Digital Media Forensics Examiner

Peraton•Bethesda, MD

12d•Onsite

About The Position

Peraton is seeking a Digital Media Forensics Examiner with a strong commitment to teamwork to join our team in Bethesda, MD. This role will be responsible for providing forensic examinations on a variety of media to include hard drives, removable media, cards, and mobile devices. A commitment to fulfilling temporary duty (TDY) deployments, ranging from 5 to 90 days, is required to support customer training and operational objectives. The examiner will be able to write examination reports for both high level and technical audiences, documenting opinions and interpretations when required. Responsible for performing peer reviews on reports and providing the customer with recommendations on TTPs (Tactics, Techniques, and Procedures) regarding digital forensic examinations. This position requires full-time, onsite attendance Monday through Friday in Bethesda, MD.

Requirements

Demonstrated experience in digital forensics (exploitation and examination).
Demonstrated experience in mobile device data extraction and analysis.
Experience with file system forensics.
Understanding of iOS and Android operating systems and applications.
Understanding of managing complex, large data set analysis.
In-depth experience with timeline analysis.
Experience with forensic media imaging.
Experience with email analysis.
Experience with signature and hash analysis.
Demonstrated experience with forensic tools such as EnCase, Forensic Toolkit (FTK), and X-Ways Forensics, Axiom, Cellebrite, GrayKey.
Strong verbal and written communication skills with technical report writing experience.
Active IAT Level II (CompTIA Security+ preferred) certification.
Active Top Secret/SCI clearance with CI Poly.
Bachelor's degree and 8+ years experience, or Master's degree and 6+ years experience, or PhD and 3+ years experience.
A degree in Information Systems, Information Technology, Cybersecurity, Computer Science, Software Engineering, Mathematics, or Data Science is highly desired.
In lieu of a degree, an additional 4 years of relevant work experience or specialized training is required.

Nice To Haves

Industry-specific certifications such as Certified Forensic Computer Examiner (CFCE), EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), GIAC Certified Forensic Examiner (GCFE), and/or DoD-DFE.
Intelligence Community (IC) experience.
Forensic tool and script development.
Programming experience.

Responsibilities

Provide forensic examinations on a variety of media including hard drives, removable media, memory cards, and mobile devices.
Fulfill temporary duty (TDY) deployments, ranging from 5 to 90 days.
Write examination reports for both high level and technical audiences, documenting opinions and interpretations.
Perform peer reviews on reports.
Provide the customer with recommendations on TTPs (Tactics, Techniques, and Procedures) regarding digital forensic examinations.