MSP Digital Forensic Examiner

State of Maryland•Anne Arundel, MD

1d•Onsite

About The Position

The main purpose of this position is to provide factual, impartial reports of findings and perform complex digital data recovery examinations on computers, cell phones, mobile computers and hand-held devices in a forensically sound manner. These exams are in support of criminal investigations that involve various forms of digital evidence submitted for analysis to Technical Investigations Section, Digital Forensics Laboratory of the Maryland State Police. This job function provided essential support to criminal and administrative investigations conducted by the Maryland State Police and allied agencies throughout the state.

Requirements

Seven years of experience, three years of experience in computer forensics or information technology related experience and four additional years of experience performing digital recovery examinations on computers
Possession of a Bachelor's degree in information technology, computer science, criminal justice, or a related field and three years of experience in computer forensics or information technology related experience
Employees in this classification may be assigned duties, which require the operation of a motor vehicle. Employees assigned such duties will be required to possess a motor vehicle operator’s license valid in the State of Maryland

Responsibilities

Conducts thorough, impartial forensics examinations of computer hard disk drives, floppy disks, and other electronic data storage media using best forensics practices and ensuring the protection of the original digital evidence
Identifies digital evidence relative to investigations. Investigations include: child pornography exploitation, serious crimes against persons cases and others
Examines, recovers, and analyzes computer evidence for text data, deleted files, password protected files, emails, graphics, multimedia files, file data, and digital images
Prepares detailed, comprehensive, written reports of examinations and findings in a way that findings can be validated and duplicated by other forensics examiners
Presents findings orally and provides expert witness testimony in a court of law and/or administrative hearings as required
Attends on-going continuing education training as required to stay abreast of current trends in technology and computer forensics
Performs other related duties as assigned