±Forensic Focus Partners
New Today: 4
New Yesterday: 2
· Extracting data from dump of mobile devices running Android operating system
· Development of Digital Forensic Tools on Mobile Device, a Potential Area to Consider?
· Can You Get That License Plate?
· How To Decrypt WeChat EnMicroMsg.db Database?
· A guide to RegRipper and the art of timeline building
· Recovering Evidence from SSD Drives in 2014: Understanding TRIM, Garbage Collection and Exclusions
· FT Cyber Security Summit 2014 – Recap
· Why Offender Profiling is Changing Thanks to Mobile Forensics and Increasingly ‘Social’ Criminal Activity
· Understanding Cyber Bullying – Notes for Digital Forensics Examiners
±Follow Forensic Focus
Technical Services Support Specialist III, Howard County MD
$55,057.60 - $88,795.20 Annually
Supports criminal and administrative investigations of the Howard County Department of Police and the Maryland Internet Crimes against Children Taskforce. Provides factual, impartial reports of findings and performs complex digital data recovery examinations on computers, cell phones, mobile computers and hand-held devices in a forensically sound manner within a forensic laboratory environment. This position includes various technical, administrative and supervisory performances to be completed by technically qualified people in the computer forensic sciences field of study. Incumbent is often involved in the analysis of various forms of images and video data which may depict violent and or sexually explicit criminal acts.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Include the following. Other duties may be assigned.
Serves as a qualified computer forensic examiner. Processes, examines and analyzes electronically stored data and computer-related evidentiary materials pertaining to law enforcement investigations. Technical duties and responsibilities essential to this position include the following;
• Physically carry, transport, and maintain a chain of custody for computers, hardware, software, cell phones and other digital devices of evidence to and from, crime scenes, property room, storage lockers and the forensic laboratory.
• Physically disassemble, examine and identify computer systems, hardware components, and operational conditions of digital evidence subject to forensic analysis.
• Physically evaluate the condition of all digital evidence.
• Examine the contents of a computer's CMOS, boot record data, system and operating system configuration files.
• Determine factual information about the operational state and condition of all digital evidence's hardware, storage data and software applications using advanced forensic hardware and software methods.
• Acquire forensic copies of the original digital evidence using advanced forensic hardware and software methods.
• Prevent the transference and alteration of data during any forensic image acquisition, previewing, or analysis of digital media evidence.
• Conduct on-scene collection of evidence, forensic triaging, and provide assistance to case investigators and law enforcement during the execution of search and seizure warrant executions.
• Conduct examinations of digital media in accordance with court orders and forensic laboratory policies.
• Conduct thorough examinations of digital media and cell-phones using various forensic applications, tools, methodologies, and techniques in the recovery of factual and impartial data from evidence.
• Conduct validation testing on numerous pieces of forensic hardware and software applications.
• Examine and analyze various forms of data, digital communications, images and video which may depict violent and or sexually explicit criminal acts against adults, children and animals.
• Prepare various formats of media containing evidentiary and supplemental exhibits recovered from each examination for review by case investigators, attorneys and the courts.
• Provide technical knowledge to case investigators, attorneys, and to state and federal courts.
• During court proceedings and trials will maintain curriculum vitae with courts and attorneys, provide testimony as an expert witness, be able to demonstrate technical knowledge and field expertise to the courts, present evidentiary exhibits and be subject to cross-examination testimony and defense witness experts .
Examples of Administrative Duties:
• Assist in the preparation of search and seizure warrants, court orders, and subpoenas.
• Work with prosecutors and others to prepare evidentiary exhibits, testimony and other tasks associated with preparing for court proceedings and court trials.
• Participate in peer-reviews of all completed forensic examinations.
• Prepare and give presentations of field related topics to professional audiences.
• Attend and participate in field related seminars, conferences, and events.
• Maintain field related certifications, and qualifications; meet annual training requirements.
• Provides advice, guidance and assistance in the daily operation of the computer forensic laboratory or any state and federal law enforcement agents of the Maryland Internet Crimes against Children Taskforce (MICAC).
• Assist or participate in training and mentoring programs for newly assigned state and federal agents of the MICAC.
MINIMUM REQUIRED EDUCATION/EXPERIENCE:
Bachelor Degree and two years experience, or equivalent combination of education and experience.
• Possession of a Bachelor's Degree in computer sciences, information technology, or a related field;
• Five years or more working within a Government or Law Enforcement/Government contracted computer forensic laboratory; conducting computer forensic examinations involving criminal and/or child exploitation cases;
• Two years or more as a Certified Computer forensic examiner holding at minimum a current; EnCE, CFCE or ACE, GIAC, ISFCE, or MiCFE certification;
• At least 1,000 actual and documented hours of forensic processing using EnCase and or FTK Forensic Software Suites (testing and certification practical's do not count).
• Testimony as a court accepted "Expert Witness" entered in any judicial court proceeding,
• Education or experience in criminal law or criminal justice.
CERTIFICATES, LICENSES, AND REGISTRATIONS, AND CONDITIONS OF EMPLOYMENT:
Possession of a valid driver's license equivalent to a non-commercial, class C Maryland driver's license is required at the time of appointment. All licenses and certifications must be maintained throughout employment.
Incumbent is subject to call to duty in emergencies, and may be required to work over 40 hours per week as needed.
All applicants must be of good moral character and emotionally stable, as determined by a comprehensive, polygraph examination, background investigation, and psychological evaluation.
Employees may be subject to periodic drug testing.
APPLICATION CLOSING DATE: 08/09/13.
FOR MORE INFORMATION AND TO APPLY ONLINE, GO TO WWW.HOWARDCOUNTYMD.GOV