Forensic Examiner - multiple levels - CLEARED

Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position.

Responsibilities

Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data; Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices; Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction; Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization; Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements; Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports; May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices; May participate in technical peer review of forensic reports and incorporate review comments; May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified; May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation; May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators; May provide technical input to training, mentorship, process-improvement, and lessons-learned activities

Requirements

Must be a US Citizen; Must have SECRET clearance with active polygraph (Top Secret with SCI eligibility preferred); Minimum twelve (12) years of hands-on digital forensics experience; Experience levels: Level 04 requires 12 years, Level 03 requires 8 years, Level 02 requires 5 years, Level 01 requires 2 years; Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field (or an additional 4 years of hands-on digital forensics experience in lieu of a degree, for a total of 12 years); Verifiable completion within the last 3 years of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3's 40-hour Forensic Trial Training course), if assigned to certain job tasks; Possession of at least one active certification from the listed options (e.g., DFE, GCFA, GCFE, EnCE, CFCE, CCME, OFCE, X-PERT, MCFE) or an equivalent certification approved by the COR

Nice to have

Top Secret clearance with SCI eligibility; Experience using commercial and open-source forensic tools such as EnCase, FTK, X-Ways, and approved Government tools

Benefits

Affordable healthcare options with 80% employer paid premium plus a company-funded HSA; Comprehensive dental insurance; Vision with 80% employer paid premium; Employer paid life insurance 100%; Employer paid short-term and long-term disability 100%; Annual training, continued education, and professional memberships reimbursement; Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation; Annual reimbursement for technology (phones, computers, printers, etc.); 401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment); Professional development investment and paid time off for training; Team building events throughout the year; Leadership team engagement and mentorship; Performance recognition program; Complimentary branded apparel