Digital Forensic Examiner

MANTECH•Springfield, VA

17h•$114,600 - $190,200•Onsite

About The Position

MANTECH is seeking a motivated, customer-oriented CI Digital Forensics Examiner to join its team in Springfield, Virginia. The role supports critical counterintelligence (CI) mission functions through digital media acquisition, forensic examinations, and cyber incident assessments. The examiner works with Intelligence Community and law enforcement partners to investigate cyber threats, analyze network penetrations, and provide actionable forensic intelligence to protect national security systems. The position is onsite and requires an active TS/SCI clearance, with the ability to obtain or maintain a polygraph.

Requirements

High school diploma or GED and at least 7 years of hands-on digital forensics experience in counterintelligence or law enforcement investigations.
Demonstrated experience conducting computer forensics analysis within the Department of Defense or Intelligence Community.
Experience with advanced digital forensic tools and suites, including EnCase and Forensic Toolkit (FTK).
Ability to obtain and maintain a qualifying Digital Forensic Examiner certification from an accredited government, military, or industry source within six months of assignment.
Ability to obtain and maintain certification complying with DoD 8570.01-M Information Assurance Technical (IAT) Level II requirements within one year of assignment.
Proficiency with Microsoft Office (Word, Excel, and PowerPoint) and Analyst's Notebook.
Must possess an active TS/SCI clearance and be able to obtain or maintain a polygraph.

Nice To Haves

Bachelor’s degree in a Science, Technology, Engineering, or Mathematics (STEM) discipline.
Credentialed graduate of an accredited Federal CI, Federal Law Enforcement, DoD CI, or DoD Law Enforcement training academy, such as the FBI Academy or DCITA.
Active DoD Cyber Crimes Investigator certification or existing Digital Forensic Examiner certification.
Comprehensive knowledge of foreign adversary intelligence services, terrorist organizations, and cyber threats to DoD and IC partner networks.

Responsibilities

Perform digital media acquisition, imaging, and forensic analysis across Windows, Linux, and macOS platforms using industry-standard tools to investigate suspected cyber penetrations and malicious code.
Conduct forensic examinations of computers, mobile devices, networks, and digital media in support of CI incident assessments and foreign intelligence entity inquiries.
Write detailed forensic examination reports, weekly status updates, and Intelligence Information Reports documenting case backgrounds, technical findings, and investigative recommendations.
Prepare and deliver executive briefings on CI cyber products, technical findings, and investigation results to senior leadership, government leads, and operational stakeholders.
Coordinate enterprise incident response events and serve as a technical CI liaison between internal offices, including Insider Threat and CSOC, and external Intelligence Community partners.
Participate in DoD and IC working groups, technical exchanges, and cyber threat awareness briefings to share actionable technical threat intelligence.