Digital Media Exploitation Examiner

Peraton • Bethesda, MD

14d • $135,000 - $216,000 • Onsite

About The Position

Peraton is seeking a Senior Digital Media Exploitation Examiner for its Linthicum, Maryland office, supporting a Department of Defense customer. The role contributes to cyber investigations, digital forensics, cyber threat analysis, and mission support in a collaborative environment. The examiner conducts the full lifecycle of digital exploitation, from acquisition through reporting, and applies technical expertise and a target-centric approach to complex cyber challenges. The role also requires communicating technical findings to both technical and non-technical audiences.

Requirements

• Proficiency with industry-standard forensic tool suites such as EnCase, FTK, Magnet AXIOM, X-Ways Forensics, or Autopsy.
• Mobile exploitation experience extracting and parsing iOS and Android devices using tools such as Cellebrite UFED/Physical Analyzer or GrayKey.
• Working knowledge of file systems and structures, including NTFS, FAT32, exFAT, EXT3/4, APFS, and HFS+.
• Ability to identify full-disk, volume, and file-level encryption and evaluate appropriate key extraction or decryption workflows.
• In-depth knowledge of MD5, SHA-1, and SHA-256 hashing and their forensic applications for data integrity verification and identifying known threat artifacts.
• Experience conducting static and behavioral triage of malicious files, including string analysis, header analysis, and sandbox execution.
• Strong technical writing and briefing capabilities, including experience authoring formal forensic reports.
• Active Top Secret/SCI security clearance with a Polygraph.
• Current DoD 8570/8140 IAT Level II certification, such as CompTIA Security+, CySA+, or GICSP.
• Bachelor's degree and 8 or more years of relevant experience, or a Master's degree and 6 or more years of relevant experience. An additional 4 years of relevant experience or specialized training may be considered in lieu of a Bachelor's degree.

Nice To Haves

• Advanced industry certifications such as GIAC Certified Forensic Examiner (GCFE) or Analyst (GCFA), GIAC Advanced Smartphone Forensics (GASF), Cellebrite Certified Mobile Examiner (CCME), EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), or Certified Forensic Computer Examiner (CFCE).
• Proficiency in programming or scripting languages such as Python or PowerShell to automate exploitation workflows, parse novel artifacts, and process bulk data.
• Prior experience in the Intelligence Community or supporting operational mission partners.
• Prior deployed experience conducting exploitation for operational mission partners in lab and field environments.
• Knowledge of or experience with offensive cyber, offensive supply chain, penetration testing, or targeting.
• Experience authoring finished intelligence reports and assessments.

Responsibilities

• Conduct forensically sound examinations of digital and mobile devices, including computers, smartphones, and tablets, to support targeting, intelligence reporting, and network development.
• Use forensic tools and techniques to extract and recover data and analyze file systems, operating systems, and application data.
• Perform comprehensive analysis and targeting, including timeline generation, file signature and hash analysis, email and communication analysis, and examination of large, complex datasets.
• Identify and analyze malware and evidence of intrusion or unauthorized activity.
• Prepare technical reports documenting examination procedures, findings, and expert opinions for technical and non-technical audiences.
• Peer-review exploitation reports for technical accuracy, completeness, and compliance with established standards.
• Maintain chain of custody for digital evidence and related documentation.
• Advise stakeholders on TTPs for targeting, network development, reporting, evidence handling, and forensic examinations.
• Keep current with developments in digital exploitation technology, trends, and methodologies.

Benefits

• Medical benefits
• Dental benefits
• Vision benefits
• Life insurance
• Health savings account
• Short- and long-term disability
• Employee assistance program
• Parental leave
• 401(k)
• Paid time off for vacation
• Company-paid holidays
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay

What This Job Offers

• Job Type: Full-time
• Career Level: Senior