Go Back

NASSAU COUNTYTitle:FORENSIC SCIENTIST III (COMPUTER EVIDENCE)
Code:630352 2RM
CLASS SPECIFICATIONPage:1 of 2

GENERAL STATEMENT OF DUTIES
This is the third level in the Forensic Scientist (Computer Evidence) series. The work involves responsibility for conducting forensic examinations of computers and computer media for the presence of evidence relating to criminal activity. This position differs from Forensic Scientist II (Computer Evidence) by virtue of the incumbents' ability to handle complex examinations and cases, and increased independence. All work performed by incumbents in this class is performed under direct supervision from higher level employees in this series. General supervision is received from the Director of Laboratories; performs related work as required.

TYPICAL DUTIES
1.Prepares complex duplicate back-up copies of computer media.
2.Recovers complex deleted computer files, password protected/encrypted files and hidden information.
3.Conducts complex searches of computer media for text, data and images.
4.Prepares and/or converts complex recovered files and information into format compatible with current needs.
5.Evaluates results to determine their validity and to determine whether the information has forensic significance.
6.Meets with attorneys, investigators and other related personnel regarding approaches to analysis and results in pretrial conferences.
7.Participates in public health preparedness activities, scientific meetings, seminars, and other training as assigned.
8.Interprets test results, keeps records of observations and notes, and issues reports of test results.
9.
Testifies in court regarding computer analyses and the significance of the results as required.
10.
Performs housekeeping tasks as required, including maintaining related supplies and reference materials.
11.Assists in conducting research, method development, and validation of new technical procedures.
12.
Participates in internal and external proficiency testing programs.
13.May review case files, reports and findings of Forensic Scientists I or II (Computer Evidence) for accuracy and completeness.
14.May train or oversee training for subordinate laboratory personnel.
15.May administer internal proficiency testing, evaluate results and recommend training to improve the quality of laboratory staff.
16.May investigate technical problems and propose remedial action.
17.
May maintain and update quality manual.

*ADA ESSENTIAL FUNCTIONS
- over -

Title:FORENSIC SCIENTIST III (COMPUTER EVIDENCE)
Code:630352 2RM
Page:2 of 2

FULL PERFORMANCE KNOWLEDGES, SKILLS, AND ABILITIES
1.Thorough knowledge of PC hardware.
2.Thorough knowledge of the internal functioning of, as well as how to operate, various operating systems, including (but not limited to ) MS-DOS, Windows 95/98, Windows NT/2000, Windows XP, and Unix/Linux.
3.Thorough knowledge of computer hardware and components.
4.Thorough knowledge of networking and internet application software.
5.Ability to analyze and evaluate information and observations, and to arrive at and construct logical and sound conclusions.
6.Skill in the use of equipment related to computer evidence analysis.
7.Ability to apply computer evidence analysis procedures, methodology, and formulas to assigned work.
8.Ability to explain analysis techniques, procedures and theories in a clear and concise manner so that non-scientists may understand the significance of the results obtained using these procedures.
9.Ability to manage data base records and maintain accurate records.
10.Ability to communicate effectively, both orally and in writing.
11.Ability to prepare and deliver legal testimony accurately and be cross-examined and remain composed in court.
12.Ability to establish and maintain effective professional relationships.
13.Good judgment.

MINIMUM QUALIFICATIONS
Training and Experience
Graduation from a New York State or regionally accredited college or university with a Bachelor's Degree or higher in a computer science or computer engineering field, and three (3) years of experience performing computer evidence analysis.
NOTE:Incumbents may be required to pass a competency test prior to assuming casework responsibility, and may be required to pass a proficiency test annually, in accordance with accreditation requirements.

Additional continuing education and training may be required as condition of employment.


8/13/09
579/09

Go Back