator and Axiom Analysis).
• Be able to conduct on-scene previews, collect volatile digital evidence from running devices and collect electronic devices during ICAC and/or other types of search warrant executions.
• Be able to assist in surveillance system data recovery.
• Complete required city-wide trainings by the specified deadlines.
• Attend at least one in-person Digital Forensics training.

Responsibilities

• Performs advanced digital forensic and cybersecurity examinations, electronic discovery, and data recovery involving computers, mobile devices, digital media, networks, cloud environments, and electronic storage devices to identify, recover, preserve, and analyze evidence related to criminal and cyber investigations.
• Uses specialized forensic hardware, software, ethical hacking methods, and investigative techniques to examine devices and systems; access secured or deleted data; and analyze messages, social media activity, location information, email, internet history, databases, applications, operating systems, network activity, and other electronically stored information.
• Responds to crime scenes and cyber incidents to identify, collect, preview, inventory, transport, secure, and preserve digital evidence in accordance with forensic standards, chain-of-custody requirements, and legal admissibility requirements.
• Conducts cloud and network forensic analysis, malware and ransomware investigations, vulnerability and security assessments, and analysis of attack techniques and indicators of compromise to identify, document, and interpret evidence of criminal or unauthorized activity.
• Prepares clear, accurate, and comprehensive forensic reports and presents complex technical findings in a manner understandable to investigators, prosecutors, courts, and other nontechnical audiences.
• Collaborates with investigators, prosecutors, legal counsel, and partner agencies to provide technical and investigative assistance; support search warrants and court proceedings; research applicable laws, case law, regulations, and forensic standards; and provide expert witness testimony regarding forensic methods, findings, and conclusions.
• Provides training and technical instruction related to digital evidence, cybersecurity, and computer and mobile-device investigations; researches emerging cyber threats, tools, and technologies; manages multiple assignments and deadlines; safeguards confidential information; and performs duties that may involve exposure to child sexual abuse material and other disturbing or graphic content.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level