Digital Forensics, Advisor

Peraton

16h•Onsite

About The Position

Peraton is seeking a Digital Forensic Examiner to support the Air Force Office of Special Investigations at Joint Base San Antonio-Lackland. This role is crucial for sensitive, ongoing criminal investigations and operations. The examiner will utilize a wide array of forensic tools to acquire and analyze data from various electronic devices, including computers, storage devices, and cell phones, to uncover evidence for legal proceedings. Responsibilities include performing forensic analysis, gathering and handling evidence, digital evidence preservation, data recovery, tape recovery, email extraction, and database examination. The role involves using forensic tools to crack passwords, detect steganography, and recover deleted or corrupted data. Maintaining proper evidence custody and control, documenting procedures and findings for court presentation, and preparing comprehensive reports are key aspects of this position. There is a possibility of testifying in federal/military court as an expert witness.

Requirements

Associates degree and 10+ years of experience; OR Bachelor’s degree and 8+ years of experience; OR Master’s Degree and 6+ years of experience; OR 3 years with PhD.
Degree must be in Computer Science, Cybersecurity, Information Technology, Information Systems, Data Science, Mathematics, or Software Engineering.
In lieu or a Bachelor's degree in one of these fields, an additional 4 years of relevant experience or specialized training is required along with one of the following certifications: DC3 Digital Forensic Examiner (DFE), CHFI, PenTest+, RCCE Level 1, CFR, CySA+, GCFA, or GCFE.
Required Forensic Certification: One or more of the following - Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications.
Can satisfy both required certification and certification in lieu of degree.
At least 3 years experience conducting digital forensic data acquisition and analysis on a variety of media, including Windows, OS X, Linux, Android and iOS.
Experience in supporting criminal investigations.
Experience writing Technical Reports, detailing results of analysis.
Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, GrayKey. Cellebrite and other forensic tools.
Formalized training in the areas of computer science, forensics, etc.
Knowledge of and experience with virtual environment.
Minimum Active TS clearance with eligibility to obtain SCI.

Responsibilities

Acquire/extract data and perform analysis on hard drives of computers, storage devices, cell phones, PDAs, or any electronic device that may hold evidence.
Perform forensic analysis of digital information and gather and handle evidence.
Perform digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination.
Employ forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media.
Observe proper evidence custody and control procedures.
Document procedures and findings in a manner suitable for courtroom presentation.
Prepare comprehensive written notes and reports.
May be required to testify in federal/military court as expert witnesses.