Mid-Level Digital Forensic Analyst

Metric Systems LLC is a direct-hire employer partner dedicated to helping companies connect with the right talent for their open roles. We are not a staffing agency -instead, we work alongside employers to identify strong candidates, streamline the hiring process, and support both sides through each step. Once hired, you become an employee of the client organization directly, ensuring a seamless transition into your new role and long-term career alignment. My client is seeking a Mid-Level Digital Forensic Analyst to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. This position is located in Arlington, VA and will be onsite 5 days a week. No hybrid/telework allowed. ** ** Responsibilities:

• Conduct forensic examinations of digital data from cellphones, tablets, computers, removable media, cloud sources, and other platforms.
• Use industry-standard forensic tools-such as Cellebrite (including Inseyets), Oxygen Forensic Detective, Magnet Forensics GrayKey and Axiom, Nuix, X-Ways, and similar for extraction and examination.
• Analyze data from various operating systems and applications, including Windows, macOS, iOS, Android, cloud services, and common backup formats.
• Produce clear, comprehensive reports that explain findings for investigators, prosecutors, and other stakeholders.
• Provide expert witness testimony, explaining examination procedures and technical findings to non-technical audiences in federal, state, and local proceedings.
• Apply recognized scientific practices to identify, analyze, interpret, and present digital evidence for criminal, civil, and administrative matters.
• Perform detailed, targeted examinations in line with investigative objectives, legal process, and search warrant limitations.
• Provide on-site support during search warrant executions by identifying, collecting, packaging, documenting, and preserving digital evidence while maintaining strict chain of custody.
• Work closely with program leadership and peers to maintain forensically sound procedures and best practices for acquisition, analysis, and presentation of digital evidence.
• Conduct peer reviews and quality checks of reports and artifacts to ensure accuracy, completeness, and clarity before customer delivery.
• Share lessons learned and emerging techniques with colleagues to enhance collective expertise.
• Stay current on developments in digital forensics, cybersecurity, forensic law, mobile devices and applications, social media platforms, and encryption/decryption methods.

• Bachelor’s degree and a minimum of 5 years with bachelor’s degree; 3 years with a Masters degree. o An additional 4 years of experience will be considered in lieu of degree/education.

• Must either possess and maintain, or obtain prior to starting date, one of the following professional certifications: o GIAC: GCFE, GASF, + Demonstrated proficiency with mobile and non-mobile forensic software tools such as Magnet Axiom, Cellebrite, and Oxygen, as well as advanced mobile extraction hardware and software.

• Working knowledge of Windows and MacOS, Apple iOS, Android, and their associated backup technologies.
• Experience writing detailed, technically accurate reports that clearly communicate complex digital forensic findings to non-technical audiences.
• Strong critical thinking, creativity, sound judgment, and awareness to recognize when to seek leadership guidance.
• Ability to collaborate effectively and professionally with leadership, peers, forensic analysts, law enforcement, prosecutors, CIF customers, and other stakeholders at all levels to deliver high quality- forensic products.
• Willingness and ability to travel for on-scene evidence seizures, training, and/or testimony.
• Commitment to staying current on advancements in digital forensics, cybersecurity, forensic law, mobile technologies, social media, applications, and encryption.
• U.S. Citizenship required.
• The ability to obtain an interim Secret security clearance before start date.