Digital Forensic Examiner

Lethbridge Police Service•Lethbridge, AB

9d•Onsite

About The Position

The Lethbridge Police Service is seeking a skilled and detail-oriented Digital Forensic Examiner for a full-time, fixed-term position within the Criminal Investigation Section. This role is crucial for modern investigations, supporting the collection, analysis, and interpretation of digital evidence from various devices and systems. The Digital Forensic Unit ensures that evidence is examined in a forensically sound and legally compliant manner, suitable for court proceedings. The position reports to the Sergeant in charge of the Forensic Identification Unit and functions as a subject matter expert, conducting advanced examinations, providing technical advice, and preparing reports for judicial processes. This role requires independent judgment, precision, and adaptability to evolving technology and investigative demands. It offers a unique opportunity to apply advanced technical skills in a specialized field, directly contributing to investigative outcomes and public safety. The work has a direct impact on the resolution of investigations and the administration of justice. This temporary full-time position is covered by the Canadian Union of Public Employees (CUPE) Local 70 contract.

Requirements

Possess a minimum of a two-year post-secondary diploma in Computer Information Technology, Computer Science, Digital Forensics, Cybersecurity or a related field with a Bachelors Degree in one of these fields being preferred. An equivalent combination of education and relevant experience may be considered.
Must be able to obtain valid Peace Officer appointment under the Alberta Peace Officer Act.
Have a minimum of 3–5 years of progressive experience in a technical, analytical, or investigative role such as digital forensics, information technology, cybersecurity, or other hands-on digital systems or data extraction environments.
Have demonstrated experience working with specialized technical software involving data extraction, system analysis, or digital processing (e.g., forensic tools, system utilities, or equivalent platforms).
Have experience working with large or complex data sets, including analysis, interpretation, and extraction of meaningful information to support operational or investigative outcomes.
Operating systems knowledge including Windows and Linux; server installation, configuration, and maintenance in virtualized and physical environments.
Knowledge of networking fundamentals, protocols, data storage, communication methodologies, and system architectures.
Knowledge and familiarity with Internet technologies including web browsers, email systems, file sharing platforms, and online data sources.
Demonstrate strong analytical and critical thinking skills, with the ability to solve complex technical problems where no predefined solution exists.
Demonstrate a high level of attention to detail, with experience producing clear, accurate, and defensible technical documentation or reports in regulated or high-accountability environments, ensuring strong documentation practices and evidentiary integrity.
Possess strong written and verbal communication skills, including the ability to explain technical concepts to non-technical audiences such as investigators, legal professionals, or the courts.
Demonstrate sound judgment and decision-making in a role where actions may have legal, investigative, or organizational impact.
Be able to work independently while managing competing priorities, deadlines, and time-sensitive investigative demands.
Show a strong commitment to continuous learning and professional development in a rapidly evolving technical field.
Demonstrate the ability to work with sensitive, confidential, and potentially disturbing material, including graphic digital evidence, while maintaining professionalism, objectivity, and emotional resilience in a high-impact investigative environment.

Nice To Haves

Experience working in a law enforcement, investigative, intelligence, or forensic environment.
Experience providing testimony, supporting court processes, or preparing materials for legal proceedings.
Experience with digital forensic tools such as Cellebrite Physical Analyzer, Magnet AXIOM, EnCase, or similar platforms (or comparable data extraction/analysis tools).
Knowledge of relevant legislation, privacy concerns, or legal frameworks related to digital evidence.
Experience with scripting or programming languages (Python, Powershell) used for automation or data analysis.
Experience with database querying or structured data analysis (Ex. SQL or similar tools).
IACIS Certified Forensic Computer Examiner (CFCE) designation.
GIAC Certified Forensic Examiner (GCFE) or GIAC Certified Forensic Analyst (GCFA) designation.
Magnet Certified Forensic Examiner (MCFE) Designation.
Cellebrite Certified Operator (CCO) or Cellbrite Certified Physical Analyst (CCPA) designation.
Canadian Police College courses: Computer Forensic Examiner (CMPFOR), Mobile Device Acquisition and Analysis (MDAA), Internet Evidence Analysis (IEAC), or equivalent.
CompTIA A+, Network+, Security+, or Cybersecurity Analyst+ certifications.

Responsibilities

Conduct advanced forensic examinations of digital devices including computers, mobile devices, tablets, and other electronic storage media using specialized forensic software and hands-on technical methods.
Utilize industry-standard digital forensic platforms (e.g., Cellebrite Physical Analyzer, Magnet AXIOM, X-Ways, and similar tools) to extract, process, and analyze complex data sets.
Perform deep-level data recovery, including retrieval of deleted, encrypted, damaged, or otherwise inaccessible data from a variety of systems and file structures.
Apply analytical techniques to interpret large, incomplete, or conflicting data sets, identifying relevant digital artifacts to support investigations.
Manage the full lifecycle of digital evidence, ensuring integrity through proper collection, preservation, documentation, analysis, and disclosure.
Produce clear, detailed, and defensible forensic reports translating complex technical findings into information usable by investigators and the courts.
Provide expert-level technical consultation to investigators, including advising on evidence seizure, forensic strategy, and technical aspects of judicial authorizations.
Support investigations by identifying evidentiary value within digital data and prioritizing analysis based on investigative needs and timelines.
Provide expert witness testimony, clearly explaining forensic methodologies and findings in court proceedings.
Maintain, troubleshoot, and support specialized forensic hardware, software, and lab infrastructure.
Research, evaluate, and implement emerging tools, techniques, and methodologies to ensure the Service remains current with evolving technology.
Contribute to the development of policies, procedures, and best practices related to digital forensic operations.
Provide training and knowledge transfer to sworn and civilian members on digital evidence awareness and handling.
On occasion, attend crime scenes with Investigators to provide technical advice/expertise.
Other related duties as assigned by the Sergeant in charge.
Be able to travel 2 to 4 times per year within North America for work and/or training as required.