Imaging & Extraction Technician

Peraton•Linthicum, MD

5d•Onsite

About The Position

Peraton is looking for an Imaging & Extraction Technician to process digital evidence in support of one of our government customers. This role involves following established imaging and extractions processes to produce digital evidence ready for forensic examination. The technician will verify legal authority before device acquisition, determine the required acquisition method, verify the integrity of acquired evidence through device hashing, and route damaged devices for repair if necessary for data extraction. Accurate and detailed documentation of all imaging and extraction actions is crucial, as is adherence to procedures to ensure chain-of-custody. This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.

Requirements

Active Top Secret clearance with SCI eligibility.
Bachelor’s degree and 5+ years experience, or Master’s degree and 3+ years experience, or PhD and 0 years experience.
Proficient with hardware imaging devices such as Logicube Falcon-Neo, Tableau TD3, Cellebrite and write blockers such as Tableau and Wiebetech.
Demonstrates proficiency with software tools such as FTK Imager, EnCase, Axiom, DumpIt, Cellebrite, XRY, Oxygen and Android Debug Bridge (ADB).
Formalized technical training in the areas of digital forensics, computer science, etc.
Experience writing Technical Reports and documenting procedures.

Nice To Haves

A degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Data Science, or Software Engineering is highly desired.
In lieu of a degree in one these fields of study, an additional 4 years of recent relevant experience or specialized training may be considered.
Experience working in an ISO 17025 accredited lab environment.
Experience working at the Defense Cyber Crime Center (DC3) as a Digital Forensics Examiner.
Experience testifying during military, civil, criminal, or administrative litigation as an expert witness.
One of the following active certifications: RCCE Level 1, CFR, CHFI, CySA+, GCFA, GCFE, PenTest+, or DC3 Digital Forensics Examiner Certificate.

Responsibilities

Follows established imaging and extractions process to produce digital evidence ready for forensic examination.
Verifies legal authority prior to device acquisition.
Determines acquisition method required.
Verifies integrity of acquired evidence through device hashing.
Routes damaged devices to hardware repair tech if repair is required for data extraction.
Properly documents all imaging and extraction actions in detail.
Follows procedures to ensure chain-of-custody.