Digital Media Exploitation Examiner

Peraton • Bethesda, MD

13d • Onsite

About The Position

Peraton is seeking a Senior Digital Media Exploitation Examiner for its Linthicum, Maryland office, supporting a Department of Defense customer. The role supports cyber investigations, digital forensics, cyber threat analysis, and mission operations in a collaborative environment. The examiner conducts the full lifecycle of digital exploitation, from evidence acquisition through analysis and reporting, serving as a subject matter expert and communicating technical findings to technical and non-technical audiences.

The position involves forensically sound examinations of computers, mobile devices, and removable media to support targeting, intelligence reporting, and network development. The examiner uses industry-standard tools and advanced techniques to extract, recover, and analyze data, identify malware or signs of unauthorized activity, document findings, review reports, and advise stakeholders on targeting, network development, reporting, evidence handling, and forensic examination practices.

Requirements

• Proficiency with industry-standard forensic tool suites such as EnCase, FTK, Magnet AXIOM, X-Ways Forensics, or Autopsy.
• Demonstrated mobile exploitation experience extracting and parsing iOS and Android devices using tools such as Cellebrite UFED/Physical Analyzer or GrayKey.
• Working knowledge of NTFS, FAT32, exFAT, EXT3/4, APFS, and HFS+ file systems and structures.
• Ability to identify full-disk, volume, and file-level encryption and evaluate appropriate key extraction or decryption workflows.
• In-depth knowledge of MD5, SHA-1, and SHA-256 hashing algorithms and their forensic applications.
• Experience conducting static and behavioral triage of malicious files, including string and header analysis and sandbox execution.
• Strong technical writing and briefing capabilities, including experience authoring formal forensic reports.
• Active Top Secret/SCI security clearance with a Polygraph.
• Current DoD 8570/8140 IAT Level II certification, such as CompTIA Security+, CySA+, or GICSP.
• Bachelor's degree and 8 or more years of relevant experience, or a Master's degree and 6 or more years of relevant experience. An additional 4 years of relevant experience or specialized training may be considered in lieu of a Bachelor's degree.

Nice To Haves

• Advanced industry certification such as GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), GIAC Advanced Smartphone Forensics (GASF), Cellebrite Certified Mobile Examiner (CCME), EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), or Certified Forensic Computer Examiner (CFCE).
• Proficiency in programming or scripting languages such as Python or PowerShell to automate exploitation workflows, parse novel artifacts, and process bulk data.
• Prior experience working within the Intelligence Community or supporting operational mission partners.
• Prior deployed experience conducting exploitation for operational mission partners in lab and field environments.
• Knowledge of or experience with offensive cyber, offensive supply chain, penetration testing, or targeting.
• Experience authoring finished intelligence reports and assessments.

Responsibilities

• Conduct forensically sound examinations of computers, smartphones, tablets, and other digital and mobile devices to support targeting, intelligence reporting, and network development.
• Use forensic tools and techniques to extract and recover data and analyze file systems, operating systems, and application data.
• Perform analysis and targeting, including timeline generation, file signature and hash analysis, email and communications analysis, and examination of large datasets.
• Identify and analyze malware and evidence of intrusion or unauthorized activity.
• Prepare technical reports documenting examination procedures, findings, and expert opinions for technical and non-technical audiences.
• Peer-review exploitation reports for technical accuracy, completeness, and adherence to standards.
• Maintain the chain of custody for digital evidence and associated documentation.
• Provide expert consultation on targeting, network development, reporting, digital evidence handling, and forensic examinations.
• Stay current with developments in digital exploitation technologies, trends, and methodologies.

Benefits

• Medical benefits
• Dental insurance
• Vision insurance
• Life insurance
• Health savings account
• Short- and long-term disability
• Employee Assistance Program (EAP)
• Parental leave
• 401(k)
• Paid time off for vacation
• Company-paid holidays
• Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior