Computer Forensic Examiner

Join the 2,800 professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.

Job Summary

The Senior Digital Forensics Examiner (SDFE) assumes an advanced technical role within the MNIT Digital Forensics Laboratory (MDFL) to provide the State of Minnesota with digital forensics services based on established Enterprise policies, programs, laws, and regulations.

The SDFE conducts digital forensics investigations for internal investigations and security investigations. The SDFE is responsible for scoping, data acquisition, processing, advanced analysis, and reporting on the most complex and sensitive cases handled by the MNIT Digital Forensics Laboratory. This position may assist other government entities with investigations as well as consult with them on digital forensics and investigative matters. This position uses tools and investigative techniques to assess, acquire, analyze, document, and report on digital forensic artifacts, system-level details, metadata, and other investigative material associated with internal and security investigations. The incumbent conducts laboratory maintenance, develops laboratory procedures and processes, and performs research and testing on new technologies. The SDFE plays an integral role in mentoring and assisting other staff within the MNIT Digital Forensics Laboratory (MDFL).

You will be part of an forensics team that engages in a wide variety of important work. You will play a key role within the MNIT Digital Forensics Laboratory (MDFL) and assist with improving services, automation, implementing new technologies, developing documentation, and building key relationships with customers while continuing to expand your digital forensics and investigative knowledge.

This position requires onsite work at the MNIT Digital Forensics Laboratory (MDFL) located in St. Paul, MN; remote work may be available in accordance with State policy and laboratory operational needs.

This position requires an employee to be onsite at 600 Cedar Street, St. Paul, Minnesota at least 50% of the time, with some opportunity to perform work from a telework location. Telework for Minnesota IT Services is available on a limited basis. Employees will be required to meet current telework eligibility requirements.

Qualifications

To qualify, candidates must clearly show all of the following qualifications in their resume. Resume tips available here:

Position requires a minimum of five (5) years of IT related experience in in digital forensics, role that includes experience supporting investigative work (e.g., internal, corporate, or criminal investigations).

Experience must include:

• Knowledge of digital forensics methodologies, industry standards, and best practices.
• Experience performing live system forensics, dead-box forensics, mobile forensics, and/or network forensics and conducting investigations, including scoping, data acquisition, data processing, forensic analysis, and reporting.
• Working knowledge and experience with computer hardware and the ability to work with a wide variety of hardware types, including desktops, laptops, tablets, smartphones, and Internet-of-Things (IoT) devices.
• Knowledge of general IT concepts and technologies such as databases, networking, scripting, system administration, application and system design, backup technologies, email systems, cloud services, and IoT devices.
• Experience with multiple operating systems (e.g., Windows, Linux, macOS) and multiple file systems (e.g., NTFS, EXT3/4, HFS, Android) as they relate to forensic investigations.
• Demonstrated ability to communicate clearly and effectively in a manner that facilitates mutual understanding.
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Education in Information Technology (IT) or an IT related field may substitute for experience as follows: a master’s degree for eighteen (18) months of experience; a bachelor’s degree for one (1) year; and an associate’s degree for six (6) months.

Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.