Digital Forensic Crime Analyst

Posting Date

05/29/26

Application Deadline

06/04/26

Pay Range

Min - 1st Quartile - Mid - Max
$33.50- $37.63 - $41.75 - $50.00

Job Type

Unclassified

Department

Sheriff

About the Position

The Digital Forensic Crime Analyst with MCSO identifies, preserves, analyzes, and interprets digital evidence to support criminal investigations, legal proceedings, and internal inquiries.

About the Maricopa County Sheriff’s Office:
Do you possess integrity, strong interpersonal skills, and do you have a desire to serve your community? The Maricopa County Sheriff's Office (MCSO) invites you to become part of Arizona's leading law enforcement agency.  We are seeking passionate individuals to join our team with a variety of openings for Civilian, Detention and Sworn personnel. We are working together to safeguard our communities.

Compensation is more than a salary with MCSO: 

• Growth and stability since 1871 
• Choice of three medical plans – starting as low as $70/month 
• Holidays – 10/year + 1 personal day 
• Enrollment in the Arizona State Retirement System 
• Paid sick and parental leaves (birth/adoption) 
• 30% discount at Kindercare childcare facilities in the Valley.
• 50% discount at MCKids Club childcare located next to our headquarters. 
• MCSO Mentoring program to provide personal and professional growth opportunities for all employees. 
• Access to free County gyms 
• Learn more at Benefits Overview  

Position Qualifications

We recognize your time is valuable, so please apply if you meet the following required qualifications:

Education

• Associate degree in Computer Science or related field. 

Experience

• Three (3) years of experience in a computer-related field.

OR

Combined education and experience qualifications

• Other combinations of education or experience may substitute for the minimum qualifications on a year-for-year basis. Certification or training directly related to the field of computer forensics may substitute for years of experience on a case-by-case basis.

Other requirements

• Must possess a valid Arizona driver’s license or have the ability to obtain by the time of hire.
• Training that may be provided on-the-job: FEMA NIMS – IS100 and 700; Safety; Payroll; PREA.
• Prior to hiring, the Sheriff's Office requires that all candidates pass an extensive background review.

Our Preferred Candidate has

• Previous experience working in a Law Enforcement environment.
• One year or more of experience in the following areas:
  • Identifying, collecting, preserving, and analyzing digital evidence from electronic and digital devices in accordance with established forensic methodologies and legal procedures.
  • Conducting mobile device forensics 
  • Analyzing cellular communication records (CDRs) and cloud-based data obtained through search warrant returns to further criminal investigations and locate missing/wanted subjects.
  • Working with cellular networks and mobile technologies to support investigative or forensic activities.
• Experience working in non-Windows operating systems, such as macOS, iOS, and Linux.
• Vendor-specific certifications in digital forensic tools, including Magnet/Axiom, Cellebrite, and Berla iVe.
• Advanced knowledge of common Microsoft products such as Outlook, Word, Excel, PowerPoint, and Teams.
• IACIS (International Association of Computer Investigative Specialists) or SANS (SysAdmin, Audit, Network and Security) or equivalent accredited digital forensic certification.

Essential Job Tasks

• Assists all MCSO personnel in the identification and seizure of computers, mobile devices and other related electronic evidence.
• Performs forensic searches and analysis of information stored on digital evidence including information that is hidden, encrypted, and deleted.
• Receives, inventories, and accounts for physical evidence submitted for examination.
• Determines the most appropriate method of searching for and recovering information.
• Performs forensic imaging and data extractions of digital evidence both in the MCSO lab, and on-site, utilizing a variety of software and techniques.
• Determines the types of data to be recovered and analyzed, in cooperation with