Class Title:	IT FORENSICS EXAMINER II
Class Code:	98554
Salary:	$28.79 - $37.55 Hourly $2,303.48 - $3,004.01 Biweekly $4,990.87 - $6,508.68 Monthly $59,890.48 - $78,104.21 Annually

Description  Benefits
Under supervision, incumbents in this class series perform specialized forensic computer and digital device examinations, create reports of said examinations, provide expert testimony in court, build and maintain stand alone and networked computer stations; identify, collect and preserve evidence at crime scenes and performs other work as required. The IT Forensics Examiner II performs the full range of investigative computer forensics work and conducts skilled and complex analysis requiring considerable professional training and experience. The IT Forensics Examiner II class is the separately allocated journey level of the series: Promotion to IT Forensic Examiner III is based on competitive recruitment to fill vacant positions.
Examples Of Essential Duties:
• Design and builds computer(s) and peripheral devices as needed to meet technological demands related to the varied and ever-changing levels of computer forensic requests; maintain the functionality of assigned computers and peripheral equipment used to perform forensic duties. • Prepare and maintain statistical and operational logs, records and reports; maintain computerized databases related to the assigned investigative activities. • Review case files to locate alleged violations, determine evidentiary needs and extract case file information useful to criminal and/or civil investigations. • Identify, collect, organize and analyze IT device-related evidence located at search warrant location(s); may travel out of state or out of the country; may participate in surveillance and undercover investigations; may load, transport and store evidence. • Perform specialized IT forensic examinations of computers, servers, hard drives and other digital devices, such as palm pilots, cell phones, digital cameras and video recorders, applying accepted digital forensic examination techniques in the collection, examination, evaluation, documentation and storage of computer related evidence. • Analyze, isolate and organize data recovered from examination of devices and other storage media; store and maintain computer related evidence according to accepted protocols. • Create investigative reports documenting the findings of the forensic examination; provide expert testimony in court related to computer analysis.
Recruiting Guidelines:
Experience/Education: OPTION I Successful completion of the probationary period as an IT Forensics Examiner I with the County of Riverside or one year of experience comparable to the IT Forensics Examiner II with an outside agency or private employer. OPTION II Possession of an Associate's degree or its equivalent in computer science or related field from a accredited college plus two years of experience as a computer technician with A+ certification (industry standard certification) or five years as a computer technician, programmer or computer network technician/administrator with experience in software applications, operating systems (Windows, MAC, Linux) and advanced Internet operations. Knowledge of: Basic functions of a law enforcement agency; appropriate English usage and grammar; basic investigative techniques related to IT device forensics and forensic-related software usage; basic principles of identification, preservation and presentation of IT device related evidence; and the general rules of evidence and court procedures; computer operating systems (i.e., Novell, Windows 98, 2000, NT, XP, Unix, Solaris, Linux); networked systems (DSL, firewalls, VPN and cable modems). Ability to: Learn, understand, interpret and apply basic laws, rules and regulations; communicate effectively both orally and in writing; analyze and employ sound research methods and techniques; conduct IT device forensic investigations under general supervision; build and maintain stand alone and networked computer stations; establish and maintain effective working relationships with those contacted in the course of work; maintain records and files related to the assigned duties; read, analyze, interpret and understand criminal court documents, criminal complaints, search warrants and grand jury documents; apply basic laws, rules and regulations related to the assigned investigative area; prepare clear and concise reports.
Other Requirements:
Certificate: Possession of a valid California Driver License may be required. The possession of one or more of the following certifications is desirable: Microsoft certifications (MCSE), Cisco Network Certification (CCNA), Federal Law Enforcement Training Center (FLETC) Specialized Computer Evidence Recovery Specialist (SCERS) certification, International Association of Computer Investigative Specialists (IACIS) Certified Forensic Computer Examiner (CFCE) certification, EnCE (EnCase Certified) certification, DOJ Advanced Computer Forensics certification.
Pre-Employment:
All employment offers are contingent upon successful completion of both a pre-employment physical exam, including a drug/alcohol test, and a criminal background investigation, which involves fingerprinting. (A felony or misdemeanor conviction may disqualify the applicant from County employment).
Probationary Period:
As an Approved Local Merit System, the County of Riverside requires all new regular or seasonal employees to serve an initial probationary period, the duration of which is indicated in the applicable Memorandum of Understanding, County Resolution, or Salary Ordinance. Temporary and Per Diem employees serve at the pleasure of the agency/department head.