> Markdown version of [/jobs/ext/569492-senior-digital-media-forensic-analyst-contingent](https://www.wearedevelopers.com/jobs/ext/569492-senior-digital-media-forensic-analyst-contingent). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Digital Media Forensic Analyst (Contingent)

- **Company:** Sphinx LLC
- **Location:** Fort Meade, MD, United States
- **Experience:** Expert
- **Salary:** $139,200.0 - $165,000.0
- **Contract:** Permanent contract
- **Skills:** Ufed, Microsoft Windows, Data Analysis, CompTIA Security+, Digital Forensics, Reverse Engineering, Malware
- **Published:** June 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=43e407db10a0babd

## About the Role

Do you have experience in Research?, Do you have a Master's degree?, * Active Top Secret/SCI security clearance with current CI Polygraph (within last 5 years)

 * Due to clearance requirements U.S. Citizenship is required
 * DoD Certified Digital Forensic Examiner (DFE), required at hire, non-negotiable
 * Minimum 2 years of host-based forensic experience;
 * Senior level relevant forensic experience: Master's Degree +8yrs or Bachelor's Degree +10yrs or Associate's Degree +12yrs or High School Diploma +14yrs
 * Operational mobile-device forensics experience (Cellebrite UFED, Oxygen Forensic Detective, or MSAB XRY), * Digital forensics certification: CFCE, GCFE/GCFA, EnCE, or ISFCE CCE
 * Malware analysis depth: GREM (GIAC Reverse Engineering Malware)
 * DC3 Cyber Training Academy graduate (Windows Forensic Examinations, Forensic Intrusions in a Windows Environment)
 * Anti-forensics detection expertise, with direct experience supporting Army CI/CT investigative missions
 * CompTIA Security+/Network+ (DoD 8140 baseline)

## Description

As a Senior Digital Media Forensic Analyst supporting U.S. Army Counterintelligence and Counterterrorism investigations, you will execute the full forensic-examination lifecycle evidence acquisition, in-depth analysis, and pre-trial-quality reporting with rigorous chain-of-custody discipline. You will also research and evaluate emerging forensic technologies, deploy and lead forensic training events, and provide operational security assessments that strengthen Army CI/CT mission outcomes.
WHAT YOU'LL DO

 * Perform all phases of forensic examination of digital media, on-site and off-site evidence acquisition/seizure, in-depth forensic analysis, and pre-trial-quality reporting
 * Maintain chain-of-custody and adhere to Federal Rules of Evidence and ISO 27037 throughout the examination lifecycle
 * Provide forensic support for incident response activities, intrusion events, and malware analysis in support of CI and CT investigations
 * Conduct mobile-device forensic extraction (logical, file-system, physical) using Cellebrite UFED, Oxygen Forensic Detective, or MSAB XRY
 * Execute timeline reconstruction across file-system, registry, browser, and mobile artifacts using log2timeline / Plaso
 * Perform memory forensics with Volatility / Rekall to recover credentials, encryption keys, and malware persistence indicators
 * Detect anti-forensic adversary tradecraft - timestomping, file-wiping, encryption attempts, steganography
 * Research, design, deploy, and lead forensic training events; evaluate emerging forensic technologies and provide adoption recommendations


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads)
- [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)