Clearance: TS/SCI with Poly to start

Conducts forensic examination processes on a variety of media to include hard drives, removable media, memory cards, and mobile devices. Able to write examination reports for both high level and technical audiences, documenting opinions and interpretations when required. Conducts peer reviews on reports and provides the customer with recommendations on TTPs (Tactics, Techniques, and Procedures) regarding digital forensic exploitation and examination.

Required Skills:

• Demonstrated experience in digital forensics (exploitation and examination)
• Demonstrated experience in mobile device data extraction and analysis
• Experience with file system forensics
• Understanding of iOS and Android operating systems and applications
• Understanding of managing complex, large data set analysis
• In-depth experience with timeline analysis
• Experience with forensic media imaging
• Experience with email analysis
• Experience with signature and hash analysis
• Demonstrated experience with forensic tools such as EnCase, Forensic Toolkit (FTK), and X-Ways Forensics, Axiom, Cellebrite, GrayKey
• Strong verbal and written communication skills with technical report writing experience
• DOD 8570 Compliance Cert required to start

Desired Skills:

• Industry-specific certifications such as Certified Forensic Computer Examiner (CFCE), EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), GIAC Certified Forensic Examiner (GCFE), and/or DoD-DFE
• Intelligence Community (IC) experience
• Forensic tool and script development
• Programming experience