COMPUTER FORENSICS ANALYST 0502

DISTINGUISHING FEATURES OF THE CLASS

Under the supervision of the District Attorney, an employee in this class assists in analyzing electronic evidence, utilizing forensically sound methods and procedures in support of criminal investigations for the District Attorney's Office. Responsibility is included for working on highly sensitive matters. Work is reviewed by an administrative supervisor in the Technical Services Unit. Does related work as required.

TYPICAL WORK ACTIVITIES

Performs analyses of mobile electronic devices, including but not limited to, cellular telephones, tablets, GPS equipment, etc.;

Disassembles, configures and troubleshoots computer hardware;

Prepares forensic images and organizes and uploads case file images for archival purposes;

Conducts computer forensic analyses according to case requests/statements of work;

Prepares detailed reports of findings;

Uses computer forensic software to forensically copy data found on electronic devices so that the integrity of original evidence is preserved and the copy can be used for forensic analysis;

Performs computer hardware, software, network, and internet related research to troubleshoot and maintain computer forensic laboratory equipment and network;

Performs case intake duties;

Prepares new case files and chain of custody documentation;

Labels evidence received by laboratory;

Performs data entry functions by logging evidence into the unit’s case tracking system;

Testifies to findings in Grand Jury and Trial proceedings.

FULL PERFORMANCE KNOWLEDGES, SKILLS, ABILITIES AND PERSONAL CHARACTERISTICS

Thorough knowledge of computer forensic industry standards, chain of custody procedures, forensic methodologies, and evidence handling; ability to testify effectively in court; ability to work in a fast paced environment; physical condition commensurate with the demands of the position.

MINIMUM QUALIFICATIONS

Either:

(a) Graduation from a college with federally-authorized accreditation or registration by New York State with a Bachelor's Degree in Computer Forensics, Computer Science, or a related field, or;

(b) Four (4) years of work-related experience in the field of computer forensics.

Note: Preference will be given to those candidates who have completed or received verifiable training with computer forensic tools such as Cellebrite and SecureView.

08/17/15

SUFFOLK COUNTY

Pending (Non Competitive)