Digital Forensic Investigator

SALARY DETAILS

APPLICATION OPEN DATE

3/20/25

INFORMATION ABOUT LAUSD

We are LAUSD. We are at the forefront of innovation in public education, focused on a clear and inspiring vision of the future for all of our students as they venture forward on their journey as lifelong learners. Here, you will have the opportunity to exercise your potential in a role supporting the business of education. Our work directly contributes toward the goal of ensuring that our students graduate ready for the world – ready to thrive in college, career and life. LAUSD is the second largest school district in the nation with an enrollment of nearly 575,000 students. We serve an area totaling 710 square miles, with over 1,190 schools and educational centers, and we employ over 74,000 individuals, making us one of the largest employers in our city.

LAUSD EMPLOYEES: Please be advised that all LAUSD employees must sign in to the GlobalProtect Virtual Private Network (VPN) in order to submit an application from an external network outside of an LAUSD location. For assistance with installing the GlobalProtect virtual network, please contact Information Technology Services at (213) 443-1300 or (213) 241-5200 or via their page (https://www.lausd.org/helpdesk)

DEPARTMENT OR SCHOOL SITE

There is one current vacancy in the Student Safety Investigation Team. The Student Safety Investigation Team (SSIT) performs administrative investigations involving matters of alleged misconduct by District employees that adversely impact students.

PROJECT

A Digital Forensic Investigator performs and may lead specialized computer forensics by performing hardware, software, and virtual analyses of digital evidence and prepares reports, recommendations, and provides expert testimony.

BENEFITS

Insurance: Paid premiums for your choice of several medical, dental, vision, and life insurance plans.

Retirement: Membership in the California Public Employee Retirement System (CalPERS).

Vacation: Full-time employees earn up to two weeks of paid vacation to start. Three weeks after five years of year-round paid service.

Paid Holidays: Up to 13 days.

JOB DUTIES/RESPONSIBILITIES

• Conducts digital forensic investigations and scientific analysis of digital evidence to assist District investigators and/or management on student safety issues, fraud, collusion, and/or conflicts of interest.
• Prepares technical reports detailing the evidence retrieval process and comprehensive final forensic reports detailing the results of the forensic investigation for investigators, prosecutors, and/or management.
• Maintains a digital laboratory and assists in updating as necessary.
• Collects and receives digital devices and maintains the chain of evidence by safely storing evidence and documenting the collection and storage of that evidence.
• Disassembles, examines, and identifies computer systems, hardware components, and operational conditions of digital evidence subject to forensic analysis.
• Determines the most appropriate method of protecting original evidence and recovering deleted, erased, hidden and encrypted digital evidence.
• Assists in assembling, configuring, modifying, testing, maintaining, and preparing computers, digital forensics, and network equipment to support the continued operational use of digital devices.
• Dismantles and rebuilds damaged equipment in order to recover lost data as needed.
• Acquires forensic copies (mirror images) of original digital evidence using forensic hardware and software methods.
• Traces URL (Internet) activity, websites visited, history logs, timelines, downloads and manipulations of data.
• Prepares formal materials for presentation in a court of law and testifies as an expert witness.
• Assists investigators and/or management officials by providing technical knowledge and assisting in field investigations.
• Preserves, extracts, analyzes and compiles electronically stored information in response to litigation-related Ediscovery requests and Public Records Act (PRA) requests received by the District, in conjunction with the District’s PRA Unit and other stakeholders.
• Identifies and recommends computer systems hardware, software, and forensic tools and components to be procured for forensic investigation use.
• Develops and maintains forensic investigation procedures and guides.
• Performs related duties as assigned.

MINIMUM REQUIREMENTS

EDUCATION

Graduation from a recognized college or university preferably with a bachelor’s degree in computer science, information technology, or a closely related field. Additional qualifying experience may be substituted for the required education on a year-for-year basis, provided that the requirement of a high school diploma or equivalent is met.

EXPERIENCE 

Two years of experience using current computer forensic hardware, software, and methodologies to conduct digital forensic examinations preferably regarding criminal, civil, serious policy violations and/or child exploitation cases.

SPECIAL

A valid driver’s license to legally operate a motor vehicle in the State of California and the use of private transportation, or the ability to utilize an alternative method of transportation.

SPECIAL NOTES

A Certified Forensic Computer Examiner (CFCE), Certified Computer Examiner (CCE), Mobile Forensics Certified Examiner (MCFE) certification or comparable certification must be obtained within the probationary period.

Employees in the class are subject to call at any hour.

This class description, is not a complete statement of essential functions, responsibilities, or requirements. Entrance requirements are representative of the minimum level of knowledge, skill, and/or abilities. To the extent permitted by law, management retains the discretion to add or change typical duties of a position at any time, as long as such addition or change is reasonably related to existing duties.

DESIRABLE QUALIFICATIONS

The ideal candidate possesses the technical ability to find, extract, and recover electronic data, including that which has been deleted, erased, fragmented, hidden, or encrypted. S/he communicates investigative findings clearly and professionally, both verbally and in writing. S/he has experience with digital forensic software including Nuix, Blackbag Technologies, Axiom, eDiscovery, and Encase. The ideal candidate has work experience in settings that address matters of child abuse and/or student safety. S/he displays strong interpersonal skills and maintains a respectful rapport with others. S/he is able to remain open-minded and unbiased while considering and offering constructive feedback. The candidate is able to work efficiently and independently, with direction, to produce accurate, timely, and thorough reports of findings. S/he engages in opportunities to stay current with advances in technology and software. Finally, the candidate commits to preserving integrity and confidentiality in all aspects of investigations.

Additionally, the ideal candidate will have knowledge of the following:

- Digital devices and associated hardware and peripheral devices

- Electronic data storage, data encryption, and computer security systems

- Methods and principles of forensic data collection and analysis

- Windows, Linux, Unix, MacOS X, DOS, EnCase, Forensic Toolkit (FTK), Nuix, SubRosaSoft, Blackbag Technologies, Helix, AccessData Password Recovery, AccessData Registry Viewer, DNA, Liveview, VMWare, PRTK, Paraben, Datapilot, Cellebrite, Knoppix, Mac Forensic Labs software

- Evidence collection, preservation, and handling

- Software and mobile device technologies, especially as impacts digital forensic activities

- Current technological developments and trends in digital forensics

They also have the ability to:

- Analyze and interpret forensic metadata

- Communicate clearly, concisely, and persuasively orally and in writing to technical and non-technical audiences

- Prepare and present detailed reports and findings

- Find and extract electronically stored information to be used as evidence

- Manage multiple projects expeditiously and maintain precise notes and required documentation

- Establish and maintain effective working relationships

- Recover electronic data that has been deleted, erased, fragmented, hidden, or encrypted from data storage devices

- Stay abreast of current trends and technical advancements in areas of digital forensics

- Maintain confidentiality of investigation records and proceedings

- Keep accurate records

- Gather and recognize salient information and analyze the relationship to matters under investigation

EMPLOYMENT SELECTION PROCESS

The selection process for this position tentatively consists of a Technical Interview. After applications are reviewed and determined to meet the minimum qualifications, qualified candidates will move on to the next phases of our selection process.

This is a competitive process as we anticipate a number of well qualified candidates for this recruitment. Please make sure that you describe in DETAIL, your experience, education, and training that most closely relates to this position in the on-line application. The hiring departments have requested that we proceed with the selection process in an expeditious and timely manner. To honor this request, we will be adhering to a pre-planned employment assessment schedule. We encourage you to check your emails regularly for notifications. If you are unable to attend the scheduled date(s), please note that we cannot guarantee alternate testing dates.

Please be sure to include correspondence from @lausd.net and @successfactors.com as an approved sender so that messages aren't accidentally placed into your spam/junk e-mail folder.

For more information about the LAUSD employment assessment process, visit our website at http://www.lausdjobs.org.

APPLICATION PROCESS

DO YOU NEED TECHNICAL ASSISTANCE WITH THE ON-LINE APPLICATION? Email us at helpmeapply@lausd.net

To find out whether the application deadline has been extended, visit the website at: http://www.lausdjobs.org . The Los Angeles Unified School District intends that all qualified persons shall have equal opportunities for employment and promotion.

Reasonable accommodations in completing an application and testing are available to individuals with disabilities. Please call (213) 241-3455 for more information.

ADDITIONAL POSTING INFORMATION

The Los Angeles Unified School District is committed to providing a working and learning environment free from discrimination, harassment, intimidation, abusive conduct, or bullying. The District prohibits discrimination, harassment, intimidation, abusive conduct or bullying based on actual or perceived race or ethnicity, gender/sex (including gender identity, gender expression, pregnancy, childbirth, breastfeeding/lactation status and related medical conditions), sexual orientation, religion, color, national origin (including language use restrictions and possession of a driver’s license issued under Vehicle Code), ancestry, immigration status, physical or mental disability (including clinical depression and bipolar disorder, HIV/AIDS, hepatitis, epilepsy, seizure disorder, diabetes, multiple sclerosis, and heart disease), medical condition (cancer related and genetic characteristics), military and veteran status, marital status, registered domestic partner status, age (40 and above), genetic information, political belief or affiliation (unless union related), a person's association with a person or group with one or more of these actual or perceived characteristics, or any other basis protected by federal, state or local law, ordinance, or regulation in any program or activity it conducts or to which it provides significant assistance.

For inquiries or complaints contact our Equal Opportunity Section, (213) 241-7685.

Selection and promotion are based on a competitive employment assessment process. Candidates who pass all parts of the assessment process are placed on a hiring (eligibility) list based on their assessment score. Hiring departments may make job offers to candidates on the top three ranks of the hiring list. Eligibility typically lasts for 12 months. The hiring list resulting from this assessment process may be used to fill open positions in related job classifications.

Follow us on:

https://x.com/LAUSDjobs

https://www.facebook.com/LAUSDjobs/

https://www.linkedin.com/groups/1997274

https://www.instagram.com/lausdjobs/