Digital Forensics Examiner

The Digital Forensics Examiner analyzes electronic media for a federal government agency in support of sensitive, ongoing criminal investigations and operations. The role examines digital devices, preserves and analyzes evidence, recovers data, and documents findings for courtroom presentation. The examiner may be required to testify as an expert witness in federal or military court., * Perform digital evidence preservation, forensic analysis, data recovery, tape recovery, email extraction, and database examination.

• Use forensic tools and techniques to crack file and system passwords, detect steganography, and recover deleted, fragmented, and corrupted data from digital media.

Evidence Handling and Documentation

• Gather and handle digital evidence using proper evidence custody and control procedures.
• Document procedures and findings in a manner suitable for courtroom presentation.
• Prepare comprehensive written notes and reports.
• Testify as an expert witness in federal or military court when required.

Computer Forensics, Security Clearance, Secret Clearance, Federal Government, Digital Media, Computer Forensics, Forensic Science, Data Recovery, File Systems, Computer Science, * Meet one of the following education and experience combinations: [Required]

• Bachelor’s degree and 8+ years of relevant experience.
• Master’s degree and 6+ years of relevant experience.
• An additional 4 years of relevant experience or specialized training may be considered in lieu of a bachelor’s degree.
• Formalized training in computer science, forensics, or related areas. [Required], * At least 4 years of experience conducting digital forensic analysis across a variety of media, including Windows, OS X, Linux, Android, and iOS. [Required]
• Experience supporting criminal investigations. [Required]
• Experience writing technical reports detailing analysis results. [Required]
• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite, and other forensic tools. [Required]
• Knowledge of and experience with virtual environments. [Required], * Understanding of network protocols and networking concepts. [Required], + Digital Forensic Examiner (DFE).
• Cyber Crime Investigator (CCI).
• Computer Hacking Forensic Investigator (CHFI).
• International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) or Certified Forensic Computer Examiner (CFCE).
• GIAC Certified Forensic Examiner (GCFE).
• GIAC Certified Forensic Analyst (GCFA).
• Mobile device forensic tool certifications, such as Cellebrite Certified Mobile Examiner (CCME), XRY, or Oxygen Forensic® Certified Examiner (OFCE).
• Computer forensic tool certifications, such as EnCase Certified Examiner (EnCE), X-Ways Professional in Evidence Recovery Techniques (X-PERT), or Magnet Certified Forensic Examiner (MCFE).
• Data recovery or advanced data acquisition certifications.
• Submit a copy of the certification with the resume. [Required], * Previous law enforcement experience.
• Experience performing technical or peer reviews.
• Experience mentoring other examiners.
• Experience testifying as an expert witness in criminal trials.