IT - Cyber Security Specialist IV

• Decrypt encrypted data from mobile devices, computers, and storage media.
• Recover deleted data not recognized by standard carving tools.
• Extract data from flash memory chips with custom or proprietary file systems.
• Collaborate with digital forensic examiners to support evidence recovery from locked or damaged devices.
• Research encryption implementations and storage architectures used in consumer and commercial devices to identify recovery pathways.
• Produce detailed technical reports documenting methodologies and findings suitable for federal court proceedings or intelligence products.

Education & Experience: A minimum of 8 years of experience with a BS/BA degree, 6 years with an MS/MA, or 3 years with a PhD is required. An additional four years of experience may be considered in lieu of a BS/BA degree. A degree in Mathematics, Computer Science, Cryptography, or Information Security is desired. A Top Secret clearance with SCI eligibility is required.

Technical Skills:

• Strong programming and scripting proficiency in Python, C++, Java, or similar languages.
• Experience decrypting data from mobile devices (Android/iOS), full-disk encryption (FDE), and file/container-level encryption schemes.
• Experience recovering deleted or fragmented data beyond the capabilities of standard forensic carving tools.
• Experience extracting data from NAND/NOR flash memory chips, including devices with custom or proprietary file systems.
• Familiarity with digital forensic tools and workflows (e.g., Cellebrite, GrayKey, Magnet AXIOM, EnCase, FTK, X-Ways).
• Low-level knowledge of common file systems including FAT, NTFS, EXT2/3/4, APFS, and proprietary embedded file systems.
• Experience supporting law enforcement or counterintelligence investigative operations., * Experience with hardware-based data recovery techniques including JTAG, chip-off, and ISP (In-System Programming).
• Background in reverse engineering storage protocols, firmware, or encryption implementations on embedded devices.
• Familiarity with legal frameworks governing lawful access and chain-of-custody requirements for recovered data.
• Prior experience supporting federal law enforcement customers.
• Experience testifying as an expert witness or providing technical declarations in federal proceedings.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at