Page 1 of 5 DAKOTA COUNTY Employee Relations Administration Center, 1590 Highway 55 Hastings, MN 55033-2372 651.438.4435 http://www.dakotacounty.us INVITES APPLICATIONS FOR THE POSITION OF: Electronic Forensic Analyst An Equal Opportunity Employer SALARY Salary: See Position Description OPEN DATE: 12/05/14 CLOSE DATE: Continuous. POSITION ELECTRONIC FORENSIC ANALYST - Job # 51023.14.001 POSTING TYPE: Open Competitive DEPARTMENT: Sheriff's Office HOURS: Full-time SALARY RANGE: $55,642-$86,940/year (Grade Level 108) LOCATION: Hastings Law Enforcement Center UNION: None CLOSE DATE: Open Until Filled Conducts and analyzes advanced and highly specialized forensic evidence for possible criminal behavior of computers hard drives, cell phones, and other digital media sources. Performs forensic examination on seized digital storage media systems and provides investigative and technical guidance on related digital media evidence. Provides ongoing analysis of technology trends to incorporate proven forensic investigation and supporting technologies into practice. Position receives direct supervision from members of the Sheriff's Office Supervisory Staff. Technical direction and coordination is received from the Information Technology Director on an as needed basis. MINIMUM QUALIFICATIONS Bachelor's Degree. Preferred in Digital Forensics, Computer Science, Computer Engineering or related field. AND Five years of general information technology experience and three years of experience working in forensic technology involving computer forensics, electronic discovery and technical investigations. Must have demonstrated ability to evaluate and maintain hardware and software necessary for the performance of criminal investigations preferably in a law enforcement environment. Additional skills require include understanding and analysis of systems security and forensic acquisition of electronic evidence. OR An equivalent combination of education and experience. AND Required license(s): Valid Driver's License. PREFERRED QUALIFICATIONS BEYOND MINIMUM REQUIRED:
Page 2 of 5 Certified Computer Forensic Technician. Or Certified Forensic Computer Examiner certifications. Understanding / experience in criminal law. Experience with computer forensic software such as Encase, Access Data's Forensic Toolkit, Cellebrite, and Internet Evidence Finder etc. DUTIES & RESPONSIBILITIES These examples do not include all possible tasks in this work and do not limit the assignment of related tasks in any position of this classification. Regular attendance according to the position's management approved work schedule is required for all positions.. 1. Performs a variety of specialized computer forensics and electronic discovery services from digital media including evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Digital media includes a wide variety of electronic data storage and transfer devices including computers, laptops, cellular phones, PDA's and the images, spreadsheets and other types of files stored on these devices. 2. Maintains strict protocol guidelines for chain of custody and all the evidence to ensure integrity of each item of evidence is handled and analyzed according to meet legal practice requirements that includes: collecting, transporting, receiving, storing, labeling and preserving data collected for digital evidence on submittal for examination and analysis. 3. Determines the most appropriate method of protecting original evidence and recovering deleted, erased, hidden and encrypted digital evidence. 4. Evaluates scientific results of analysis to determine the validity and whether the information has forensic significance. 5. Provides technical guidance in evaluating and investigating cases where computer of related computer media has potential evidence. 6. Provides progress reports regarding investigations as well as detailed and technical report summaries of findings in written and verbal formats. 7. Interacts with investigators from law enforcement and IT department personnel to acquire information necessary to perform forensic examinations. Demonstrates the ability to communicate, coordinate and cooperate with these agencies and in a task force environment. 8. Provides expert testimony in the field of computer forensics; prepares evidence and presents expert testimony in court on results of seizure and handling of evidence, and results of analysis conducted. 9. Continually updates and develops skills regarding new computer technology and use of new software and hardware tools to extract information from computer and digital media systems. 10. Attends training, workshops and seminars to maintain current methodologies and knowledge of trends and developments in the field of computer forensics. 11. Reviews various court decisions relating to the field of computer forensics. 12. Travels to a variety of locations throughout the county to provide technical assistance to investigators and to collect evidence. 13. Other duties as assigned. ESSENTIAL JOB FUNCTIONS: 1-12 KNOWLEDGE, SKILLS & ABILITIES AND WORK ENVIRONMENT Strong knowledge of data retrieval procedures and forensic practices. Knowledge of evidentiary procedures, electronic criminal situations, fraud analysis and forensics fundamentals. Knowledge of specialized research, intelligence, collection and dissemination techniques related to forensic investigation. Familiar with various operating and network systems and database structure. Ability to translate technical computer analytics to quantifiable evidence for court hearings. Ability to engage with electronic forensics counterparts and law enforcement agencies to build cases.
Page 3 of 5 Knowledge of productivity application software (Microsoft Office, etc.). Ability to organize work efficiently and effectively. Ability to work independently and as a team member. Ability to demonstrate good detail orientation, analytical problem solving, logical thinking, and organizational skills. WORK ENVIRONMENT: The work is performed in both Sheriff's office building and in the field collecting forensic evidence. Some of the work is sedentary and may have extensive periods of time on PC, laptop or network equipment. Incumbents may need to lift up to fifty pounds on an occasional basis. Travel is required to off-site locations and work in all types of weather conditions due to situations such as search warrants and evidence collection. SELECTION PROCESS: The examination/selection process for this classification will consist of a rating of your training and experience from the application materials submitted. The top scoring candidates will be forwarded to the hiring department for further consideration. Qualified candidates must pass a criminal history background check and may be required to pass a pre-employment drug test Dakota County Employee Relations www.co.dakota.mn.us Main Number 651.438.4435 (contact 8 a.m. - 4:30 p.m. Monday - Friday) Fax 651.438.8178 APPLICATIONS MAY BE OBTAINED AND SUBMITTED ONLINE AT: http://www.dakotacounty.us OR Dakota County Employee Relations - Administration Center 1590 Highway 55 Hastings, MN 55033-2372 651.438.4435 EXAM #51023.14.001 ELECTRONIC FORENSIC ANALYST SM
Page 4 of 5 Electronic Forensic Analyst Supplemental Questionnaire * 1. *******Applicants for this recruitment will be rated based on their answers to the supplemental questions listed below and application materials. It is IMPERATIVE that information provided on the application and resume are detailed and clearly outline your work experience & skills. They must also support and/or match answers to the supplemental questions. Please initial the box below to CONFIRM that the information provided is accurate and true to the best of your knowledge. Falsification may result in disqualification from consideration for this and subsequent recruitments with Dakota County for up to three years. * 2. Minimum Qualifications Screening: Based upon the job description and posting, select which best describes your minimum qualifications for this position. Bachelor's Degree. Preferred in Digital Forensics, Computer Science, Computer Engineering or related field. AND Five years of general information technology experience and three years of experience working in forensic technology involving computer forensics, electronic discovery and technical investigations. Must have demonstrated ability to evaluate and maintain hardware and software necessary for the performance of criminal investigations preferably in a law enforcement environment. An equivalent combination of education and experience to total nine years. None of the above, I do not qualify. * 3. Please select the highest level of education completed or Degree held. (Degree must be held by the closing date of this recruitment) High School Diploma or G.E.D equivalent Professional/Technical Certificate equivalent to 1 year of full-time post secondary education Associate's Degree Bachelor's Degree Master's Degree Ph.D. * 4. Do you have a valid driver's license? Yes No * 5. How many years of experience do you have working in forensic technology involving computer forensics, electronic discovery and technical investigations? Less 3 years 3 years 4 years 5 years 6 years 7 years 8 years 9+ years * 6. How many years of experience do you have in general information technology? Less than three years 3 years 4 years 5+ years
Page 5 of 5 7. Do you have any of the following certifications? Select all that apply. Certified Computer Forensic Technician Certified Forensic Computer Examiner certifications * 8. Do you have experience in criminal law? Yes No 9. Do you have experience with any of the following computer forensic software programs? Select all that apply. EnCase Access Data's Forensic Toolkit Cellebrite Internet Evidence Finder Other 10. If you selected other to the previous question, please list the other software programs. * 11. If selected for this position, what would be your minimum acceptable salary? * Required Question