IT Forensics Examiner I
Apply NowCompany: Riverside County, CA
Location: Riverside, CA 92503
Description:
Salary : $85,508.19 - $132,418.56 Annually
Location : Riverside
Job Type: Regular
Job Number: 25-98553-01
Department: Public Defender
Division: Support
Opening Date: 02/27/2025
Closing Date: 3/5/2025 11:59 PM Pacific
ABOUT THE POSITION
The County of Riverside's Law Offices of the Public Defender is seeking an IT Forensics Examiner I to support their office located in Riverside. This position will also travel once a week to support the Indio Office.
The Forensics Examiners will be responsible for analyzing digital discovery from various agencies and preserving them in a format compatible with Defender Data (case management system) while keeping the integrity of the original source. They will also be tasked with analyzing Cellebrite and other cell phone data dumps, interpreting reports for the attorneys, and creating and using secure virtual machines when handling digital discovery. Additionally, the incumbents will handle Encase images, manage access to view the images, and manage permissions on file servers.
The department desires candidates with experience analyzing digital discovery, using case management systems such as Defender Data, and those who have experience working in a legal office.
Meet the Team!
It is the mission of the to provide the highest quality legal representation to any person unable to afford it for criminal, juvenile, or certain civil proceedings. The Public Defender strives to preserve human dignity in all cases where citizens' liberties are at stake. The Public Defender is dedicated to the principle that no citizen shall be deprived of life, liberty, or property without competent, professional, and vigorous representation so that due process is implemented fairly, equitably, and without prejudice. The Public Defender is headquartered in Riverside, with additional offices providing support to residents in Banning, Blythe, Murrieta, and Indio.
Who May Apply?
This recruitment is open to all applicants.
EXAMPLES OF ESSENTIAL DUTIES
Acquire skill in designing and building computer(s) and peripheral devices to meet computer forensic requests; acquire skill in maintaining the functionality of assigned computers and peripheral equipment used to perform forensic duties.
Assist in the preparation of statistical and operational logs, records, and reports; assist in maintaining computerized databases related to the assigned investigative activities.
Review case files to locate alleged violations, determine evidentiary needs, and extract case file information useful to criminal and/or civil investigations.
Identify, collect, organize, and analyze IT device-related evidence located at search warrant location(s); may participate in surveillance and undercover investigations; may load, transport and store evidence.
Perform specialized IT forensic examinations of computers, servers, hard drives, and other digital devices (e.g., palm pilots, cell phones, digital cameras, and video recorders), and learn accepted digital forensic examination techniques in the collection, examination, evaluation, documentation, and storage of computer related evidence.
Learn to analyze, isolate and organize data recovered from examination of devices and other storage media; learn to store and maintain computer related evidence according to accepted protocols.
Create investigative reports documenting the findings of the forensic examination; observe IT Forensics Examiners providing expert testimony in court related to computer analysis.
MINIMUM QUALIFICATIONS
Education: Graduation from an accredited college or university with an Associate's degree in computer science or a related field to the assignment. (Additional qualifying IT job-related experience may substitute for the required education on the basis of 30 semester or 45 quarter units equaling one year of full-time experience.)
Experience: Two years of IT job-related experience with Riverside County or its equivalent, which involved administrating network and operating systems.
License/Certificate: Possession of a valid California Driver's License may be required.
Knowledge of: Appropriate English usage and grammar; computer operating systems (i.e., Novell, Windows 98, 2000, NT, XP, Unix, Solaris, Linux); networked systems (DSL, firewalls, VPN, and cable modems).
Ability to:Acquire skill in sound research methods and techniques related to IT device forensics and forensic-related software usage; learn to understand, interpret and apply basic laws, rules and regulations; communicate effectively both orally and in writing; learn to conduct IT device forensic investigations under close supervision; build and maintain stand alone and networked computer stations; establish and maintain effective working relationships with those contacted in the course of work; maintain records and files related to the assigned duties; learn to analyze, interpret and understand criminal court documents, criminal complaints, search warrants, and grand jury documents; learn to apply basic laws, rules and regulations related to the assigned investigative area; prepare clear and concise reports.
SUPPLEMENTAL INFORMATION
For more information regarding the position, please contact the recruiter Mary Miller at 951-955-3464 or via email at
APPLICATION INFORMATION
Veteran's Preference
The County has a Veterans Preference Policy applicable to new hires. To qualify, upload a copy of your (or your spouse's) Member-4 Form DD-214 indicating dates of service, and a copy of your spouse's letter of disability (if applicable) with your application. For privacy reasons, it is recommended that you remove your social security information from the document(s). A Human Resources Representative will review the materials and determine if you qualify for veterans' preference. The Veterans Preference Policy, C-3 is available here:
Reasonable Accommodations
The County of Riverside is committed to providing reasonable accommodation to applicants as required by the Americans with Disabilities Act (ADA) and Fair Employment and Housing Act (FEHA). Qualified individuals with disabilities who need a reasonable accommodation during the application or selection process should contact the recruiter for the position noted above. For additional information and/or to obtain the appropriate form for requesting a reasonable accommodation, please visit the Disability Access Office web page located at:
Proof of Education
If using education to qualify or when requested by the recruiter, upload a copy of any license(s), official/unofficial transcript(s), degrees, and/or related employment documents to your NeoGov account at the time of application and before the closing date. Official or unofficial transcripts will be accepted.
If your education was completed outside of the United States, you will need to provide a copy of your Foreign Education Equivalency evaluation from a member of the National Association of Credential Evaluation Services () or Association of International Credential Evaluators, Inc. ().
Equal Opportunity Employer
The County of Riverside is an Equal Opportunity Employer. It is the policy of the County of Riverside to provide equal employment opportunities for all qualified persons. All applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender, gender identity, gender expression, marital status, ancestry, medical condition (cancer and genetic characteristics), genetic information, or denial of medical and family care leave, or any other non-job-related factors.
Pre-Employment
All employment offers are contingent upon successful completion of pre-employment requirements including a criminal background investigation, which involves fingerprinting. (A felony or misdemeanor conviction may disqualify the applicant from County employment). A pre-employment physical examination and background check may be required.
Probationary Period
As an Approved Local Merit System, all County of Riverside employees, except those serving "At Will," are subject to the probationary period provisions as specified in the applicable Memorandum of Understanding, County Resolution, or Salary Ordinance. Temporary and Per Diem employees serve at the pleasure of the agency/department head.
General Information
Current County of Riverside and/or current employees of the hiring department may receive priority consideration. Qualified candidates may be considered for future County vacancies.
Job postings may close without notice based on application volume. Submit your complete application by the recruitment close date; no late applications are accepted. Ensure all relevant experience/education is reflected on your application/resume, as a failure to demonstrate position requirements may disqualify applicants. A description of job duties directly copied from the job classification or job posting will not be considered.
Please read and follow any special application instructions on this posting. Click the 'Apply' link located on this page to submit your application. For additional instructions on the application process, examinations, Veteran's preference, pre-employment accommodation or other employment questions, please refer to our web site,
If you are experiencing technical problems, you may contact the governmentjobs.com applicant support desk Monday through Friday, 6 am to 5 pm Pacific Time at support@governmentjobs.com or toll-free 1-855-524-5627.
MEDICAL/DENTAL/VISION INSURANCE: A choice of different medical, dental and visions plan are available to elect. The County provides a Flexible Benefit Credit contribution as governed by the applicable SEIU Memorandum of Understanding to contribute towards the cost of these plans.
Note: Employees on assignment through the Temporary Assignment Program (TAP) receive different benefits. See the list
MISCELLANEOUS RETIREMENT: County of Riverside has three retirement Tiers through the California Public Employees' Retirement System (CalPERS).
A new member is defined as any of the following:
A new hire who enters CalPERS membership for the first time on or after January 1, 2013, and who has no prior membership in any California Public Retirement System. A new hire who enters CalPERS membership for the first time on or after January 1, 2013, and who was a member with another California Public Retirement System prior to that date, but who is not subject to reciprocity upon joining CalPERS. A member who first established CalPERS membership prior to January 1, 2013, and who is rehired by a different CalPERS agency after a break in service of greater than six (6) months.
CalPERS refers to all members that do not fit within the definition of a new member as "classic members".
Contribution rates are subject to change based on the County of Riverside annual actuarial valuation.
Note:
This summary is for general information purposes only. Additional questions regarding retirement formulas can be sent to or by calling the Benefits Information Line at (951) 955-4981,
Option 2.
If you have prior service credit with another CalPERS agency or within agencies, please contact CalPERS at (888) 225-7377 to determine which retirement tier would be applicable to you. CalPERS is governed by the Public Employees' Retirement Law. The Retirement Law is complex and subject to change. If there's any conflict between this summary and the law, the law will prevail over this summary.
DEFERRED COMPENSATION: Voluntary employee contribution with a choice between two 457 deferred compensation plan options.
VACATION ACCRUAL (Bi-Weekly Accrual):
0 < 3 year = 80 Hours (10 Days)
4 < 9 years = 120 Hours (15 Days)
10 or more years = 160 Hours (20 Days)
Maximum Vacation leave accumulation is 480 hours.
SICK LEAVE: Four (4) hours Sick Leave accrual per pay period with unlimited accrual.
HOLIDAYS: Normally 12 paid holidays per year.
BEREAVEMENT LEAVE: Allowed 5 days (3 days are County paid; 2 additional days can be taken from accrued Sick Leave balance).
BASIC LIFE INSURANCE: Equal to one times annual base salary not to exceed $50,000 of term life coverage. Premiums are paid by the County. Additional Supplemental Life plan is available for employee purchase.
DISABILITY: Short-term Disability benefit pays up to a maximum of $461.54 weekly, payable up to a maximum of 52 weeks.
POST RETIREMENT MEDICAL CONTRIBUTION: A monthly contribution is made by the County towards retiree health insurance offered through the County as governed by the applicable SEIU Memorandum of Understanding.
OTHER: There may be other benefit provisions as specified in the applicable Memorandum of Understanding. Please contact the recruiter listed on the job posting directly for more information.
01
Are you a current or temporary County of Riverside employee with the Law Offices of the Public Defender?
02
Select the answer that best describes your current driver license status:
03
What is the highest level of education you have from an accredited college or university with a major in computer science or a related field to the assignment.?
04
How many years of full-time experience do you have in IT job-related experience with Riverside County or its equivalent, which involved administrating network and operating systems?
05
How many years of experience in forensics computer and digital device examination or a related field to the assignment?
06
How many years of experience do you have analyzing digital discovery, using case management systems such as Defender Data?
07
I have work experience within a Public Defender and/or District Attorney Office.
Required Question
Location : Riverside
Job Type: Regular
Job Number: 25-98553-01
Department: Public Defender
Division: Support
Opening Date: 02/27/2025
Closing Date: 3/5/2025 11:59 PM Pacific
ABOUT THE POSITION
The County of Riverside's Law Offices of the Public Defender is seeking an IT Forensics Examiner I to support their office located in Riverside. This position will also travel once a week to support the Indio Office.
The Forensics Examiners will be responsible for analyzing digital discovery from various agencies and preserving them in a format compatible with Defender Data (case management system) while keeping the integrity of the original source. They will also be tasked with analyzing Cellebrite and other cell phone data dumps, interpreting reports for the attorneys, and creating and using secure virtual machines when handling digital discovery. Additionally, the incumbents will handle Encase images, manage access to view the images, and manage permissions on file servers.
The department desires candidates with experience analyzing digital discovery, using case management systems such as Defender Data, and those who have experience working in a legal office.
Meet the Team!
It is the mission of the to provide the highest quality legal representation to any person unable to afford it for criminal, juvenile, or certain civil proceedings. The Public Defender strives to preserve human dignity in all cases where citizens' liberties are at stake. The Public Defender is dedicated to the principle that no citizen shall be deprived of life, liberty, or property without competent, professional, and vigorous representation so that due process is implemented fairly, equitably, and without prejudice. The Public Defender is headquartered in Riverside, with additional offices providing support to residents in Banning, Blythe, Murrieta, and Indio.
Who May Apply?
This recruitment is open to all applicants.
EXAMPLES OF ESSENTIAL DUTIES
Acquire skill in designing and building computer(s) and peripheral devices to meet computer forensic requests; acquire skill in maintaining the functionality of assigned computers and peripheral equipment used to perform forensic duties.
Assist in the preparation of statistical and operational logs, records, and reports; assist in maintaining computerized databases related to the assigned investigative activities.
Review case files to locate alleged violations, determine evidentiary needs, and extract case file information useful to criminal and/or civil investigations.
Identify, collect, organize, and analyze IT device-related evidence located at search warrant location(s); may participate in surveillance and undercover investigations; may load, transport and store evidence.
Perform specialized IT forensic examinations of computers, servers, hard drives, and other digital devices (e.g., palm pilots, cell phones, digital cameras, and video recorders), and learn accepted digital forensic examination techniques in the collection, examination, evaluation, documentation, and storage of computer related evidence.
Learn to analyze, isolate and organize data recovered from examination of devices and other storage media; learn to store and maintain computer related evidence according to accepted protocols.
Create investigative reports documenting the findings of the forensic examination; observe IT Forensics Examiners providing expert testimony in court related to computer analysis.
MINIMUM QUALIFICATIONS
Education: Graduation from an accredited college or university with an Associate's degree in computer science or a related field to the assignment. (Additional qualifying IT job-related experience may substitute for the required education on the basis of 30 semester or 45 quarter units equaling one year of full-time experience.)
Experience: Two years of IT job-related experience with Riverside County or its equivalent, which involved administrating network and operating systems.
License/Certificate: Possession of a valid California Driver's License may be required.
Knowledge of: Appropriate English usage and grammar; computer operating systems (i.e., Novell, Windows 98, 2000, NT, XP, Unix, Solaris, Linux); networked systems (DSL, firewalls, VPN, and cable modems).
Ability to:Acquire skill in sound research methods and techniques related to IT device forensics and forensic-related software usage; learn to understand, interpret and apply basic laws, rules and regulations; communicate effectively both orally and in writing; learn to conduct IT device forensic investigations under close supervision; build and maintain stand alone and networked computer stations; establish and maintain effective working relationships with those contacted in the course of work; maintain records and files related to the assigned duties; learn to analyze, interpret and understand criminal court documents, criminal complaints, search warrants, and grand jury documents; learn to apply basic laws, rules and regulations related to the assigned investigative area; prepare clear and concise reports.
SUPPLEMENTAL INFORMATION
For more information regarding the position, please contact the recruiter Mary Miller at 951-955-3464 or via email at
APPLICATION INFORMATION
Veteran's Preference
The County has a Veterans Preference Policy applicable to new hires. To qualify, upload a copy of your (or your spouse's) Member-4 Form DD-214 indicating dates of service, and a copy of your spouse's letter of disability (if applicable) with your application. For privacy reasons, it is recommended that you remove your social security information from the document(s). A Human Resources Representative will review the materials and determine if you qualify for veterans' preference. The Veterans Preference Policy, C-3 is available here:
Reasonable Accommodations
The County of Riverside is committed to providing reasonable accommodation to applicants as required by the Americans with Disabilities Act (ADA) and Fair Employment and Housing Act (FEHA). Qualified individuals with disabilities who need a reasonable accommodation during the application or selection process should contact the recruiter for the position noted above. For additional information and/or to obtain the appropriate form for requesting a reasonable accommodation, please visit the Disability Access Office web page located at:
Proof of Education
If using education to qualify or when requested by the recruiter, upload a copy of any license(s), official/unofficial transcript(s), degrees, and/or related employment documents to your NeoGov account at the time of application and before the closing date. Official or unofficial transcripts will be accepted.
If your education was completed outside of the United States, you will need to provide a copy of your Foreign Education Equivalency evaluation from a member of the National Association of Credential Evaluation Services () or Association of International Credential Evaluators, Inc. ().
Equal Opportunity Employer
The County of Riverside is an Equal Opportunity Employer. It is the policy of the County of Riverside to provide equal employment opportunities for all qualified persons. All applicants will be considered without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender, gender identity, gender expression, marital status, ancestry, medical condition (cancer and genetic characteristics), genetic information, or denial of medical and family care leave, or any other non-job-related factors.
Pre-Employment
All employment offers are contingent upon successful completion of pre-employment requirements including a criminal background investigation, which involves fingerprinting. (A felony or misdemeanor conviction may disqualify the applicant from County employment). A pre-employment physical examination and background check may be required.
Probationary Period
As an Approved Local Merit System, all County of Riverside employees, except those serving "At Will," are subject to the probationary period provisions as specified in the applicable Memorandum of Understanding, County Resolution, or Salary Ordinance. Temporary and Per Diem employees serve at the pleasure of the agency/department head.
General Information
Current County of Riverside and/or current employees of the hiring department may receive priority consideration. Qualified candidates may be considered for future County vacancies.
Job postings may close without notice based on application volume. Submit your complete application by the recruitment close date; no late applications are accepted. Ensure all relevant experience/education is reflected on your application/resume, as a failure to demonstrate position requirements may disqualify applicants. A description of job duties directly copied from the job classification or job posting will not be considered.
Please read and follow any special application instructions on this posting. Click the 'Apply' link located on this page to submit your application. For additional instructions on the application process, examinations, Veteran's preference, pre-employment accommodation or other employment questions, please refer to our web site,
If you are experiencing technical problems, you may contact the governmentjobs.com applicant support desk Monday through Friday, 6 am to 5 pm Pacific Time at support@governmentjobs.com or toll-free 1-855-524-5627.
MEDICAL/DENTAL/VISION INSURANCE: A choice of different medical, dental and visions plan are available to elect. The County provides a Flexible Benefit Credit contribution as governed by the applicable SEIU Memorandum of Understanding to contribute towards the cost of these plans.
Note: Employees on assignment through the Temporary Assignment Program (TAP) receive different benefits. See the list
MISCELLANEOUS RETIREMENT: County of Riverside has three retirement Tiers through the California Public Employees' Retirement System (CalPERS).
- Tier I (Classic Member - Formula 3% @ 60): Applicable to current and former County of Riverside local miscellaneous employees hired prior to 08/24/2012 and did not withdraw CalPERS contributions. The employee contribution is eight (8%) percent.
- Tier II (Classic Member - Formula 2% @ 60): Applicable to local miscellaneous employees 1) hired after 08/23/2012 through 12/31/2012; 2) Previously employed with another CalPERS contracting public agency or a reciprocal retirement system, with a break in service of less than six months between the separation date with the previous employer and the appointment date with the County of Riverside. The employee contribution is seven (7%) percent.
- Tier III (PEPRA New Member - Formula 2% @ 62): Applicable to CalPERS local miscellaneous new members hired on or after the implementation of the Public Employees' Pension Reform Act of 2013 (PEPRA) which took effect January 1, 2013. Effective July 1, 2023 employee contributions are 7.25% and will increase to 7.75% effective July 1, 2024.
A new member is defined as any of the following:
CalPERS refers to all members that do not fit within the definition of a new member as "classic members".
Contribution rates are subject to change based on the County of Riverside annual actuarial valuation.
Note:
This summary is for general information purposes only. Additional questions regarding retirement formulas can be sent to or by calling the Benefits Information Line at (951) 955-4981,
Option 2.
If you have prior service credit with another CalPERS agency or within agencies, please contact CalPERS at (888) 225-7377 to determine which retirement tier would be applicable to you. CalPERS is governed by the Public Employees' Retirement Law. The Retirement Law is complex and subject to change. If there's any conflict between this summary and the law, the law will prevail over this summary.
DEFERRED COMPENSATION: Voluntary employee contribution with a choice between two 457 deferred compensation plan options.
VACATION ACCRUAL (Bi-Weekly Accrual):
0 < 3 year = 80 Hours (10 Days)
4 < 9 years = 120 Hours (15 Days)
10 or more years = 160 Hours (20 Days)
Maximum Vacation leave accumulation is 480 hours.
SICK LEAVE: Four (4) hours Sick Leave accrual per pay period with unlimited accrual.
HOLIDAYS: Normally 12 paid holidays per year.
BEREAVEMENT LEAVE: Allowed 5 days (3 days are County paid; 2 additional days can be taken from accrued Sick Leave balance).
BASIC LIFE INSURANCE: Equal to one times annual base salary not to exceed $50,000 of term life coverage. Premiums are paid by the County. Additional Supplemental Life plan is available for employee purchase.
DISABILITY: Short-term Disability benefit pays up to a maximum of $461.54 weekly, payable up to a maximum of 52 weeks.
POST RETIREMENT MEDICAL CONTRIBUTION: A monthly contribution is made by the County towards retiree health insurance offered through the County as governed by the applicable SEIU Memorandum of Understanding.
OTHER: There may be other benefit provisions as specified in the applicable Memorandum of Understanding. Please contact the recruiter listed on the job posting directly for more information.
01
Are you a current or temporary County of Riverside employee with the Law Offices of the Public Defender?
- Yes
- No
02
Select the answer that best describes your current driver license status:
- I have a valid California Class C license.
- I am able to obtain a valid California driver license.
- I currently have a valid out-of-state driver license, and am able to obtain a valid California driver license.
- I do not have and/or I am not able to obtain a California driver license.
03
What is the highest level of education you have from an accredited college or university with a major in computer science or a related field to the assignment.?
- None of these
- Less than 30 semester or 45 quarter units
- At least 30 semester or 45 quarter units
- At least 60 semester or 90 quarter units
- At least 90 semester or 135 quarter unites
- At least 120 semester or 180 units
- I have my Associates degree
- I have my Bachelors degree
- I have my Masters degree
- I have my Doctorate degree
04
How many years of full-time experience do you have in IT job-related experience with Riverside County or its equivalent, which involved administrating network and operating systems?
- No Experience
- Less than 1 year
- 1 year or more, but less than 2
- 2 years or more, but less than 3
- 3 years or more, but less than 4
- 4 years or more, but less than 5
- 5 years or more, but less than 6
- 6 years or more
05
How many years of experience in forensics computer and digital device examination or a related field to the assignment?
- No experience
- Less than six months
- Six months, to less than one year
- One year, but less than two years
- Two years, but less than three years
- Three years, but less than four years
- Four years, but less than five years
- Five years, but less than six years
- Six years or more
06
How many years of experience do you have analyzing digital discovery, using case management systems such as Defender Data?
- No experience
- Less than six months
- Six months, to less than one year
- One year, but less than two years
- Two years, but less than three years
- Three years, but less than four years
- Four years, but less than five years
- Five years, but less than six years
- Six years or more
07
I have work experience within a Public Defender and/or District Attorney Office.
- Yes
- No
Required Question