Criminal Investigator - Digital Forensics Examiner

Job Description

GENERAL PURPOSE: The Digital Forensics Examiner is a specialized civilian investigator assigned to the Loveland Police Department's Criminal Investigations Division. This position independently conducts complex digital forensic examinations, analyzes electronic evidence, and provides technical expertise to support criminal investigations. Working collaboratively with detectives, prosecutors, and law enforcement partners, the examiner plays a critical role in identifying investigative leads, developing evidence, and supporting successful criminal prosecutions.

SELECTION TIMELINE:

• Position Open Until: 11/13
• Applications Due By: 11/13
• Pre-Interview Questionnaire: Due via email by 11/18
• Oral Board Interviews: 11/24
• Executive Interviews: TBD, if necessary. Open to internal and external applicants.
• Backgrounds: December/January
• Tentative Start Date: January 2027

HIRING SALARY - $81,493.36 - $114,090.70

MISSION: Seek Justice. Love Kindness. Walk Humbly.

CIVILIAN CRIMINAL INVESTIGATOR- DIGITAL FORENSICS EXAMINER:

ESSENTIAL FUNCTIONS:

• Manage digital forensic examinations and investigative caseloads independently, from initial assignment through completion, while working under the direction of the Cybercrimes Sergeant.

• Identify, collect, preserve, extract, recover, and analyze digital evidence from mobile devices, computers, electronic storage media, cloud accounts, and other digital sources using specialized forensic tools and methodologies.

• Conduct advanced forensic analysis of communications, application data, location information, deleted files, internet activity, and other electronically stored information to identify investigative leads, establish timelines, and develop evidentiary connections.

• Ensure the integrity, authenticity, and legal defensibility of digital evidence through validated forensic procedures, proper documentation, and strict chain-of-custody practices.

• Prepare detailed forensic examination reports, investigative summaries, and evidentiary documentation that clearly outline examination methodologies, findings, and conclusions.

• Assist investigators with digital-related legal processes, including preparing and executing search warrants, subpoenas, and affidavits, as well as performing on-scene identification, collection, and preservation of electronic evidence.

• Conduct investigative follow-up activities such as interviews, records searches, and research necessary to support assigned criminal investigations.

• Collaborate with detectives, crime scene personnel, crime analysts, prosecutors, and local, state, and federal law enforcement partners on complex criminal investigations requiring digital forensic expertise.

• Provide courtroom testimony regarding forensic methodologies, examination results, evidence handling, and technical conclusions, including serving as an expert witness when qualified.

• Maintain operational readiness and professional proficiency by safeguarding sensitive information, maintaining accurate case records, ensuring forensic equipment and software are functioning properly, and staying current with emerging technologies, forensic techniques, investigative tools, and legal standards.

OTHER DUTIES:

• Develop and deliver presentations to community groups, professional organizations, and other stakeholders on digital forensics, emerging technologies, and related investigative topics.

• Serve as a technical resource and mentor to Department personnel, providing guidance and training on digital forensic tools, techniques, and investigative procedures.

• Participate in professional development, specialized training, and interagency collaboration to remain current with evolving technologies and investigative practices.

• Assist with evaluating new forensic technologies, equipment, and software to support the Department's operational needs.

• Perform other investigative and technical duties as assigned to support the mission of the Criminal Investigations Division.

EDUCATION, EXPERIENCE, JOB QUALIFICATIONS:

Minimum Qualifications/Education and Experience

• Minimum of 60 semester credit hours of college coursework in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a closely related field; or an equivalent combination of relevant education, specialized technical training, professional certifications, and experience.
• 3 years of full-time, hands on experience performing digital forensic examinations of computers and mobile devices in a law enforcement, government or laboratory setting.
• A current vendor-neutral certification (CFCE, GIAC, GCFE,/GCFA/GASF, EnCE, or equivalent)
• Minimum of 200 hours of documented digital forensic training, including at least 40 hours within the last 3 years.
• Prior court testimony as a digital forensic examiner.

Special Requirements

• Must successfully complete a comprehensive law enforcement background investigation and meet applicable criminal justice information access requirements.
• Must be able to handle and examine sensitive, graphic, or disturbing investigative material, including child sexual abuse material, in accordance with applicable laws and Department procedures.

Preferred Qualifications

• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, or a closely related discipline.
• Mobile Certifications (CCO, CCPA, CCME, MCFE) and locked-device or full file system experience.
• ICAC (Internet Crimes against Children), financial crimes, or cyber fraud casework, and/or task force experience.
• Mentoring, teaching, or conference presentations.
• Qualification as an expert witness in state of federal court.

Knowledge, Skills, and Abilities

• Thorough knowledge of digital forensic principles, methodologies, and best practices involving computers, mobile devices, operating systems, file systems, cloud technologies, and electronic evidence.
• Knowledge of applicable laws, constitutional requirements, search and seizure procedures, evidentiary standards, and chain-of-custody protocols.
• Proficiency in specialized forensic hardware and software used to acquire, recover, examine, analyze, and interpret digital evidence.
• Ability to independently conduct technically sound, legally defensible forensic examinations, identify investigative leads, and prepare accurate, objective reports.
• Ability to clearly communicate complex technical findings through written reports, investigative briefings, and courtroom testimony.
• Ability to exercise sound judgment, maintain confidentiality, manage competing priorities, and handle sensitive investigative material with professionalism.
• Ability to collaborate effectively with investigators, prosecutors, forensic specialists, and law enforcement partners while adapting to evolving technologies and investigative practices.

Working Environment/Physical Activities:

Work is performed in a combination of office, forensic laboratory, and field environments, including crime scenes and search warrant locations. Office and laboratory duties involve prolonged sitting, computer use, repetitive keyboard motions, and detailed examination of electronic devices and digital evidence. Field assignments may require responding to crime scenes, conducting on-site triage of electronic devices, identifying and preserving digital evidence, and assisting with the collection, documentation, and transportation of electronic equipment.

Must be able to perform the following physical activities: walking, standing, stooping, kneeling, reaching, pushing, pulling, lifting, grasping, crawling, bending, climbing, feeling, talking, seeing (including distinguishing colors), hearing, and repetitive motions. May be required to work in confined spaces, outdoors, or in environments involving exposure to adverse weather conditions, hazardous materials, or disturbing crime scene evidence. Must be able to safely handle, move, and transport computers, electronic devices, and associated forensic equipment.

May be required to respond to investigative call-outs outside normal business hours, work extended shifts, or perform duties with limited rest during critical investigations. Duties may include courtroom testimony, providing technical assistance during search warrant operations, and delivering presentations or training to individuals and groups of varying sizes.

NOTE: This job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the job.

Employment offers will be conditional on an extensive background investigation, criminal, driving record and credit check, polygraph examination, psychological examination, and drug screening.

APPLICANTS WHO ARE UNSUCCESSFUL IN THE SELECTION PROCESS MAY APPLY FOR FUTURE OPENINGS.

The City of Loveland is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, sex, religion, age, disability or sexual orientation. We encourage, value and respect diversity.

Beginning on 8/1/2023, The City of Loveland will begin participating in E-Verify. In accordance with E-Verify requirements, upon your date of hire the City of Loveland will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. E-Verify Notice of Participation. Learn more about your right to work. Visit E-Verify.gov for more information.