Computer Forensics Investigator

Sherburne County Sheriff

Job Summary

The Computer Forensics Investigator has the responsibility of investigating routine and complex crimes in which computers or electronics media are used as the primary means or as an aid in the commission of a crime.

Essential Duties and Responsibilities

The following duties are normal for this position.   These duties are not to be construed as exclusive or all-inclusive.  Other duties may be required and assigned.
Conducts examinations of computers and media generated by computers to develop evidence as an expert in the specialty area of forensic computer science.

Uses experience and knowledge of a wide variety of advanced computer technologies and theories to conduct analysis of submitted evidence.

Receives, inventories, and signs for physical evidence submitted for examination.

In data recovery cases, determines the most appropriate method of protecting original evidence and recovering deleted, erased, hidden and encrypted data.

When necessary, identifies and recommends methods and procedures for preservation, evidence recovery, and presentation of computer evidence.

Assists other officers in legal preparation of search warrants, subpoenas, etc. to properly obtain all relevant electronic media as evidence.

Writes reports of investigative services required.   Reports covering field as well as lab activities.

Testifies in criminal or civil court and/or provides deposition required on results of seizures and handling of evidence and results of analyses conducted.

Develops and presents training to law enforcement officers in the recognition, collection, preservation, and evaluation of computer evidence.

Monitors and maintains agency issued equipment and inventory of   investigative supplies.

Required to be able to respond to search warrants/consent to searches.

Subject to call out as needed.

Perform other duties as directed.

Develop and maintain respectful and cooperative working relationships.

Regular and reliable attendance according to the department’s work schedule.

Knowledge, Skills and Abilities Required

Extensive knowledge of data retrieval procedures and forensic practices.  

Ability to evaluate and maintain hardware and software necessary for the performance of computer related investigations.
Knowledge of evidentiary procedures, electronic criminal situations, fraud analysis and forensics fundamentals.

Knowledge of specialized research, intelligence, collection, and dissemination techniques related to forensic investigation.
Ability to identify and develop evidence, prepare concise and effective verbal and written reports and testimony.

Ability to translate technical computer analytics to quantifiable evidence for court hearings.
Ability to collaborate with electronic forensics counterparts and law enforcement personnel/agencies to build cases.  

Strong written and verbal communication skills.

Minimum Qualifications

An individual must meet the minimum qualifications as stated below to qualify for this position.
Education/experience substantially equivalent to a four-year college degree in Computer Forensics/Digital Investigations, Computer Science, Computer Engineering or related field and 3 years work experience with computer hardware and software. 
Preferred Qualifications include Certified Computer Forensic Technician or Certified Forensic Computer Examiner. Experience/certification with computer forensic software such as: Cellebrite Certified Mobile Examiner (CCME), Access Data Certified Examiner (ACE), Magnet Certified Forensics Examiner (MCFE), Oxygen Forensic Certified Examiner (OFCE) and EnCase Certified Examiner (EnCE). 
Must have a valid Minnesota driver’s license.

To apply for this job please visit