Review Vacancy
AgencyTaxation & Finance, State
TitleComputer Forensic Analyst 2 (TAX)
Occupational CategoryEnforcement or Protective Services
Bargaining UnitPS&T - Professional, Scientific, and Technical (PEF)
Salary RangeFrom $61270 to $77912 Annually
Minimum Qualifications Bachelor of Science Degree in Computer Forensics, Computer Science, or related field AND a minimum of (24) months of satisfactory experience performing the duties of a Computer Forensic Analyst 1 or its equivalent in another computer forensic environment. Preference will be given to those candidates who possess a Computer Forensics certification such as EnCE, CFCE, ACE or similar certification. Certification may be substituted with a minimum of (64) hours of Computer Forensics training or completion of verifiable training with computer forensic tools such as Encase, AccessData FTK, and Cellebrite.
Substitution: (4) years of work-related experience in the field of Computer Forensics may be substituted for the required Bachelor’s Degree. A graduate degree or graduate level courses in Computer Forensics, Computer Science, or related field may be substituted for a portion of the 64 hours of Computer Forensics training, as determined by the credit hours.
Duties Description Under the general direction of the Director or a higher-level Computer Forensic Analyst, the Computer Forensic Analyst 2 performs the following duties
• Examine computers and other electronic storage devices submitted as evidence using non-intrusive forensic tools and methods to extract data for analysis.
• Analyze data found in electronic devices by using computer forensic utilities and Department laboratory analytical techniques to parse, locate and extract case relevant data with evidentiary value pursuant to investigative details and search warrant parameters.
• Testify in court and other adverse proceedings regarding casework involving routine laboratory processes such as acquisition, archival, and analysis
• Using report writing standards, prepare comprehensive analysis reports to be used in the course of investigations, and to be entered into evidence during court proceedings
• Research industry standards and assist Department Investigators in developing Standard Operating Procedures for the various stages of computer forensic processes, such as acquisition, archival, and analysis of data.
• Abide by and follow all procedures relating to the proper handling and chain of custody of evidence in computer forensic laboratories
• Use computer forensic software and robotic tools to forensically copy data found on electronic devices so that the integrity of original evidence is preserved, and the copy can be used for forensic analysis
• Verify the integrity of the forensic copies to be used for analysis according to Department and National Institute of Standards for Technology standards. Use computer forensics and information technology utilities to verify the integrity of data to ensure that no data is lost or modified during the acquisition or copying process.
• Use automated technology to prepare copied data for archiving into digital media, such as compact disks. Archival process will preserve and prevent data loss by providing a stable long-term storage medium.
• Conduct physical examinations of computer and other electronic computer devices by inspecting the hardware peripherals in devices submitted to the laboratory as evidence. Inspection will encompass device functionality, including date and time verification of circuit board of computer or devices. Document the physical condition of evidence computers and devices by means of digital photography and completion of appropriate examiner reports.
• Disassemble and reassemble various types of electronic data or communication devices including but not limited to personal computers, laptops, cellular phones, pagers, and personal digital assistants during the examination process.
• Test and validate computer hardware, software, and forensic analytical tools using established Department laboratory procedures and national Institute of Standards for Technology guidelines. Testing and validation are conducted to verify the integrity of computer forensic software, data acquisition and archival hardware and to ensure tools do not repot high rate of errors.
• Prepare and submit to superiors required documentation that catalogues and describes acquired data for admittance into evidence in court proceedings. Reports shall be prepared and submitted by all analysts after performing laboratory processes such as acquisition, archival and analysis.
• Perform computer hardware, software, network, and internet related research to troubleshoot and maintain computer forensic laboratory equipment and network.
• Review current scientific literature and attend seminars, courses, or professional meetings to stay abreast of developments within the field of Computer Forensics and Multimedia Digital Evidence.
Additional Comments Schedule and telecommuting opportunities to be discussed at interview.
For verification purposes, please include copies of training certificates or certifications as applicable.
Some positions may require additional credentials or a background check to verify your identity.
Email Address tax.sm.TaxRecruitment@tax.ny.gov
Address
Street W.A. Harriman State Office Campus
Notes on ApplyingQualified candidates should submit a letter of interest and resume. Email submissions are preferred. When responding to this posting, please include the Vacancy ID#, CID and job title in the subject line. For verification purposes, please include copies of training certificates or certifications as applicable.