Imaging & Extraction Technician

Peraton•Linthicum, MD

3d•Onsite

About The Position

Peraton is looking for a n Imaging & Extraction Technician to process digital evidence in support of one of our government customers. Follows established imaging and extractions process to produce digital evidence ready for forensic examination. Verifies legal authority prior to device acquisition, determines acquisition method , verifies integrity of acquired evidence through device hashing, routes damaged devices to hardware repair tech if repair is for data extraction. Properly documents all imaging and extraction actions in detail. Follows procedures to ensure chain-of-custody. This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.

Requirements

Active Top Secret clearance with SCI eligibility.
Bachelor’s degree and 5+ years experience, or Master’s degree and 3+ years experience, or PhD and 0 years experience.
Proficient with hardware imaging devices such as Logicube Falcon-Neo, Tableau TD3, Cellebrite and write blockers such as Tableau and Wiebetech.
Proficient with software tools such as FTK Imager, EnCase, Axiom, DumpIt, Cellebrite, XRY, Oxygen and Android Debug Bridge (ADB).
Formalized technical training in the areas of digital forensics, computer science, etc.
Experience writing Technical Reports and documenting procedures.

Nice To Haves

A degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Data Science, or Software Engineering is highly desired.
In lieu of a degree in one these fields of study, an additional 4 years of recent relevant experience or specialized training may be considered.
Experience working in an ISO 17025 accredited lab environment.
Experience working at the Defense Cyber Crime Center (DC3) as a Digital Forensics Examiner.
Experience testifying during military, civil, criminal, or administrative litigation as an expert witness.
One of the following active certifications: RCCE Level 1, CFR, CHFI, CySA +, GCFA, GCFE, PenTest +, or DC3 Digital Forensics Examiner Certificate.

Responsibilities

Follows established imaging and extractions process to produce digital evidence ready for forensic examination.
Verifies legal authority prior to device acquisition.
Determines acquisition method.
Verifies integrity of acquired evidence through device hashing.
Routes damaged devices to hardware repair tech if repair is for data extraction.
Properly documents all imaging and extraction actions in detail.
Follows procedures to ensure chain-of-custody.