Senior Digital Forensic Analyst

Peraton•Arlington, VA

10d•Onsite

About The Position

Peraton is currently seeking a Senior Digital Forensic Analyst for its' Federal Strategic Cyber programs. This is a full-time, on-site position located in Arlington, VA. The Senior Digital Forensic Analyst will serve as a senior-level expert to support the CIF program, possessing the ability and skillset to provide in-depth digital forensic analysis of mobile devices, electronic storage devices, cloud, server, and personal computer systems. The role involves conducting forensic examinations of digital evidence using recognized scientific best practices for recognition, collection, analysis, and interpretation for legal or regulatory purposes. The analyst will perform in-depth forensic analysis of various operating systems (Android, Apple iOS/MAC, Microsoft Windows, Linux) and file systems (APFS, NTFS, ExFAT, HFS/+, EXT2/3/4, FAT/FAT32), as well as system and third-party application databases. As a tool-agnostic examiner, maintaining proficiency in industry-standard forensic hardware and software tools (e.g., Magnet Axiom, Cellebrite, EnCase, X-Ways, Nuix) and mobile advanced extraction tools (e.g., Graykey, Cellebrite Premium) is crucial. The position requires maintaining relevant certifications, providing on-scene support during search warrants for evidence collection and handling, offering expertise in mobile device and computer system triaging (encryption, RAM captures, etc.), and producing comprehensive notes and reports for judicial proceedings, including expert witness testimony. Collaboration with government and contractor leadership, forensic analysts, law enforcement, and prosecutors is essential to ensure forensically sound procedures. The analyst must stay abreast of new developments in digital forensics, cybersecurity, and related technologies.

Requirements

Bachelor’s degree and a minimum of 9 years’ experience; 7 years with a Masters degree. An additional 4 years of experience may be considered in lieu of the bachelors degree.
Relevant experience as a digital forensic examiner in performing both mobile and non-mobile analysis in a digital forensic laboratory.
Must possess: one of the following approved forensic certifications : GIAC: GCFE, GASF IACIS: CFCE, ICMDE NCFI: BCERT, MDE DC3: CDFE, CDMC Opentext: EnCE Cellebrite: [CCO & CCPA], CCME Oxygen Forensics: OFC Magnet Forensics: MCFE
Demonstrate in-depth knowledge if forensic analysis of mobile device hardware, third-party applications, Apple iOS and Android-based operating systems; Apple Macintosh, Linux and Microsoft Windows operating systems, Windows Registry, Android Debug Bridge (ADB); Apple iTunes and iCloud; various computer file systems.
Experience in providing on-scene triaging, processing, handling, and packaging of electronic/digital evidence (chain of custody) during search and seizure warrants.
Demonstrate knowledge and experience in using various forensic software tools such as Magnet Axiom, Cellebrite Inseyets PA, Oxygen Forensic Detective, Nuix, X-ways, EnCase and with mobile advanced extraction tools such as GrayKey and Cellebrite Premium.
Experience writing detailed notes and reports that translate complex technical information to non-technical audiences.
Critical, creative, and sound decision-making skills, and the situational awareness to know when to involve program leadership for guidance.
The ability to travel for on-scene seizures of digital evidence, training, and/or testimony.
The ability to work with individuals at all levels within and outside the organization and to deal tactfully, courteously, and professionally with CIF end-customers.
U.S. citizenship required.
The ability to obtain an interim Secret clearance prior to being able to start.
The ability to obtain a final Top-Secret security clearance.

Responsibilities

Serve as a Senior-level Digital Forensic Analyst to support the CIF program with the ability and skillset to provide in-depth digital forensic analysis of mobile devices, electronic storage devices, cloud, server, and personal computer systems.
Conduct forensic examinations of digital evidence through the application of recognized scientific best practices for the recognition, collection, analysis, and interpretation of digital evidence for criminal and civil law or regulatory purposes.
Leverage existing skillsets to perform in-depth forensic analysis of various operating systems including Android, Apple iOS/MAC, Microsoft Windows, and Linux based operating systems.
Leverage existing skillsets to perform in-depth forensic analysis of file systems including APFS, NTFS, ExFAT, HFS/+, EXT2/3/4, and FAT/FAT32.
Leverage existing skillsets to perform in-depth forensic analysis of system and third-party application databases.
As a tool-agnostic examiner, maintain proficiency in the use of industry-standard forensic hardware and software tools such as Magnet Axiom, Cellebrite Inseyets, PA/UFED, Oxygen Forensic Detective, EnCase, X- Ways, Nuix and with mobile advanced extraction tools such as Graykey and Cellebrite Premium
Maintain non-vendor and vendor specific certifications related to job duties.
Provide on‐scene support during the execution of search warrants with the identification, collection, packaging, handling, and chain-of-custody procedures of digital evidence.
Provide on-scene expertise and triaging guidance of mobile device and running computer systems regarding encryption, RAM captures, signal-blocking, biometrics, pin-locks, and field acquisition considerations.
Produce comprehensive notes, reports, and illustrative exhibits for federal, state, and local judicial proceedings; provide expert witness testimony to explain examination interpretations and conclusions from forensic examinations to a lay audience.
Collaborate with program government and contractor leadership, forensic analysts, law enforcement officers, prosecutors, and other stakeholders to ensure that CIF maintains forensically sound procedures and best practices in the imaging, analysis, and presentation of digital evidence.
Stay abreast of new developments and trends in digital forensics, cybersecurity, forensic law, mobile devices, social media tools, mobile applications, and encryption technologies.