Forensic Computer Examiner II
County of Alameda - Oakland, CA

This job posting is no longer available on County of Alameda. Find similar jobs:Forensic Computer Examiner jobs - County of Alameda jobs


THIS IS A NEW ASSEMBLED EXAMINATION . The eligible list resulting from this examination will cancel any existing list and may last approximately one year, but can be extended.

Applications must be in the possession of the Human Resource Services Department by 5:00 p.m. on the Last Day for Filing. Postmarks are not accepted. Applications will only be accepted on-line.

Supplemental Questionnaire : A properly completed Supplemental Questionnaire must be submitted with each application. Applications and Supplemental Questionnaires must be in the possession of the Human Resource Services Department by 5:00 p.m. on the Last Day for Filing. Postmarks are not accepted. Failure to submit the Supplemental Questionnaire will result in disqualification.



The Alameda County Sheriff's Office is a full-service law enforcement agency accredited through the Commission on Accreditation for Law Enforcement Agencies (CALEA) and the American Correctional Association (ACA). Additionally, the agency's health care provider, Prison Health Services Corizon, has dual accreditation through the National Commission on Correctional Health Care (NCCHC) and the California Medical Association (CMA). Together these form what is referred to as the "Triple Crown" of accreditation (ACA, NCCHC/CMA and CALEA) awarded by the National Sheriff's Association. Additionally, the Sheriff's Office Crime Lab is nationally accredited by the American Society of Crime Laboratory Directors (ASCLD). The Sheriff's Office Explosive Ordinance Disposal Unit has also been awarded national accreditation through the Bomb Squad Commanders Advisory Board.

The Sheriff's Office has a current adjusted net budget of approximately $209 million and has over 1500 authorized positions, including in excess of 1000 sworn personnel. The agency's Chief Executive Officer is Sheriff Gregory J. Ahern, who is assisted in the operation of the agency by Undersheriff Richard T. Lucia, Assistant Sheriff's Brett Keteles and Casey Nice.

The Sheriff of Alameda County is responsible for a vast array of tasks and duties, including the following:

  • Providing security to the Consolidated Superior Courts
  • Operating the Coroner's Bureau
  • Operating a full service criminalistics laboratory
  • Performing Civil Process
  • Operating a two County Jails (Santa Rita and Glenn Dyer)
  • Operating the County Office of Homeland Security and Emergency Services
  • Providing patrol and investigative services to the unincorporated areas of Alameda County
  • Pursuant to contractual agreements, providing patrol and investigative services to the City of Dublin, Peralta
  • Community College District, Oakland-Alameda County Coliseum complex, Oakland International Airport, • Highland County Hospital, Social Services, and to the Alameda-Contra Costa Transit District
  • Conducting a basic academy pursuant to Police Officer Standards and Training (P.O.S.T.) requirements.
  • Providing Fish and Game enforcement
  • Project Director of the Narcotics Task Force
  • Serving as the Executive Director of the Sexual Assault Felony Enforcement (SAFE) Task Force
  • Operating a Marine Patrol Unit in the San Francisco Bay waters.
For additional information, you may visit the Sheriff's Office website at:


Alameda County’s Sheriff’s Office is seeking to fill the position of Forensic Computer Examiner II. To view the complete recruitment brochure, please click here.

Under close supervision at the one level, and under direction at the two level, Forensic Computer Examiners investigate and analyze digital evidence by performing hardware, software and virtual analyses of digital evidence in the criminalistics laboratory and in the field. To process and analyze digital evidence including disassembly of computer hardware; forensic imaging of digital media; examination of data related to criminal offenses; recovery of data from cellular telephones; and perform related duties as required.


The Forensic Computer Examiner is a flexibly staffed classification found only in the Digital & Multimedia Evidence Unit of the Criminalistics Laboratory and will primarily assist with the examination of digital evidence associated with criminal activity. The Forensic Computer Examiner will interpret the results of their findings to law enforcement officers/attorneys, prepare materials for presentation in court, appear as an expert witness, and perform other related duties. At the one level, incumbents primarily handle routine cases and receive a substantial amount of on-the-job training, working closely with senior staff members in a tutorial atmosphere. After a two year probationary period at the one level the incumbent should have gained experience in acquiring, analyzing and reporting on digital evidence. Incumbents will also be required to attain certification as an EnCase Certified Examiner (EnCE) during this two year period in order to qualify for promotion to the Forensic Computer Examiner II. Employment may not be extended beyond two years if the incumbent has not met the requirements to promote to the Forensic Computer Examiner II.


In addition to meeting the minimum qualifications stated below, the ideal candidate will have demonstrated a track record of success in the following areas:

  • Excels in technical knowledge and skill - keeps up with current developments and trends in the field of forensic computer analysis.
  • Approaches change positively - Maintains effectiveness when experiencing major changes in work responsibilities or environment.
  • Learns and assimilates job related information - Applies new job-related information in a timely manner.
  • Identifies issues and develops solutions - Identifies and understands problems and opportunities; takes action that is consistent with available facts, constraints, and consequences.
  • Operates with integrity - Interacts with others in a way that gives them confidence in one’s intentions and those of the organization.
  • Maintains focus under pressure - Exhibits stable performance under stress or opposition.
  • Maintains an exceptional level of quality - Accomplishing tasks by considering all areas involved, accurately checks processes and tasks.
  • Communicates effectively - Clearly conveys information and ideas.

NOTE: The following are the duties performed by employees in this classification. However, employees may perform other related duties at an equivalent level. Each individual in the classification does not necessarily perform all duties listed.

1. Creates forensic images of original digital evidence in a variety of formats using a number of validated imaging programs such as: EnCase, FTK Imager, Raptor, Helix, Linen, MacQuisition, etc.

2. Performs forensic examinations of digital media using the most current versions of a number of validated forensic software programs such as: EnCase, FTK, Subrosa Soft, Blackbag Technologies, Helix, and others.

3. Performs forensic video analysis, examination, repair, comparison and/or evaluation.

4. Uses specialized software programs such as: AccessData Password Recovery, AccessData Registry Viewer, DNA, Liveview, VMWare, and others.

5. Maintains chain of custody and documents entire analysis using approved methods and forms.

6. Prepares clear and complete reports detailing the entire digital evidence examination.

7. Prepares materials for presentation in a court of law and testifies as an expert witness.

8. Maintains records of repairs, maintenance, preventative maintenance, upgrades, and modifications to equipment.

9. Uses validated software and hardware write blocking devices to preserve digital evidence integrity.

10. Extracts digital information from cellular telephones using a variety of approved methods and tools such as: Cellebrite UFED, DataPilot, Device Seizure, Neutrino, BitPim, and others.

11. Maintain logs on all issued equipment and keep issued equipment in working condition and error free from software or hardware conflicts.

12. Attends continuing education classes and maintains any necessary certificates as required by the Sheriff’s Office.


Either I

The equivalent of two years of full-time experience in the class of Forensic Computer Examiner I in the Alameda County classified service (Non-classified includes District Attorney’s Office, Hospital Authority, and the Consolidated Courts.)


Possession of a Bachelor’s degree in computer science, information technology, or a closely related field from an accredited college or university AND

The equivalent of two years of verifiable full time experience conducting forensic computer examinations and cellular phone data extractions for a public or private agency (two additional years of verifiable full time experience may be substituted for the Bachelor’s degree).

Incumbents in this class must possess a valid California Motor Vehicle Operator’s License.

All candidates and incumbents are required to possess and maintain on-going EnCase Certified Examiner (EnCE) certification. Certified Computer Examiner (CCE) and Certified Forensic Computer Examiner (CFCE) certifications are also desirable.

Special Requirements:
Incumbents in this class must be able to work effectively in an environment in which they may encounter sensitive/confidential information and data that contains sexually explicit or disturbing content; including child pornography.

A thorough background investigation will be performed on all prospective appointees.

Incumbents in this class may be required to work day, evening, night and rotating shifts, including weekends and holidays and may be required to respond to crime scenes.

Incumbents must successfully complete annual proficiency testing in the area of computer forensics as required by ASCLD/LAB accreditation standards.

NOTE: The Civil Service Commission may modify the above Minimum Qualifications in the announcement of an examination.


The most suitably qualified candidates will possess the following competencies:

NOTE: The level and scope of the following knowledge and abilities are related to duties listed under the “Examples of Duties” section of this specification.

Knowledge of:
  • Computers and associated hardware and peripheral devices.
  • Computer software and operating systems such as: Windows, Linux, Unix, MacOS, DOS and various proprietary formats.
  • The principles and practices of electronic data storage, data encryption and computer security systems.
  • American Society of Crime Laboratory Director/Laboratory Accreditation Board standards applying to digital forensics.
  • The methods and techniques used to access, recover, review, validate and preserve electronically stored data.
  • A variety of forensic software programs such as EnCase, FTK, PRTK, Registry Viewer, Mac Forensic Labs software, Blackbag Technology software, Paraben, Datapilot, Cellebrite, Helix, Knoppix, Raptor and other commercially available forensic programs.
  • The principles and practices of evidence collection, preservation and handling.
  • The presentation of evidence in a court setting.
Ability to:
  • Communicate effectively both orally and in writing.
  • Examine and analyze computer hardware, software and electronically stored data pertaining to law enforcement investigations.
  • Collect, transport, process and secure evidentiary materials.
  • Effectively prepare and present detailed reports of findings.
  • Find and extract electronically stored information to be used as evidence.
  • Work with various operating systems including Window, MacOS, Linux, and Unix file systems.
  • Work with different levels of Redundant Array of Independent Disks (RAID) 0, 1, 5, 10, etc.
  • Work across most hardware platforms including desktops, laptops, servers and enterprise-level storage devices.
  • Manage several projects at once and maintain precise notes and required documentation.
  • Establish and maintain effective working relationships.
  • Work effectively in an environment in which incumbents may encounter sensitive/confidential information and data that contains sexually explicit or disturbing content; including child pornography.

THE EXAMINATION WILL CONSIST OF the following steps: 1) A review of candidates' applications to verify possession of minimum requirements. Those candidates who possess the minimum requirements for the class will move on to the next step in the examination process. 2) A review of candidates’ Supplemental Questionnaires to select the best qualified applicants to continue in the process. 3) An oral interview which will be weighted as 100% of the candidate's final examination score. The oral interview may contain situational exercises. CANDIDATES MUST ATTAIN A QUALIFYING RATING ON EACH PORTION OF THIS EXAMINATION. We reserve the right to make changes to the announced examination components.

Alameda County utilizes a Civil Service Selection System founded on merit. Such a system is competitive and based on broad recruitment efforts and equal opportunity for qualified applicants to test in an examination process designed to determine the qualifications, fitness and ability of competitors to perform duties of the vacant position. Many of our recruitments are targeted and specific to the needs of a current vacant position, in which case, the eligible list may be exclusively used for that current vacant position. Other recruitments many be more broadly used for both current and future vacancies, or for other alternate jobs with comparable scopes of work.

To learn more about our recruitment and selection process, please visit the "What You Need To Know" section of our website: .


Selection Plan

Applicants will be informed via email with reasonable notice in advance of any examination process which will require their attendance. The following dates are tentative and subject to change based on the needs of the Agency:


Deadline for Filing: 5:00 P.M., Monday, July 29, 2013

Review of Minimum Qualifications: Wednesday, August 7, 2013

Review of Supplemental Questionnaire for best qualified: Wednesday, August 14, 2013

Panel Interviews: Wednesday, August 28, 2013

The Human Resource Services Department will make reasonable efforts in the examination process to accommodate qualified individuals with mental and physical disabilities, and/or medical conditions in accordance/compliance with the State Fair Employment Housing Act (FEHA), Federal Americans with Disabilities Act (ADA) of 1990, and Alameda County Resolution No. R-83-773. To request an accommodation due to a disability during this or other phases of the selection process, please contact the Human Resource Services Department at (510) 208-9593 before the final filing deadline. Alameda County Human Resources Services will require documentation to substantiate a request for reasonable accommodation. In order to qualify for a reasonable accommodation, applicants must have a permanent disability pursuant to the U.S. Equal Employment Opportunity Commission's statute of the Americans with Disability Act of 1990, as amended, and/or the California Department of Fair Employment and Housing (DFEH) Act.

For more information regarding our Reasonable Accommodation procedures, please visit our website,



DS: po 8/6/09

Newspecs: 8516-8517.doc

CSC Date: 11/4/2009


About this company
9 reviews