FT Digital Forensic Analyst (02-2023)

GUELPH POLICE SERVICE

jobsincanada.one

POSITION DESCRIPTION

POSITION TITLE: Digital Forensic Analyst

IMMEDIATE SUPERVISOR: Sergeant, Forensic Identification Unit

POSITION SUMMARY:

The Digital Forensic Analyst will work within the Investigative Services team and is accountable for conducting forensic analysis on electronic devices to collect digital evidence that will assist in police investigations, which includes completing the documentation required for any prosecutions, formal inquiries, and Coroner’s inquests. Assist in the maintenance of the necessary equipment and provide recommendations regarding hardware and software tools that will improve the function of the unit.

MAJOR RESPONSIBILITIES:

Examine, collect, and analyze digital evidence for the purpose of police investigations:

  • Provide technical assistance to members investigating crimes where technology may be related to the crime
  • Conduct forensic analysis and authentication of data on seized computer systems, computer related devices, cellular phones, mobile device, and any other portable devices which store data
  • Assist Police Investigators at crime scenes and with the execution of warrants by safely shutting down and seizing computers, components, data storage devices and other electronic storage media, including systems in a network configuration
  • Use specifically designed forensic tools to locate, acquire, document, analyze, preserve, and present data from seized computer systems
  • Remove, identify, and replace computer hardware components from seized devices to facilitate forensic analysis and evidentiary continuity
  • Continuously communicating with investigators regarding the results of the forensic analysis and prepare and submit complete and accurate reports that detail procedures, actions, and continuity
  • Testify in court as a subject matter expert and educate the Trier of Facts (judge/jury)
  • Demonstrate proficiency and maintain continuing education activities, to ensure ongoing qualification as an expert witness
  • Assist the Crown Attorney’s Office with information needed for the prosecution of computer related crimes
  • Maintain detailed records of findings and processes and record accurate notes for court purposes
  • Ensure security, integrity, and continuity of evidence for court purposes
  • Attend training, workshops and seminars as required
  • Performs other duties as required

Work in conjunction with Information System Services to support and maintain the TCU/ICE specific technologies in a complex and secure environment (i.e. isolated private networks, property/inventory database, encryption of critical data and network hardening, etc.):

  • Monitor network and storage capacity and utilization to ensure daily operations are not affected
  • Coordinate with Information System Services in relation to software and hardware upgrades, installation, service, and storage technologies
  • Maintain a working knowledge of TCU/ICE network, server and storage administration
  • Research and recommend hardware and software tools to improve the function of the unit
  • Keep current with respect to trends and developments regarding computer technologies, software, equipment, forensic techniques, and changes in legislation
  • Work with Information System Services to manage appropriate vendor relationships, as relates to the Unit and to resolve network, server, and storage related issues
  • Provide input into the preparation of the operating and capital budgets for the Technological Crimes Unit and assist with presenting the proposed budget to the Inspector of Investigative Services

Develop and conduct training on best practices and processes related to digital evidence gathering:

  • Identify gaps in service relating to digital evidence gathering and generate appropriate training strategy and programs to mitigate risks and challenges
  • Provide guidance to senior leadership, other personnel, investigators, and Crown Attorneys
  • Assist Investigators with educating community members

Other:

Responsible for any other duties as assigned.

JOB COMPETENCIES:

Ø Job Knowledge

Ø Problem Solving

Ø Computer/Technical Skills

Ø Customer Service (Internal & External)

Ø Communication (Oral & Written)

Ø Organizational Skills

QUALIFICATIONS:

  • University Degree or college Diploma with specialty in computer forensics, computer sciences, or other computer related program
  • Minimum 2-years of previous experience in the information technology field, including experience with data recovery, cellular communications, and mobile devices
  • The successful candidate must meet the eligibility requirements at all times to be designated as a Special Constable for the purpose of this position
  • Must have advanced computer skills including the ability to work with computer hardware and understand how operating systems interact with the equipment and the user
  • Experience with security testing and computer system diagnostics is required
  • Knowledge and experience in security threats, vulnerabilities, malicious codes, IP threats, cell phone threats, network threats, GPS and cellular tower sites
  • CompTIA A+ certification is required
  • Demonstrated awareness of current and emerging technologies in relation to the systematic examination of cellular phone handset and all attached media such as SIM and memory storage cards
  • Understanding of electronic systems and components and experience in the practice of disassembling, trouble shooting, basic diagnostics and reassembling cellular/electronic devices and computers without causing harm to the software and files
  • Advanced level proficiency with Office 365, Adobe Acrobat Professional, etc. to generate reports
  • Advanced level of proficiency with software used to create virtual environments for testing and analysis
  • Understanding of computer programming languages and/or scripts (Python programming language preferred) is an asset
  • Strong understanding of database design, implementation, performance tuning, debugging, optimization, monitoring and replication required
  • Understanding of programming languages (i.e. C/C++, Visual Basic.net, PEARL, PHP, Python, Java and Javascript, XML, HTML, etc.) is an asset
  • Valid Ontario driver’s licence
  • Interpersonal and effective written and oral communication skills with multiple levels and sources for listening and comprehension
  • Well-developed time management, prioritization, multi-tasking and organizational skills
  • Proven ability to interact diplomatically, tactfully, and confidentially with all levels of the Service and the public
  • Proven ability to maintain composure with different dynamics of situations
  • Must be self-driven and motivated and be able to work under minimal supervision
  • Must possess creative and innovative analytical skills
  • Ability to interact and transfer information to other members of the team
  • Exercises judgment to modify existing techniques and analytical methods as required for newly-identified problems relating to digital evidence. Builds on experience and existing precedents, and a combination of researching solutions and original thinking to enhance and clarify evidence

WORKING ENVIRONMENT:

  • Climate controlled office
  • Extensive sitting and high level of mental concentration required to observe details of evidence
  • Some moderate lifting may be required
  • Hours of work vary and may require some extended shifts to meet multiple and urgent deadlines
  • Occasional exposure to disturbing visual and auditory recordings and images

If you’re interested in this position, please apply online by Thursday, January 19, 2023 at 4pm.

We thank you for your application however, only those selected for an interview will be contacted.

If you require accommodation to participate fully and equally during the recruitment and selection process for a civilian position, please contact our HR Advisor.

Job Type: Full-time

Salary: $70,000.00-$77,000.00 per year

Schedule:

  • Day shift
  • Monday to Friday

Ability to commute/relocate:

  • Guelph, ON: reliably commute or plan to relocate before starting work (required)

Work Location: One location

Application deadline: 2023-01-19

Apply Now
To help us track our recruitment effort, please indicate in your cover/motivation letter where (jobsincanada.one) you saw this job posting.

Leave a Reply