COMPUTER EVIDENCE SPECIALIST II 21812

(Non-Competitive)

DISTINGUISHING FEATURES OF THE CLASS

The work involves responsibility for highly specialized forensic testing that involves the forensic examination of computers and computer media for the presence of evidence relating to criminal activity. An employee in this class is responsible for conducting more difficult examinations of computers and media generated by computers to develop evidence in the specialty area of forensic computer science. The Computer Evidence Specialist II is distinguished from the Specialist I in that the Specialist II is responsible for providing guidance to less experienced Specialists and has the ability to handle the more difficult and complex cases.

The Computer Evidence Specialist II receives and maintains the integrity of evidence; uses knowledge of computer technologies and theories to conduct analysis of submitted evidence; evaluates scientific results to determine their validity and to determine whether the information has forensic significance; prepares formal written reports suitable for legal presentations that state results; is directly responsible for the accuracy and adequacy of the forensic examinations performed. An employee in this class may travel regionally to provide on-site expert forensic computer support at crime scenes and other areas required and testifies in court as a fact-witness presenting forensic testimony in layman’s terms. Work is performed under the general supervision of the Senior Forensic Chemist (Criminalistics). Supervision maybe exercised over a small number of Computer Evidence Specialists I. Does related work as required.

 

TYPICAL WORK ACTIVITIES

Prepare duplicate image backup copies of computer media.

Recover deleted computer files, password protected/encrypted files and hidden information.

Conduct comprehensive searches of computer media for text, data and images.

Prepare and/or convert recovered files and information into format compatible with needs.

Participate in crime scene response.

Perform quality assurance.

Prepare reports of findings.

Testify in court as an expert witness.

Review work of peers for technical accuracy.

Assists in the training of Computer Evidence Specialists I in technical procedures, handling of evidence and preparation of material for court testimony.

Trains Law Enforcement personnel and others responsible for gathering evidence.

Determines methods of analysis to be applied by Computer Evidence Specialist I and supervises the work through review of findings and standards of investigation.

Attends training classes/seminars/conferences.

Participates in public health preparedness activities as trained and assigned.

 

FULL PERFORMANCE KNOWLEDGES, SKILLS, ABILITIES AND PERSONAL CHARACTERISTICS

Thorough knowledge of PC hardware.

Thorough knowledge of the internal functioning of, as well as how to operate, various operating systems (MS-DOS, Windows 95/98, Windows NT/2000, Windows XP, Unix/Linux, or other).

Thorough knowledge of computer hardware to the component level.

Thorough knowledge of computer science and computer evidence recovery.

Good knowledge of the laws related to computer evidence recovery.

Good knowledge of the methodology applied in analysis of digital evidence for use in crime detection.

Good knowledge of networking and internet application software.

Ability to supervise the work of others in a manner conducive to full performance and high morale.

Ability to plan and carry out assigned projects to completion.

Ability to communicate both orally and in writing.

Physical condition commensurate with the demands of the position.

 

MINIMUM QUALIFICATIONS

Graduation from a regionally accredited college or university or one accredited by the New York State Board of Regents to grant degrees with a Baccalaureate Degree or higher and two (2) years of paid work experience, or its part-time equivalent, performing the duties similar to a Computer Evidence Specialist.

 

BACKGROUND INVESTIGATION:

Applicants will be required to undergo a State and national criminal history background investigation which will include a fingerprint check to determine suitability for appointment. Failure to meet the standards for the background investigation may result in disqualification.

 

09/2012 Date Revised