Digital Forensics Examiner Team Lead

Peraton•Linthicum, MD

18h•Onsite

About The Position

Peraton is looking for a Digital Forensic Analyst and Team Lead in support of a DoW customer to analyze electronic media in support of a federal government agency, focused on sensitive on-going criminal investigations and operations. Using a wide variety of forensic tools, the Digital Forensic Analyst examines the hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence that could be used in a court of law. Performs forensic analysis of digital information and gathers and handles evidence. Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Employs forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types. Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. The Team Lead aspects of the position will be responsible for the direct management of five or more digital forensic examiners. May be required to testify in federal/military court as expert witnesses. Location: Baltimore metropolitan area, on-site. Must pass the customer’s Mentorship Program within 4 months.

Requirements

Bachelor’s degree and 8+ years of experience; OR Master’s Degree and 6+ years of experience.
Degree must be in Computer Science, Cybersecurity, Information Technology, Information Systems, Data Science, Mathematics, or Software Engineering.
In lieu or a Bachelor's degree in one of these fields, an additional 4 years of relevant experience or training is required along with one of the following certifications: DC3 Digital Forensic Examiner (DFE), CHFI, PenTest+, RCCE Level 1, CFR, CySA+, GCFA, or GCFE.
One or more of the following certifications: Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications.
At least 5 years experience conducting digital forensic analysis on a variety of media, including Windows, OS X, Linux, Android and iOS.
Experience directly managing five or more digital forensic examiners or other technical staff.
Experience in supporting criminal investigations.
Experience writing Technical Reports, detailing results of analysis.
Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools.
Formalized training in the areas of computer science, forensics, etc.
Understanding of network protocols and networking concepts.
Knowledge of and experience with virtual environments.
Active TS clearance, SCI eligible.

Nice To Haves

Previous Law Enforcement experience.
Experience in performing technical reviews or peer reviews.
Experience mentoring other examiners.
Experience testifying as an expert witness in support of criminal trials.

Responsibilities

Analyze electronic media in support of a federal government agency, focused on sensitive on-going criminal investigations and operations.
Examine hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence.
Perform forensic analysis of digital information and gather and handle evidence.
Perform digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination.
Employ forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types.
Observe proper evidence custody and control procedures.
Document procedures and findings in a manner suitable for courtroom presentation.
Prepare comprehensive written notes and reports.
Directly manage five or more digital forensic examiners.
Testify in federal/military court as expert witnesses.