COMPUTER EVIDENCE SPECIALIST I 21810
DISTINGUISHING FEATURES OF THE CLASS
The work involves responsibility for highly specialized forensic testing that involves the forensic examination of computers and computer media for the presence of evidence relating to criminal activity. An employee in this class is responsible for conducting examinations of computers and media generated by computers to develop evidence in the specialty area of forensic computer science. The Computer Evidence Specialist receives and maintains the integrity of evidence; uses knowledge of computer technologies and theories to conduct analysis of submitted evidence; evaluates scientific results to determine their validity and to determine whether the information has forensic significance prepares formal written reports suitable for legal presentations that state results; is directly responsible for the accuracy and adequacy of the forensic examinations performed. An employee in this class travels regionally to provide on-site expert forensic computer support at crime scenes and other areas required and testifies in court as a fact-witness presenting forensic testimony in layman’s terms. Work is performed under the general supervision of the Senior Forensic Chemist (Criminalistics). Does related work as required.
TYPICAL WORK ACTIVITIES
Prepare duplicate image backup copies of computer media.
Recover deleted computer files, password protected/encrypted files and hidden information.
Conduct comprehensive searches of computer media for text, data and images.
Prepare and/or convert recovered files and information into format compatible with needs.
May participate in crime scene response.
Assists in performing quality assurance function.
Prepare reports of findings.
Testify in court as an expert witness.
Attends training classes/seminars and conferences.
Participates in public health preparedness activities as trained and assigned.
FULL PERFORMANCE KNOWLEDGES, SKILLS, ABILITIES AND PERSONAL CHARACTERISTICS
Good knowledge of PC hardware.
Good knowledge of the internal functioning of, as well as how to operate, various operating systems (MS-DOS, Windows 95/98, Windows NT/2000, Windows XP, Unix/Linux, or other).
Good knowledge of computer hardware to the component level.
Good knowledge of networking and internet application software.
Ability to plan and carry out assigned projects to completion.
Ability to communicate professionally both orally and in writing.
Physical condition commensurate with the demands of the position.
A) Graduation from a regionally accredited college or university or one accredited by the New York State Board of Regents to grant degrees within the last ten (10) years with a Bachelor’s Degree or higher in a Computer Science related field which must have included or been supplemented by 80 hours in forensic computer analysis*, or;
B) Graduation from a regionally accredited college or university or one accredited by the New York State Board of Regents to grant degrees with a Baccalaureate Degree or higher in a Computer Science related field which must have included or been supplemented by 80 hours in forensic computer analysis* and employment in a technical position in a Forensic Laboratory for six (6) months within the last five (5) years.
*You must submit a copy of your college transcript indicating the course/hours or a certificate from the training program you attended.
Applicants will be required to undergo a State and national criminal history background investigation which will include a fingerprint check to determine suitability for appointment. Failure to meet the standards for the background investigation may result in disqualification.
5/2011 Date Revised