POSITION SUMMARY: Under general supervision, provides computer forensic and intrusion support to high technology investigations in the form of computer evidence seizure, computer forensic analysis, data recovery and network assessments. RESPONSIBILITIES: Assists in forensic examinations of computers and media from a variety of sources with the goal of developing forensically sound evidence. Applies industry accepted principles in retrieving, recovering, and preserving digital evidence. Utilizes industry accepted forensic tools such as EnCase, and FTK. Uses experience and knowledge of a wide variety of advanced computer technologies, encryption schemes, and forensic theories to conduct analysis of submitted evidence. Collaborates with other forensic analysts, law enforcement officers, and legal experts to identify and recommend methods and procedures for recovery, preservation, and presentation of computer evidence. Prepares clear and comprehensive notes and reports of findings. Testifies to those findings in judicial proceedings. Reviews laboratory requests and determines the type of examination needed. Provides assistance in identifying, monitoring, investigating and analyzing network intrusions. Required - Education -“ A+ Certification - Experience -“ at least four years of hands-on experience in computer forensic investigations using EnCase or similar commercial software on Windows Operating System file structure - Clearance -“ TS/SCI - Special skills or qualifications (all required) - Understand and utilize various audio and video editing software as well as understand the popular media formats WMA, WMV, AVI, MPEG, WAV, MP3, and RM including conversion and various CODECs - Be capable of producing analog to digital format conversion to .wav, .mp3, and .wma formats - Be capable of utilizing various programs to convert VHS, VHS-C, Betamax, Beta SP, Beta 3/4, and HI-8 into DVD, VCD, and/or AVI type files into digital format in order to upload to the server - Strong writing skills utilizing MS Office Suite - Able to exploit traditional computer peripherals and mobile devices (including GPS devices) - Briefing skills - Basic networking knowledge Desired - Education -“ Security+ Certification, Network+Certification - Proficient in MS SQL Lite - Proficient in Forensic Scripting EDUCATION & EXPERIENCE: Typically requires a bachelor's degree or equivalent and two to four years of related experience. PHYSICAL DEMANDS: Normal demands associated with an office environment. Ability to work on computer for long periods and communicate with individuals by telephone, email and face to face. Ability to lift up to 50 pounds and sit/stand for extended periods of time. Some travel may be required.