Posting Date
05/29/26
Application Deadline
06/04/26
Pay Range
Min - 1st Quartile - Mid - Max
$33.50- $37.63 - $41.75 - $50.00
Job Type
Unclassified
Department
Sheriff
About the Position
The Digital Forensic Crime Analyst with MCSO identifies, preserves, analyzes, and interprets digital evidence to support criminal investigations, legal proceedings, and internal inquiries.
About the Maricopa County Sheriff’s Office:
Do you possess integrity, strong interpersonal skills, and do you have a desire to serve your community? The Maricopa County Sheriff's Office (MCSO) invites you to become part of Arizona's leading law enforcement agency. We are seeking passionate individuals to join our team with a variety of openings for Civilian, Detention and Sworn personnel. We are working together to safeguard our communities.
Compensation is more than a salary with MCSO:
- Growth and stability since 1871
- Choice of three medical plans – starting as low as $70/month
- Holidays – 10/year + 1 personal day
- Enrollment in the Arizona State Retirement System
- Paid sick and parental leaves (birth/adoption)
- 30% discount at Kindercare childcare facilities in the Valley.
- 50% discount at MCKids Club childcare located next to our headquarters.
- MCSO Mentoring program to provide personal and professional growth opportunities for all employees.
- Access to free County gyms
- Learn more at Benefits Overview
Position Qualifications
We recognize your time is valuable, so please apply if you meet the following required qualifications:
Education
- Associate degree in Computer Science or related field.
Experience
- Three (3) years of experience in a computer-related field.
OR
Combined education and experience qualifications
- Other combinations of education or experience may substitute for the minimum qualifications on a year-for-year basis. Certification or training directly related to the field of computer forensics may substitute for years of experience on a case-by-case basis.
Other requirements
- Must possess a valid Arizona driver’s license or have the ability to obtain by the time of hire.
- Training that may be provided on-the-job: FEMA NIMS – IS100 and 700; Safety; Payroll; PREA.
- Prior to hiring, the Sheriff's Office requires that all candidates pass an extensive background review.
Our Preferred Candidate has
- Previous experience working in a Law Enforcement environment.
- One year or more of experience in the following areas:
- Identifying, collecting, preserving, and analyzing digital evidence from electronic and digital devices in accordance with established forensic methodologies and legal procedures.
- Conducting mobile device forensics
- Analyzing cellular communication records (CDRs) and cloud-based data obtained through search warrant returns to further criminal investigations and locate missing/wanted subjects .
- Working with cellular networks and mobile technologies to support investigative or forensic activities.
- Experience working in non-Windows operating systems, such as macOS, iOS, and Linux.
- Vendor-specific certifications in digital forensic tools, including Magnet/Axiom, Cellebrite, and Berla iVe.
- Advanced knowledge of common Microsoft products such as Outlook, Word, Excel, PowerPoint, and Teams.
- IACIS (International Association of Computer Investigative Specialists) or SANS (SysAdmin, Audit, Network and Security) or equivalent accredited digital forensic certification.
Essential Job Tasks
- Assists all MCSO personnel in the identification and seizure of computers, mobile devices and other related electronic evidence.
- Performs forensic searches and analysis of information stored on digital evidence including information that is hidden, encrypted, and deleted.
- Receives, inventories, and accounts for physical evidence submitted for examination.
- Determines the most appropriate method of searching for and recovering information.
- Performs forensic imaging and data extractions of digital evidence both in the MCSO lab, and on-site, utilizing a variety of software and techniques.
- Determines the types of data to be recovered and analyzed, in cooperation with investigators.
- Maintains technical proficiency based on current law enforcement guidelines.
- Prepares written report of forensic examination findings to include procedures used and evidence located.
- Works with investigators, detectives, and prosecutors to assist in the preparation of search warrants, investigative materials, and cases for court, as it relates to matters involving digital evidence. Presents findings to investigators, and testifies in court regarding the information found, including the methodology used to recover digital evidence.
- Researches legal issues and case law as it relates to digital forensics.
- Maintains good attendance to perform tasks as assigned by the supervisor.
(This is not an all-inclusive list of all job duties that may be required; employees will be required to perform other related duties as assigned.)
Working Conditions
Maricopa County is an EEO/ADA Reasonable Accommodation Employer.
The following environments described are only representative of how the essential job tasks are currently performed or envisioned. As such, in order to accommodate a disability or limitation, the essential job tasks may be performed in ways other than described on these pages.
Work occurs primarily indoors. Tasks require sitting, standing, walking, and ability to distinguish colors and perceive shapes. Position requires working a flexible schedule including extended hours and call outs and occasional travel for training purposes.
Work environment
- Indoors
- Rarely outdoors, in temperatures above 90 degrees, or below 40 degrees
- Frequently in a confined area
- Conditions may rarely include exposure to chemicals/fumes, confined area, stairs or ladders, dim lighting, bright lighting, exposure to contagious diseases
Physical environment
- Sitting, standing, walking
- Driving a vehicle
- Speaking, hearing, seeing, reading
- Distinguishing colors
- Bending and kneeling
- Reaching, twisting, climbing, crawling, crouching, balancing
- Wearing protective gear
- Precise dexterity
- Lifting floor to waist twenty-five (25) lbs.
- Lifting waist to shoulder twenty-five (25) lbs.
- Lifting shoulder to overhead twenty-five (25) lbs.
- Carrying twenty-five (25) lbs. a distance of 100 feet
- Pushing/pulling fifty (50) lbs. a distance of 100 feet
Social environment
- Frequent exposure to sensitive and potentially disturbing law enforcement–related content
- Sustained high workload
- Requirement to prioritize and manage multiple, complex assignments simultaneously
- Precision and meticulous attention to detail are essential
- Requires sound judgment and timely decision-making
- Prolonged periods of focus and situational awareness
- Work is routinely performed under interruptions, deadlines, shifting priorities, collaborative team settings, close proximity to coworkers, public interaction, and may include overtime or rotating shifts
- Infrequent exposure to emergency situations, hazardous conditions, and solitary work environments
Knowledge, Skills, and Abilities
Knowledge of
- Digital forensic techniques used to recover and analyze data from diverse electronic evidence sources, including hidden, encrypted, and deleted artifacts.
Skill in
- Using a variety of software and techniques to forensically image and analyze data collected from electronic evidence.
Ability to
- Simplify and express complex technical concepts both verbally and in writing.
- Work well with people from different disciplines with varying degrees of technical experience in a team environment.
- Successfully complete law enforcement digital forensics training.
- Adhere to MCSO policy and procedures.
SELECTION PROCEDURE:
The Maricopa County Human Resources Department reserves the right to admit to the selection process only those candidates considered to be the most highly qualified. Those selected will be assessed based on the evaluation of listed education and experience. The hiring authority will interview and select the successful candidate from a list provided by Human Resources.
All offers of employment made to new hires and rehires at Maricopa County are contingent upon successful completion of a post-offer, pre-employment thorough background investigation. A background investigation is conducted on a current employee who changes to a Safety Sensitive Position or one having the potential for serious adverse impact on the integrity or efficiency of the County. These requirements do not pertain to employees of elected officials who undergo background investigation processes administered through their respective offices.
Typically, successful candidates are hired at a salary rate up to the midpoint of the range, based on relevant experience, internal equity, and budgetary allowances.
Maricopa County is an EEO/ADA Reasonable Accommodation Employer.
Minimum Education
Maricopa County is an EEO/ADA Reasonable Accommodation Employer.
Selection Procedure
Consideration will only be given to candidates who submit online applications
Candidates will be contacted primarily through email and their Workday online application profile
Must pass a pre-employment background and/or fingerprint investigation as required by statute or policy, including drug and alcohol testing requirements for positions designated as safety-sensitive
Maricopa County is an equal opportunity employer and is committed to providing equal employment opportunities to all applicants. If you require a reasonable accommodation during the application process or to perform the essential functions of the position under the Americans with Disabilities Act (ADA), please contact [email protected] to initiate the interactive process.
