Job Descriptions

DEFINITION

Under the direct supervision of a Turlock Police Sergeant, the Investigations Unit Analyst investigates and analyzes digital evidence by performing hardware, software and virtual analysis of digital evidence in the office and in the field on sensitive, complex, criminal and civil investigations for the Turlock Police Department. This position processes and analyzes digital evidence including the disassembly of computer hardware; forensic imaging of digital media; examination of data related to criminal offenses; recovery of data from cellular telephones; and performs related duties as required. The Investigations Unit Analyst will prepare comprehensive examination reports for the analysis of digital media and will testify in court as a forensic expert. Incumbents in this classification must be able to work effectively in an environment in which they may encounter sensitive/confidential information and data that contains sexually explicit or disturbing content, including child pornography.

Additionally, the Investigations Unit Analyst will, at the direction of their supervisor, be responsible for general investigation support work including: assisting with the investigation of missing persons, crime scene response, evidence collection, and documentation, and other case follow up. Examples of crime scenes this position may respond to include homicides, sex crimes, aggravated assaults, robberies, burglaries, frauds, and narcotic investigations.

This position is assigned to the Turlock Associated Police Officers bargaining unit for Labor Relation’s purposes and is subject to overtime assignments, callback, evening and weekend assignments.

SUPERVISION RECEIVED AND EXERCISED

Supervision is provided by designated Sergeant or other designee at the direction of the Police Chief.

DISTINGUISHING CHARACTERISTICS

Investigations Unit Analyst responsibilities include handling assignments with tact and confidentiality. A considerable amount of job assignments will be technical in nature and it is imperative that there is an aptitude in understanding technology. With technology constantly evolving, the incumbent will be tasked with staying abreast of changes in applicable fields. Training will be provided to assist in this endeavor.

ESSENTIAL FUNCTIONS - Duties may include, but are not limited to:

• May be assigned to assist Investigators with complex crimes involving digital media under the jurisdiction of the Turlock Police Department;
• Incorporate computer forensic methods for searching seized computers in accordance with the rules of evidence and laws of search and seizure;
• Perform specialized assignments in the collection, preservation, analysis of evidence and does other related work as required;
• Examine, disassemble, reassemble, evaluate, extract data, and interpret extracted data from computer hardware, smart phones, data storage devices, media storage devices, compact discs, digital video disc (DVDs), floppy discs and detached or attached hard drives;
• Collect evidence, transfer data from evidentiary items to other forms of media for presentation in court and for long term storage as evidence;
• Prepare written reports on the analysis completed and verbally communicate significant findings to the assigned Turlock Police Staff responsible for the specific investigation;
• Testify in State and Federal courts on evidence related issues as an expert witness;
• Foster professionalism, collegiality, teamwork and information sharing with fellow examiners;
• Communicate and work effectively with City and department staff, contract partners, State and Federal agencies, local, public and private agencies, and Command staff;
• Complete and analyze data from various sources;
• Research and analysis of various issues;
• Analyze, interpret, and stay abreast of current legislation and case law as it applies to the position;
• Maintain accurate records;
• Maintain confidential information according to the legal standards and/or city regulations as required.

MINIMUM QUALIFICATIONS

Knowledge of:

• Principles and practices of digital media processing sufficient enough to conduct computer forensic examinations;
• Microsoft Suite;
• Computer system hardware and software installation and troubleshooting;
• Ability to operate various computer forensics software/equipment;
• Knowledge of evidence collection and chain-of-custody procedures.

• The principles and practices of electronic data storage, data encryption and computer security systems;

Ability to:

• Establish and maintain positive working relationships with the public and fellow workers;
• Understand and carry out written and verbal instructions;
• Effectively function under multiple deadlines;

• Interpret, and apply City and department polices, procedures, rules, and regulations;
• Present complex information in a clear and understandable manner;

• Write legible, clear, accurate reports;

• Testify in court;

• Communicate effectively, both orally and in writing;

• Operate office equipment including computers and supporting work processing, spreadsheet, and database applications.

EDUCATION AND EXPERIENCE

Any combination of experience and education that would likely provide the required knowledge and abilities is qualifying. A typical way to obtain the knowledge and abilities would be:

Education:

Possession of an Associate’s Degree from an accredited college, with major course work in in computer science, information technology, criminal justice, or a related field.

and

Experience:

Two years of experience involving conducting forensic computer examinations or cellular phone data extractions for a public or private agency or experience working for a law enforcement agency in an investigative capacity, with an emphasis in a high-tech or cybercrimes capacity.

Additional qualifying experience may be substituted for the required education on a year-for year basis.

OR

Education:

Possession of a High School Diploma or GED.

and

Experience:

Six years of experience involving conducting forensic computer examinations or cellular phone data extractions for a public or private agency or experience working for a law enforcement agency in an investigative capacity, with an emphasis in a high-tech or cybercrimes capacity.

LICENSE AND CERTIFICATES

Possession of an appropriate, valid California driver’s license at the time of appointment, to be maintained as a condition of continued employment.

PHYSICAL REQUIREMENTS

Maintain the required physical abilities: See well enough to drive a vehicle; hear and speak well enough to converse on the telephone and in person; communicate clearly without amplification; bodily mobility to move from one area to another sometimes over rough terrain; climb stairs or ladders; use of hands and fingers to write; operate a computer keyboard and handle plans and documents; stamina to work long hours and work evening hours.