What are the responsibilities and job description for the Computer Forensic Analyst position at New York State Police?
Duties Description
State Police Computer Forensic Analysts are non-competitive, technical positions performing a full range of complex analyses of various types of electronic and digital evidence received at the New York State Police Computer Forensic Laboratory in Albany, New York. These positions are only offered in the Division of State Police.
State Police Computer Forensic Analysts must be willing to participate in a Psychological Wellness Program which includes a baseline psychological evaluation, which may include Diagnostic Assessment of Post-Traumatic Stress Disorder, a clinical interview and periodic evaluations with a psychologist, to determine suitability for being exposed to images and videos of child exploitation.
DUTIES
Computer Forensic Analyst 1, SG-14
Abide by and follow all procedures relating to the proper handling and chain-of-custody of evidence in the Computer Forensic Laboratory.
Use computer forensic software to forensically copy data found on electronic devices so that the integrity of original evidence is preserved and the copy can be used for forensic analysis.
Verify the integrity of the forensic copies to be used for analysis per State Police and National Institute of Standards for Technology standards. Use computer forensic and information technology utilities to verify the integrity of data to ensure that no data is lost or modified during the acquisition or copying process.
Conduct physical examinations of computer and other electronic computing devices by inspecting the hardware peripherals in devices submitted to the laboratory as evidence. Inspection will encompass device functionality, including date and time verification of computer or device. Document the physical condition of evidence, computers and devices by means of digital photography and completion of appropriate examiner reports.
Disassemble and reassemble various types of electronic or communication devices including but not limited to personal computers, laptops, and cellular phones during the examination process.
Test and validate computer hardware, software, and forensic analytical tools using established laboratory procedures and National Institute of Standards for Technology guidelines. Testing and validation is conducted to verify the integrity of computer forensic software and data acquisition methods, and to ensure tools do not report high rate of errors.
Prepare and submit to superiors required documentation that catalogues and describes acquired data for admittance into evidence in court proceedings. Reports shall be prepared and submitted by all analysts after performing laboratory processes such as acquisition, secure erase, and drive restoration.
Perform computer hardware, software, network, and Internet related research to troubleshoot and maintain computer forensic laboratory equipment and network.
Review current scientific literature and attend seminars, courses, or professional meetings to stay abreast of developments within the field of Computer Forensic and Digital Evidence.
Assist with the review of evidentiary data by conducting preliminary research on evidence as directed by Computer Forensic Laboratory management.
Conduct data extractions from electronic devices including mobile phones for evidence preservation.
Perform other laboratory forensic processes using State Police procedures and industry standards and techniques, such as Secure Erase pursuant to judicial requests or operational requirements.
Review and preparation of evidentiary material pursuant to Rosario and Discovery court motions. May include the copying of multimedia digital data into media to be released to court recognized experts for the purpose of validation, court presentations and possible legal challenges.
Testify in court proceedings regarding data acquisition, extractions, and evidence handling.
Computer Forensic Analyst 2, SG-18
Will be proficient in and complete all the duties of a State Police Computer Forensic Analyst 1.
Examine computers, mobile devices, and other electronic storage devices submitted as evidence using non-intrusive forensic tools and methods to extract data for analysis.
Analyze data found in electronic devices by using digital forensic utilities and State Police laboratory analytical techniques to parse, locate and extract case relevant data with evidentiary value pursuant to investigative details and search warrant parameters.
Testify in court proceedings regarding casework involving laboratory processes such as acquisition and analysis.
Using State Police report writing standards, prepare comprehensive analysis reports to be used in the course of investigations, and to be entered into evidence during court proceedings.
Computer Forensic Analyst 3, SG-20
Will be proficient in and complete all the duties of a State Police Computer Forensic Analyst 2.
Review the examinations and analysis completed by other State Police Computer Forensic Analysts and Investigators according to technical peer review guidelines to ensure that quality assurance standards are being met.
Review the examinations and analysis completed by other State Police Computer Forensic Analysts and Investigators, that have been deemed to contain nothing of evidentiary value, to ensure appropriate forensic steps have been followed.
Provide technical assistance to State Police Investigators during the extraction of multimedia digital evidence from crimes scenes, computer networks and other technical forensic processes in the field.
Recommend changes in operating procedures, equipment, and personnel based on results of technical peer review.
Testify in court proceedings regarding casework involving advanced laboratory processes, such as data acquisitions, advanced data recovery and analysis.
Assist the Laboratory Supervisor in the implementation of hardware, software, as well as modifications to the laboratory equipment and network.
Minimum Qualifications
Computer Forensic Analyst 1, SG-14
Bachelor of Science degree in Computer Forensics, Computer Science, or related field.
OR
Four (4) years of work-related experience in the field of Computer Forensics.
Preference Will Be Given To Those Candidates Who:
Have completed or received verifiable training with digital forensic tools such as EnCase, Access Data FTK, Cellebrite, Axiom, or other industry recognized digital forensic tools.
Computer Forensic Analyst 2, SG-18
Bachelor’s Degree or higher in Digital Forensics (or similar field of study) and one (1) year of relevant digital forensics experience,
OR
Bachelor’s Degree AND a Master’s Degree in Digital Forensics (or similar field of study),
OR
Five (5) years of experience in the field of digital forensics.
Preference Will Be Given To Those Candidates Who:
Possess digital forensic certifications such as EnCE, CFCE, ICMDE, CCME or similar certification from industry recognized digital forensic tools. Certification may be substituted with a minimum of 64 hours of digital forensic training or completion of verifiable training with digital forensic tools such as EnCase, Access Data FTK, Cellebrite or industry recognized digital forensic tools.
Computer Forensic Analyst 3, SG-20
Bachelor’s Degree or higher in Digital Forensics (or similar field of study) and three (3) years of relevant digital forensics experience,
OR
Bachelor’s Degree AND a Master’s Degree in Digital Forensics (or similar field of study) and two (2) years of relevant digital forensics experience,
OR
Six (6) years of experience in the field of digital forensics.
Preference Will Be Given To Those Candidates Who:
Have gained experience in testimony as an expert witness and have established his/her credentials as an expert in various courts of record.
Minimum qualifications must be met by the time of appointment.
Starting Salaries:
Additional Comments
Computer Forensic Analyst 1, SG-14 - $53,764.00.
Computer Forensic Analyst 2, SG-18 - $66,951.00.
Computer Forensic Analyst 3, SG-20 - $74,193.00.
Resumes will be evaluated to determine whether candidates will proceed to the interview phase of the process.
The New York State Police values a diverse and inclusive workforce where the unique skills of all employees are valued in support of the mission of the Division. Qualified candidates are considered for employment without the regard to age, race, color, religion, gender identity and expression, disability, national origin, gender, sexual orientation, military or veteran status or any other characteristic protected by law. The New York State Police is an equal opportunity/affirmative action employer that accept all applications from a wide range of candidates.
The New York State Police complies with federal and state laws and makes reasonable accommodations for qualified individuals with the disabilities and/or sincerely held religious belief. If a reasonable accommodation is needed to participate in the job application or interview process, please contact the Division Personnel Office at (518) 457-3840 or personnel@troopers.ny.gov.
State Police Computer Forensic Analysts are non-competitive, technical positions performing a full range of complex analyses of various types of electronic and digital evidence received at the New York State Police Computer Forensic Laboratory in Albany, New York. These positions are only offered in the Division of State Police.
State Police Computer Forensic Analysts must be willing to participate in a Psychological Wellness Program which includes a baseline psychological evaluation, which may include Diagnostic Assessment of Post-Traumatic Stress Disorder, a clinical interview and periodic evaluations with a psychologist, to determine suitability for being exposed to images and videos of child exploitation.
DUTIES
Computer Forensic Analyst 1, SG-14
Abide by and follow all procedures relating to the proper handling and chain-of-custody of evidence in the Computer Forensic Laboratory.
Use computer forensic software to forensically copy data found on electronic devices so that the integrity of original evidence is preserved and the copy can be used for forensic analysis.
Verify the integrity of the forensic copies to be used for analysis per State Police and National Institute of Standards for Technology standards. Use computer forensic and information technology utilities to verify the integrity of data to ensure that no data is lost or modified during the acquisition or copying process.
Conduct physical examinations of computer and other electronic computing devices by inspecting the hardware peripherals in devices submitted to the laboratory as evidence. Inspection will encompass device functionality, including date and time verification of computer or device. Document the physical condition of evidence, computers and devices by means of digital photography and completion of appropriate examiner reports.
Disassemble and reassemble various types of electronic or communication devices including but not limited to personal computers, laptops, and cellular phones during the examination process.
Test and validate computer hardware, software, and forensic analytical tools using established laboratory procedures and National Institute of Standards for Technology guidelines. Testing and validation is conducted to verify the integrity of computer forensic software and data acquisition methods, and to ensure tools do not report high rate of errors.
Prepare and submit to superiors required documentation that catalogues and describes acquired data for admittance into evidence in court proceedings. Reports shall be prepared and submitted by all analysts after performing laboratory processes such as acquisition, secure erase, and drive restoration.
Perform computer hardware, software, network, and Internet related research to troubleshoot and maintain computer forensic laboratory equipment and network.
Review current scientific literature and attend seminars, courses, or professional meetings to stay abreast of developments within the field of Computer Forensic and Digital Evidence.
Assist with the review of evidentiary data by conducting preliminary research on evidence as directed by Computer Forensic Laboratory management.
Conduct data extractions from electronic devices including mobile phones for evidence preservation.
Perform other laboratory forensic processes using State Police procedures and industry standards and techniques, such as Secure Erase pursuant to judicial requests or operational requirements.
Review and preparation of evidentiary material pursuant to Rosario and Discovery court motions. May include the copying of multimedia digital data into media to be released to court recognized experts for the purpose of validation, court presentations and possible legal challenges.
Testify in court proceedings regarding data acquisition, extractions, and evidence handling.
Computer Forensic Analyst 2, SG-18
Will be proficient in and complete all the duties of a State Police Computer Forensic Analyst 1.
Examine computers, mobile devices, and other electronic storage devices submitted as evidence using non-intrusive forensic tools and methods to extract data for analysis.
Analyze data found in electronic devices by using digital forensic utilities and State Police laboratory analytical techniques to parse, locate and extract case relevant data with evidentiary value pursuant to investigative details and search warrant parameters.
Testify in court proceedings regarding casework involving laboratory processes such as acquisition and analysis.
Using State Police report writing standards, prepare comprehensive analysis reports to be used in the course of investigations, and to be entered into evidence during court proceedings.
Computer Forensic Analyst 3, SG-20
Will be proficient in and complete all the duties of a State Police Computer Forensic Analyst 2.
Review the examinations and analysis completed by other State Police Computer Forensic Analysts and Investigators according to technical peer review guidelines to ensure that quality assurance standards are being met.
Review the examinations and analysis completed by other State Police Computer Forensic Analysts and Investigators, that have been deemed to contain nothing of evidentiary value, to ensure appropriate forensic steps have been followed.
Provide technical assistance to State Police Investigators during the extraction of multimedia digital evidence from crimes scenes, computer networks and other technical forensic processes in the field.
Recommend changes in operating procedures, equipment, and personnel based on results of technical peer review.
Testify in court proceedings regarding casework involving advanced laboratory processes, such as data acquisitions, advanced data recovery and analysis.
Assist the Laboratory Supervisor in the implementation of hardware, software, as well as modifications to the laboratory equipment and network.
Minimum Qualifications
Computer Forensic Analyst 1, SG-14
Bachelor of Science degree in Computer Forensics, Computer Science, or related field.
OR
Four (4) years of work-related experience in the field of Computer Forensics.
Preference Will Be Given To Those Candidates Who:
Have completed or received verifiable training with digital forensic tools such as EnCase, Access Data FTK, Cellebrite, Axiom, or other industry recognized digital forensic tools.
Computer Forensic Analyst 2, SG-18
Bachelor’s Degree or higher in Digital Forensics (or similar field of study) and one (1) year of relevant digital forensics experience,
OR
Bachelor’s Degree AND a Master’s Degree in Digital Forensics (or similar field of study),
OR
Five (5) years of experience in the field of digital forensics.
Preference Will Be Given To Those Candidates Who:
Possess digital forensic certifications such as EnCE, CFCE, ICMDE, CCME or similar certification from industry recognized digital forensic tools. Certification may be substituted with a minimum of 64 hours of digital forensic training or completion of verifiable training with digital forensic tools such as EnCase, Access Data FTK, Cellebrite or industry recognized digital forensic tools.
Computer Forensic Analyst 3, SG-20
Bachelor’s Degree or higher in Digital Forensics (or similar field of study) and three (3) years of relevant digital forensics experience,
OR
Bachelor’s Degree AND a Master’s Degree in Digital Forensics (or similar field of study) and two (2) years of relevant digital forensics experience,
OR
Six (6) years of experience in the field of digital forensics.
Preference Will Be Given To Those Candidates Who:
Have gained experience in testimony as an expert witness and have established his/her credentials as an expert in various courts of record.
Minimum qualifications must be met by the time of appointment.
Starting Salaries:
Additional Comments
Computer Forensic Analyst 1, SG-14 - $53,764.00.
Computer Forensic Analyst 2, SG-18 - $66,951.00.
Computer Forensic Analyst 3, SG-20 - $74,193.00.
Resumes will be evaluated to determine whether candidates will proceed to the interview phase of the process.
The New York State Police values a diverse and inclusive workforce where the unique skills of all employees are valued in support of the mission of the Division. Qualified candidates are considered for employment without the regard to age, race, color, religion, gender identity and expression, disability, national origin, gender, sexual orientation, military or veteran status or any other characteristic protected by law. The New York State Police is an equal opportunity/affirmative action employer that accept all applications from a wide range of candidates.
The New York State Police complies with federal and state laws and makes reasonable accommodations for qualified individuals with the disabilities and/or sincerely held religious belief. If a reasonable accommodation is needed to participate in the job application or interview process, please contact the Division Personnel Office at (518) 457-3840 or personnel@troopers.ny.gov.
Salary : $18,000 - $66,951