Digital Forensic Examiner

Digital Forensics Investigator

The City of Fort Myers strives to be an employer of choice and most of our employees turn jobs into long term careers. The salary shown in the job description is the full range for this position from entry to later career.

NEW EMPLOYEES ARE HIRED AT, OR NEAR THE ENTRY POINT SHOWN, DEPENDING ON QUALIFICATIONS AND RELEVANT EXPERIENCE.

FLSA Status : Non-Exempt Safety Sensitive : Yes Level II Screening : Yes

Under the general direction of a designated supervisor, the incumbent is responsible for conducting thorough forensic examinations on a wide range of electronic devices, including computers, smartphones, tablets, and digital storage media, using industry-leading tools and techniques. They will also assist with the collection, preservation, and documentation of digital evidence in accordance with established chain of custody procedures, ensuring its admissibility in legal proceedings. The digital forensics investigator will also employ advanced methods to recover data from damaged, encrypted, or otherwise inaccessible storage devices, maintaining the integrity and reliability of the evidence and analyze digital evidence to identify relevant information, patterns, and connections, and prepare detailed reports documenting findings, methodologies, and conclusions. This job has no supervisory responsibilities.

Responsibilities and Reporting During an Emergency Situation :

Essential Employees may be required to work during a declared emergency. Depending on the nature of the emergency, this may require working around the clock for several days on short notice.

Non-Essential Employees will not be required to work during a declared emergency. The employee's Department Head will determine when the employee will be required to work.

Perks and Benefits

• Free city-paid employee health coverage, additional for spouse or family
• 3 weeks Paid Time Off (sick & vacation)
• 13 paid holidays
• Pension plan & optional Deferred Compensation
• City-paid life insurance
• Optional Vision, Dental, and Disability Insurance
• Tuition reimbursement
• On-site Gym facility
• And much more!

Duties/Responsibilities

• This classification is distinguished from a Police Officer by the fact that the employee is not a sworn officer, does not carry a firearm, and does not make arrests.
• DFI will collaborate with law enforcement agencies, prosecutors, and other stakeholders to support criminal investigations, providing expertise on digital evidence and cyber-related matters.
• Assist in the development and implementation of departmental policies and procedures related to digital forensics, evidence handling, and cybercrime investigations.
• Conduct comprehensive examinations of digital devices and electronic evidence, including computers, mobile phones, tablets, and storage media, using specialized forensic tools and techniques.
• Recover, extract, and analyze digital data from various sources, including deleted files, encrypted storage, and volatile memory, to identify relevant information and potential leads in criminal investigations.
• Create forensic images of storage media to preserve the integrity and originality of digital evidence, adhering to established protocols and chain of custody procedures.
• Identify and analyze malware infections, malicious software, and suspicious files to determine their impact, origin, and relevance to criminal activities, collaborating with cybersecurity experts as needed.
• Investigate network traffic, logs, and communication records to trace the origin and transmission of illicit activities, such as hacking, data breaches, or cyberattacks, and support cybercrime investigations.
• Prepare detailed forensic reports documenting examination findings, methodologies, and conclusions in a clear, concise, and objective manner, adhering to legal and professional standards.
• Provide expert testimony in court proceedings, presenting forensic findings, interpretations, and conclusions effectively to judges and juries, and assisting prosecutors in the preparation and presentation of digital evidence.
• Stay current with evolving technologies, forensic methodologies, and legal precedents through ongoing training, certification, and participation in professional organizations, ensuring proficiency and expertise in digital forensics examination.
• Collaborate with law enforcement agencies, prosecutors, forensic laboratories, and other stakeholders to support criminal investigations, share information, and contribute to the overall success of investigative efforts.
• Ensure adherence to departmental policies, procedures, and quality standards in conducting digital forensics examinations, maintaining accuracy, integrity, and confidentiality throughout the process.
• This position requires regular and reliable attendance and the employee's physical presence at the workplace.
• Other duties as assigned.

KNOWLEDGE, SKILLS AND ABILITIES

• Proficient in utilizing a variety of digital forensic tools and software, such as EnCase, FTK, X-Ways Forensics, Cellebrite, and open-source forensic utilities.
• Solid understanding of computer hardware, operating systems (Windows, macOS, Linux), file systems, network protocols, and encryption technologies.
• Ability to perform forensic imaging, data carving, and keyword searching to extract and analyze digital evidence from various electronic devices.
• Strong analytical and problem-solving skills to interpret complex data, identify patterns, and draw accurate conclusions during digital forensic examinations.
• Ability to recognize anomalies, discrepancies, and potential indicators of criminal activity within digital evidence and communicate findings effectively to investigative teams.
• Meticulous attention to detail in collecting, preserving, and documenting digital evidence in accordance with established protocols and chain of custody procedures.
• Ability to maintain accuracy and precision throughout the forensic examination process to ensure the integrity and admissibility of evidence in legal proceedings.
• Knowledge of relevant laws, regulations, and legal procedures governing digital evidence, cybercrime investigations, and the admissibility of digital evidence in court.
• Understanding of ethical standards, professional guidelines, and best practices in digital forensics to maintain integrity, confidentiality, and impartiality throughout the examination process.
• Excellent written and verbal communication skills to convey technical information, forensic findings, and investigative conclusions clearly and concisely to diverse audiences.
• Ability to collaborate effectively with law enforcement agencies, prosecutors, and other stakeholders, and provide expert testimony in court to support legal proceedings.
• Commitment to continuous learning and professional development to stay abreast of emerging technologies, forensic methodologies, and legal developments in the field of digital forensics.
• Willingness to pursue relevant certifications, attend training seminars, and participate in professional organizations to enhance skills and knowledge in digital forensics examination.
• Commitment to continuous learning and professional development to stay abreast of emerging technologies, forensic methodologies, and legal developments in the field of digital forensics.
• Willingness to pursue relevant certifications, attend training seminars, and participate in professional organizations to enhance skills and knowledge in digital forensics examination.

Minimum Requirements

• Associates's degree from an accredited college or university with an emphasis in computer science, forensic science, cybersecurity, criminal justice. Experience, and/or training that provides the required knowledge and abilities may be substituted for the degree.
• Minimum of five (5) years of sworn law enforcement experience with investigative experience and/ or equivalent non-sworn investigative experience.
• Minimum of 2 years of relevant experience in digital forensics examination, preferably in a law enforcement agency, government organization, or private sector firm specializing in cybersecurity or digital investigations.
• Must possess a valid Florida Driver's License with an acceptable driving record.
• Must submit to a complete background investigation including fingerprint check.
• Must meet restrictive drug standards.
• Mandatory drug and alcohol testing required.
• Must pass a polygraph examination.
• Demonstrated experience in conducting digital forensic examinations on a variety of electronic devices and storage media, utilizing forensic tools and techniques to recover, analyze, and interpret digital evidence.
• Proficiency in forensic software tools such as EnCase, FTK, X-Ways Forensics, Cellebrite, and open-source forensic utilities.
• Strong understanding of computer hardware, operating systems (Windows, macOS, Linux), file systems, network protocols, and encryption technologies.
• Familiarity with legal and regulatory requirements governing digital evidence, cybercrime investigations, and the admissibility of digital evidence in court proceedings.
• Exceptional communication and interpersonal skills with the ability to interact professionally and empathetically with individuals from diverse backgrounds.
• Proficiency in computer applications and software relevant to investigative work, including database management and report writing.
• Ability to work independently with minimal supervision and collaborate effectively within a team environment.
• Willingness to work irregular hours including evenings, weekends and holidays, to accommodate the demands of investigations.

PREFERRED QUALIFICATIONS

• Bachelors Degree from an accredited college or university with an emphasis in computer science, forensic science, cybersecurity