Digital Media Examiner - Counter Terrorism Policing

West Midlands Police; Birmingham; On-site; GBP 42,000 - 49,000; Part time

Job summary

A regional police force is seeking a part-time Digital Investigator. The role involves analyzing digital devices to support Counter Terrorism investigations. The candidate should have expertise in digital forensics and will be responsible for providing evidence reports, guiding officers, and presenting in court. Flexibility for on-call duties is expected.

Qualifications

• Expertise in digital forensic software is required.
• Effective communication skills to explain digital forensics.
• Experience preparing digital evidence reports.

Responsibilities

• Conduct forensic acquisition and analysis of digital evidence.
• Provide professional guidance to investigators about digital evidence.
• Attend court hearings to present digital evidence.

Skills

Common operating systems knowledge

Digital forensic software expertise (EnCase, FTK)

Experience in report preparation

Understanding of ACPO guidelines

Methodical problem-solving skills

Ability to work under pressure

Understanding of ISO 17025

Willingness for on-call service

Education

Degree in Computer Science/Forensics or equivalent

Tools

EnCase

FTK

XRY

Cellebrite

Job description

Closing date: 9th November 2025, 11:59pm

Salary: £42,897- £48,894

Grade: 7

Type: Part Time

Across the Counter Terrorism Policing (CTP) network, we have specialist officers and staff dedicated to stopping those who seek to do us harm. We work closely with partners and with the Crown Prosecution Service to put compelling evidence before the courts.

Based at our modern offices near to Birmingham International Airport. This is a part time position working 21 hours 54 minutes although an element of flexibility is necessary to meet business needs. You'll be part of an on‑call rota for overnight and weekends for which an additional allowance is payable.

The role

As a Digital Investigator working in our Digital Media Exploitation Unit (DMEU), you'll provide specialist technical advice and undertake the interrogation and investigation of digital devices to obtain intelligence to support regional, national and international Counter Terrorism Investigations.

You’ll interpret and explain digital forensic data in a non‑technical and accessible manner to Investigating Officers, Prosecutors, Defence experts and to Court. To assist with the investigation process, you’ll provide evidence packages and statements, and attend court when necessary. There may be occasions when you’ll also provide a high quality digital investigative service to support critical incidents nationally, including Chemical Biological Radiological Nuclear (CBRN), warm zone and Disaster Victim Identification.

We’ll support your continuous professional development. You’ll be researching and developing specialised equipment and software to keep abreast of advancements in techniques, technology and capabilities.

The DMEU is currently going through the ISO 17025 accreditation process. You’ll understand this process and will play a significant role in its acquisition.

Responsibilities

• Responsibility for the forensic acquisition, examination, analysis and investigation of evidence from a variety of digital devices which have been used in the commission, preparation or instigation of acts of terrorism and associated criminal offences including cybercrime attacks.
• Providing professional advice and guidance to Investigating Officers and partner agencies, ensuring digital evidence/intelligence is seized in accordance with Force and National best practice, including all elements of pre‑planning and where necessary accompanying them and assisting with overt and covert captures of digital evidence.
• Ensuring continuity of all exhibits and maintaining integrity throughout.
• Attending court as a witness and presenting evidence to confirm the validity of the evidence found.
• Attending both pre and post executive phase briefings.
• Researching and developing specialised equipment and software, working closely with equipment suppliers and mutual support agencies to ensure and maintain awareness of technology, legislation and techniques. This includes the construction and maintenance of equipment and software used within the unit.
• Maintaining and supporting the Association of Chief Police Officers (ACPO) best practice guide for digital evidence in the retrieval and handling of digital based exhibits as well as working within the Data Protection Act, Freedom of Information Act and other relevant legislation, maintaining compliance at Local, National and International levels.

Skills and competencies

Essential

• Working knowledge and expertise of common operating systems, applications, basic network technologies and internet technologies.
• Formal training and practical experience of using digital forensic software which MUST include; EnCase Forensic and/or FTK & .XRY and/or Cellebrite mobile phone forensics software.
• Experience in preparing complex digital forensics reports and statements of evidence.
• Thorough knowledge of ACPO guidelines on computer evidence.
• Ability to work independently and undertake research.
• An aptitude for problem solving in a methodical and orderly manner.
• Ability to work under pressure, make critical decisions and work to tight schedules and deadlines.
• Understanding of ISO 17025 and accreditation processes.
• Willingness to participate in an on‑call rota for overnights and weekends.

Desirable

• A degree in computer science/forensic computing studies or equivalent qualification in digital forensics and/or significant proven relevant experience/training in these fields.
• Awareness of criminal law and procedures relevant to the role e.g. CPIA, PACE, RIPA, Human rights Act, Data Protections, Terrorism Act.
• Working knowledge of other computer platforms and operating systems e.g. Mac OS, Linux.
• Experience of dealing with CPS, Counsel and the Criminal Courts in matters relating to computer based evidence.
• Passed an accredited NPIA training course concerning computer based evidence.
• Trained in the fundamental skills required to maintain and administer server systems.
• Ability to support the forensic retrieval of CCTV from systems that are complex and require a higher degree of technical expertise to extract the data.
• Understand, follow and actively promote Digital Forensic good practice methodologies (ISO17025 standard and ACPO Principles of Digital Evidence) to examine digital devices
• Hold a full Driving Licence.

Additional information

You’ll be expected to pass the core courses in relation to the recovery and analysis of digital evidence, as specified by ACPO. These courses relate to the forensic recovery from electronic devices to demonstrate evidential competence.

Security Clearance

⚠ This post requires British nationality (some dual nationalities may be ineligible) and an Enhanced Security Check Clearance.

You will need to undergo additional security clearance checks, with the offer of employment being conditional on obtaining all of the necessary security clearances.

There are limitations on travelling to a small number of countries once in post.

Diversity & Inclusion

We maximise the potential of people from all backgrounds through a culture of fairness and inclusion to deliver the best service for our communities, whilst protecting them from harm.

Counter Terrorism Policing is always working to build upon our diverse workforce to reflect the country we serve. An inclusive culture enables us to do things differently, working in ways that meet individuals' needs, flexing working patterns to ensure work‑life balance is healthy so that we deliver the best for the organisation.

We are a Disability Confident Leader - the highest level an organisation can achieve under the scheme run by the Department of Work and Pensions. As part of our commitment we operate a Disability Confident Interview Scheme - all candidates who declare a disability and meet the essential criteria for the role will be offered an interview.

It is important to note that there may be occasions where it is not practicable or appropriate to interview all disabled people who meet the essential criteria for the job. For example, in certain recruitment situations such as high‑volume, seasonal and high‑peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non‑disabled people. In these circumstances, the employer could select the candidates who best meet the essential criteria for the job, as they would do for non‑disabled applicants.

Advertisement Closing Date

We reserve the right to close this advertisement early if the maximum volume of applications has been reached. Candidates with unsubmitted applications will not be informed prior to the advert closing.

Please do not attach a CV/covering letter as these will not be used during the application process.