Electronic Forensic Analyst

POSTING TYPE: Open Competitive
DEPARTMENT: Sheriff's Office
HOURS: Full-time
SALARY RANGE: $70,518-$110,185/year (Grade Level 108)
LOCATION: Hastings Law Enforcement Center
UNION: None
CLOSE DATE: 4:30 p.m. on 7/28/2025

Do you possess the skills to analyze advanced and specialized forensic evidence related to potential criminal activities? Are you capable of conducting searches on various equipment, including computer hard drives, cell phones, and other digital media? Can you perform forensic examinations on seized digital storage media systems and provide investigative and technical guidance regarding related digital evidence? Can you continuously analyze technology trends and integrate proven forensic investigation techniques and supporting technologies into your work? In this position, you will join the Dakota County Sheriff's Office as a key member of the Dakota County Electronic Crimes Task Force, collaborating closely with colleagues on a wide range of complex criminal investigations.

* Bachelor's Degree. Preferred in Digital Forensics, Computer Science, Computer Engineering or related field.
AND
* Three years of experience working in forensic technology involving computer forensics, electronic discovery and digital investigations. Must have demonstrated ability to evaluate and maintain hardware and software necessary for the performance of criminal investigations preferably in a law enforcement environment. Additional skills require include understanding and analysis of systems security and forensic acquisition of electronic evidence.
OR
* An equivalent combination of education and experience.
AND
* Required license(s): Valid Driver's License.

PREFERRED QUALIFICATIONS BEYOND MINIMUM REQUIRED:
* Certified Forensic Computer Examiner certifications.
* Understanding / experience in criminal law.
* Experience with digital forensic software such as Cellebrite products, Magnet Forensic products, X-Ways Forensics, and Berla iVE, etc.

*Pursuant to Dakota County Policy, this position is designated as Safety Sensitive. "Safety-sensitive position" means a position, including any supervisory or management position, in which impairment caused by drug, alcohol, or cannabis use would threaten the health and safety of any person as defined in Minnesota Statutes Section 181.950, subdivision 13.

These examples do not include all possible tasks in this work and do not limit the assignment of related tasks in any position of this classification. Regular attendance according to the position's management approved work schedule is required for all positions.

1. Performs a variety of specialized computer forensics and electronic discovery services from digital media including evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Digital media includes a wide variety of electronic data storage and transfer devices including computers, laptops, cellular phones, PDA's and the images, spreadsheets and other types of files stored on these devices.
2. Maintains strict protocol guidelines for chain of custody and all the evidence to ensure integrity of each item of evidence is handled and analyzed according to meet legal practice requirements that includes: collecting, transporting, receiving, storing, labeling and preserving data collected for digital evidence on submittal for examination and analysis.
3. Determines the most appropriate method of protecting original evidence and recovering deleted, erased, hidden and encrypted digital evidence.
4. Evaluates scientific results of analysis to determine the validity and whether the information has forensic significance.
5. Provides technical guidance in evaluating and investigating cases where computer of related computer media has potential evidence.
6. Provides progress reports regarding investigations as well as detailed and technical report summaries of findings in written and verbal formats.
7. Interacts with investigators from law enforcement and IT department personnel to acquire information necessary to perform forensic examinations. Demonstrates the ability to communicate, coordinate and cooperate with these agencies and in a task force environment.
8. Provides expert testimony in the field of computer forensics; prepares evidence and presents expert testimony in court on results of seizure and handling of evidence, and results of analysis conducted.
9. Continually updates and develops skills regarding new computer technology and use of new software and hardware tools to extract information from computer and digital media systems.
10. Attends training, workshops and seminars to maintain current methodologies and knowledge of trends and developments in the field of computer forensics.
11. Reviews various court decisions relating to the field of computer forensics.
12. Travels to a variety of locations throughout the county to provide technical assistance to investigators and to collect evidence.
13. Other duties as assigned.

ESSENTIAL JOB FUNCTIONS: 1-12

* Strong knowledge of data retrieval procedures and forensic practices.
* Knowledge of evidentiary procedures, electronic criminal situations, fraud analysis and forensics fundamentals.
* Knowledge of specialized research, intelligence, collection and dissemination techniques related to forensic investigation.
* Familiar with various operating and network systems and database structure.
* Ability to translate technical computer analytics to quantifiable evidence for court hearings.
* Ability to engage with electronic forensics counterparts and law enforcement agencies to build cases.
* Knowledge of productivity application software (Microsoft Office, etc.).
* Ability to organize work efficiently and effectively.
* Ability to work independently and as a team member.
* Ability to demonstrate good detail orientation, analytical problem solving, logical thinking, and organizational skills.

WORK ENVIRONMENT:
The work is performed at the Dakota County SMART Center and in the field collecting forensic evidence. Some of the work is sedentary and may have extensive periods of time on PC, laptop or network equipment. Travel is required to off-site locations and work in all types of weather conditions due to situations such as search warrants and evidence collection.

SELECTION PROCESS:
The examination/selection process for this classification will consist of a rating of your training and experience from the application materials submitted. The top scoring candidates will be forwarded to the hiring department for further consideration.
Qualified candidates must pass a criminal history background check and may be required to pass a pre-employment drug test.

Dakota County Human Resources
www.co.dakota.mn.us
Main Number 651.438.4435 (contact 8 a.m. - 4:30 p.m. Monday - Friday)
Fax 651.438.8178