City of Spokane
Overview
Acquires, processes, analyzes, and preserves digital forensic evidence in support of criminal investigations; prepares evidence for examination; reports orally and in writing; and testifies in court about the procedures used and results obtained.
Note: This description indicates the kinds of activities and levels of work difficulty required of positions in this class and is not intended as a complete list of duties and responsibilities.
Responsibilities
Plans and coordinates digital forensic science activities, and determines strategies for digital forensic analysis based upon specific criminal case requirements. Identifies and acquires digital evidence from modern computer sources including personal computers, thumb drives, cell phones and tablets, Internet of Things devices, and local and server-based storage.
Maintains chain of custody and forensic validity of evidence and related documentation. Prepares digital media for imaging by ensuring data integrity. Preserves digital data and evidence.
Creates forensically sound duplicates of evidence that ensure the original evidence is not unintentionally modified. Documents original condition of digital and other evidence, and makes backup copies of digital information.
Recovers hidden, deleted, or corrupted files; traces network, internet, and cellular communications. Detects, accesses, and analyzes password-protected or encrypted data, alternate data streams, and other forms of concealed data. Performs virus scanning on digital media.
Performs forensic keyword searches and records results. Queries, extracts, and reports on data from relational databases while maintaining data integrity.
Analyzes data and provides technically accurate results and reports.
Researches and adopts new hardware, software, and processes in the digital forensic field. Maintains, calibrates and validates tools, techniques, equipment, and software used in the forensic examination process.
Provides technical guidance and training to investigators and prosecutors.
Documents hardware and software configuration of examiner’s system and systems to be examined, including drive conditions and internal components. Documents irregularities encountered, actions taken in response, and any changes made to systems.
Acts as an expert witness in court, grand jury, or other legal proceedings through oral testimony, written reports or affidavits, or other legal instruments. Prepares and provides oral and written reports.
Performs related work as required.
Open-Entry Requirements
Education: Bachelor’s degree in computer science, information systems, information security, or related field.
Experience: Two years of experience conducting digital forensic examinations on personal computers and mobile devices.
Equivalency: We may accept different combinations of education and experience. We welcome job seekers with relevant backgrounds to apply.
Licenses and Certifications
Possession of a valid driver’s license, to be maintained throughout employment.
Possession of a certification comparable to one of the following is required within six months of appointment: IACIS Certified Mobile Device Examiner, IACIS Certified Forensic Computer Examiner, or LEVA Certified Video Forensic Technician.
Possession of all three certifications (or comparable) is required within 18 months of appointment. These certifications must be maintained throughout employment.
Background Check All applicants are subject to a thorough police background investigation, including but not limited to criminal history, pre-employment drug screening, and polygraph.
For information on what to expect with the hiring process, a test information guide, and frequently asked questions, please visit our website (note: remove this if not applicable).
Applicants must meet the minimum qualifications and pass the examination for this position to be eligible for hire.
Qualified applicants are encouraged to apply immediately. All applicants must complete and submit a City employment application online by the specified filing cut-off date.
Upon request, at time of application, the City will provide alternative accessible tests to individuals with disabilities that impair manual, sensory, or speaking skills needed to take the test, unless the test is intended to measure those skills.
The examination will consist of a Training and Experience Evaluation (T&E), with a 100% weight.
TRAINING AND EXPERIENCE EVALUATION DETAILS
Copies of your college or university transcripts (unofficial transcripts are accepted) may be a required part of this application and will be used to verify that you meet the minimum qualifications, as posted on the job announcement.
Responses to your T&E questions should be consistent with the information given in your application details. Answers are subject to verification.
Failure to complete all the questions or incomplete responses will result in a lower score; therefore, it is advantageous for you to provide a full and complete response to each supplemental question.
Resumes or questionnaires uploaded as attachments will not be accepted in lieu of completing each question online.
"See Resume" or "See above" etc., and copy/paste from a previous answer are not qualifying responses and will not be considered.
This is an online examination and will require a computer.
If you do not have access to a computer, please notify Civil Service so that one may be provided.
Reservations can also be made through your local library.
Training and Experience examination links with instructions will be emailed prior to the start date and will expire at the specified due date. Keep in mind that the test link will be emailed from the hiring organization.
Additional Notes
Applicants who apply and meet the minimum qualifications within the stated window will test on the scheduled dates.
The examination may include such subjects as:
Education and Training in Digital Forensics field
Experience in Digital Forensics work, investigation, and analysis
We are an equal opportunity employer and value diversity within our organization. We do not discriminate on the basis of race, religion, color, national origin, gender identity, sexual orientation, age, marital status, familial status, genetic information, veteran/military status or disability status. As a Fair Chance employer, City of Spokane does not conduct initial background screening for non-public safety positions.
#J-18808-Ljbffr
Note: This description indicates the kinds of activities and levels of work difficulty required of positions in this class and is not intended as a complete list of duties and responsibilities.
Responsibilities
Plans and coordinates digital forensic science activities, and determines strategies for digital forensic analysis based upon specific criminal case requirements. Identifies and acquires digital evidence from modern computer sources including personal computers, thumb drives, cell phones and tablets, Internet of Things devices, and local and server-based storage.
Maintains chain of custody and forensic validity of evidence and related documentation. Prepares digital media for imaging by ensuring data integrity. Preserves digital data and evidence.
Creates forensically sound duplicates of evidence that ensure the original evidence is not unintentionally modified. Documents original condition of digital and other evidence, and makes backup copies of digital information.
Recovers hidden, deleted, or corrupted files; traces network, internet, and cellular communications. Detects, accesses, and analyzes password-protected or encrypted data, alternate data streams, and other forms of concealed data. Performs virus scanning on digital media.
Performs forensic keyword searches and records results. Queries, extracts, and reports on data from relational databases while maintaining data integrity.
Analyzes data and provides technically accurate results and reports.
Researches and adopts new hardware, software, and processes in the digital forensic field. Maintains, calibrates and validates tools, techniques, equipment, and software used in the forensic examination process.
Provides technical guidance and training to investigators and prosecutors.
Documents hardware and software configuration of examiner’s system and systems to be examined, including drive conditions and internal components. Documents irregularities encountered, actions taken in response, and any changes made to systems.
Acts as an expert witness in court, grand jury, or other legal proceedings through oral testimony, written reports or affidavits, or other legal instruments. Prepares and provides oral and written reports.
Performs related work as required.
Open-Entry Requirements
Education: Bachelor’s degree in computer science, information systems, information security, or related field.
Experience: Two years of experience conducting digital forensic examinations on personal computers and mobile devices.
Equivalency: We may accept different combinations of education and experience. We welcome job seekers with relevant backgrounds to apply.
Licenses and Certifications
Possession of a valid driver’s license, to be maintained throughout employment.
Possession of a certification comparable to one of the following is required within six months of appointment: IACIS Certified Mobile Device Examiner, IACIS Certified Forensic Computer Examiner, or LEVA Certified Video Forensic Technician.
Possession of all three certifications (or comparable) is required within 18 months of appointment. These certifications must be maintained throughout employment.
Background Check All applicants are subject to a thorough police background investigation, including but not limited to criminal history, pre-employment drug screening, and polygraph.
For information on what to expect with the hiring process, a test information guide, and frequently asked questions, please visit our website (note: remove this if not applicable).
Applicants must meet the minimum qualifications and pass the examination for this position to be eligible for hire.
Qualified applicants are encouraged to apply immediately. All applicants must complete and submit a City employment application online by the specified filing cut-off date.
Upon request, at time of application, the City will provide alternative accessible tests to individuals with disabilities that impair manual, sensory, or speaking skills needed to take the test, unless the test is intended to measure those skills.
The examination will consist of a Training and Experience Evaluation (T&E), with a 100% weight.
TRAINING AND EXPERIENCE EVALUATION DETAILS
Copies of your college or university transcripts (unofficial transcripts are accepted) may be a required part of this application and will be used to verify that you meet the minimum qualifications, as posted on the job announcement.
Responses to your T&E questions should be consistent with the information given in your application details. Answers are subject to verification.
Failure to complete all the questions or incomplete responses will result in a lower score; therefore, it is advantageous for you to provide a full and complete response to each supplemental question.
Resumes or questionnaires uploaded as attachments will not be accepted in lieu of completing each question online.
"See Resume" or "See above" etc., and copy/paste from a previous answer are not qualifying responses and will not be considered.
This is an online examination and will require a computer.
If you do not have access to a computer, please notify Civil Service so that one may be provided.
Reservations can also be made through your local library.
Training and Experience examination links with instructions will be emailed prior to the start date and will expire at the specified due date. Keep in mind that the test link will be emailed from the hiring organization.
Additional Notes
Applicants who apply and meet the minimum qualifications within the stated window will test on the scheduled dates.
The examination may include such subjects as:
Education and Training in Digital Forensics field
Experience in Digital Forensics work, investigation, and analysis
We are an equal opportunity employer and value diversity within our organization. We do not discriminate on the basis of race, religion, color, national origin, gender identity, sexual orientation, age, marital status, familial status, genetic information, veteran/military status or disability status. As a Fair Chance employer, City of Spokane does not conduct initial background screening for non-public safety positions.
#J-18808-Ljbffr