The Computer Forensics Examiner conducts comprehensive examinations of digital and electronic media in a variety of investigative situations; examines computer hard disk files; analyzes electronic media, boot record data, system configuration, and operation command files; identifies evidence in support of an investigation; prepares and presents reports and findings; performs other duties as assigned. All duties are to be performed in accordance with departmental and LVSC Corporate policies, practices, and procedures.
Performs other duties as assigned.
- Functions in a capacity assuming responsibilities as a technical specialist.
- Conducts complex analysis on evidence submitted at an advanced level according to established procedures and protocols.
- Responsible for planning, organizing, directing and conducting forensic analysis on a variety of electronic media in support of company matters including large-scale investigations.
- Responsibilities may include managing digital forensics examinations through the entire lifecycle (case planning, intake, acquisition, examination, presentation and disposition);
- Performing complex, large-scale digital forensic examinations to include collection in a live client-server environment utilizing validated remote forensic software; and provide technical guidance and assistance to legal staff while ensuring that proper precautions are taken in the preservation and prevention of spoliation of electronic evidence.
- Preserve and analyze data from electronic data sources, including laptop and desktop computers, servers, and mobile devices
- Investigate network intrusions to determine the cause and extent of the breach
- Lead digital forensic and cybercrime response efforts.
- Produce high quality oral and written work product presenting complex technical matters clearly and concisely
- Form and articulate expert opinions based on analysis
- Consult with and take direction from supervisors, external engagement managers, and Legal regarding case investigation and status
- Maintain proficiency with industry standard tools and practices
- Maintain a high level of professionalism in all areas of performance
- Collects, processes, preserves, analyzes, presents and archives computer related evidence.
- Retrieves data; recovers passwords, finds deleted and/or hidden information; executes verification tests of forensic software and hardware.
- Prepares and presents a variety of training programs for co-Team Members.
- Executes verification tests to independently validate functionality.
- Keeps informed on computer forensics and multimedia digital evidence technology and practices by attending workshops and educational programs or reading specialized literature.
- Attends meetings and participates in various teams when needed.
QUALIFICATIONS AND PHYSICAL/MENTAL REQUIREMENTS:
PROFESSIONAL EXPERIENCE AND KNOWLEDGE REQUIREMENTS:
- Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, or a related field is required OR demonstrated ability to meet the job requirements through a comparable number of years of applicable work experience to include extensive experience in forensic examinations at the enterprise level within the preceding 3 years.
- Experience in and ability to demonstrate the interpretation, processing and translation of file and operating system artifacts across a variety of platforms is required. Demonstrated expert-level experience in the use of automated forensic tools (e.g., EnCase®, Forensic Toolkit®, Paraben Suite®), Xways®, Cellebrite, XRY, BlackBag Forensic Suite, Knoppix based tools, etc.) along with ability to articulate, in detail, the processes being conducted by these automated forensic tools is also required.
- Ability to perform forensic examinations of computers and digital devices, including digital storage media, for the purpose of identifying and collecting data for introduction as evidence in court or other legal proceedings.
- Five (5) years experience in performing digital forensic collections, acquisitions and imaging as well as comprehension of preservation and spoliation issues relating to electronic evidence.
- Either the EnCase® Certified Examiner (EnCE) or IACIS® Certified Forensic Computer Examiner (CFCE), or comparable certification is desired.
Minimum Employment Requirements: 21 years of age, proof of authorization/eligibility to work in the United States, High School Diploma or equivalent, ability to communicate effectively in a positive/upbeat fashion utilizing English; both in oral and written form, interpersonal skills with focused attention to guest needs to deal effectively with all business contacts, maintain a professional, neat and well-groomed appearance adhering to LVS appearance standards, maintain consistent adherence to the LVS Unmatched Guest Service Standards, work varied shifts, including weekends and holidays.
Work Environment Requirements: Work in a fast-paced, busy, and somewhat stressful environment. Maintain physical stamina and proper mental attitude while dealing effectively with guests, management, team members, and outside contacts while working under pressure and meeting deadlines. Must be able to frequently move freely about the office, maintain manual dexterity to access computer via computer keyboard and operate office equipment, such as telephones, copiers, fax machine, etc., withstand various activities such as frequent walking, sitting for long periods and withstand prolonged standing, stretching, bending and kneeling without restriction. Be able to work indoors and be exposed to various environmental factors such as, but not limited to CRT fatigue, noise, dust, cigarette smoke, and be able to access all areas of the property.
- 22 months ago - save job