Senior Digital Forensics Automation SME

Peraton•Linthicum, MD

7d•$135,000 - $216,000

About The Position

Peraton is seeking a Senior Digital Forensics Automation SME to optimize and modernize digital forensics workflows in support of a federal government customer. This role sits at the intersection of forensic operations, investigative workflow design, and lab automation — with a primary focus on reducing case backlogs, improving examiner efficiency, and standardizing processes across ICAC-style investigative workflows and tool-based forensic automation platforms. The SME will work directly with digital forensic examiners, investigators, and program leadership to identify inefficiencies, design scalable solutions, and implement repeatable, validated workflows that meet legal and accreditation standards. The SME will also support digital forensic criminal trials by ensuring forensic findings, methodologies, and automated workflows are thoroughly documented and defensible in federal court proceedings.

Requirements

Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. A degree in Computer Science, Digital Forensics, Criminal Justice, Information Technology, or a related field is highly desired. However, an additional four years of experience can be considered in lieu of a BS/BA degree.
5+ years of hands-on digital forensics experience, including direct experience with ICAC, child exploitation, or similar law enforcement investigative workflows
Demonstrated experience designing or improving forensic lab workflows and automation pipelines
Proficiency with forensic processing automation platforms and digital media analysis tools
Broad experience across industry-standard forensic tools for computer, mobile, and cloud evidence acquisition and analysis
Strong understanding of digital evidence handling, chain-of-custody requirements, and forensic best practices
Experience developing SOPs, training materials, or process documentation in a forensic or law enforcement environment
Active Secret clearance required at time of hire
Required Active Certification (at least one): EnCE, CFCE, CCE, MCFE, or equivalent digital forensics certification

Nice To Haves

Familiarity with Lean, Six Sigma, or other process improvement methodologies as applied to forensic lab or investigative operations
Knowledge of national hash databases and AI-driven media detection capabilities used in digital media investigations
Experience with rapid device triage tools and workflows for preliminary evidence assessment
Prior experience in a training, mentorship, or team lead capacity within a digital forensics unit
Familiarity with DOJ, ICAC program office, or federal law enforcement operational standards
Experience presenting workflow recommendations or performance metrics to senior leadership or government stakeholders

Responsibilities

Analyze existing digital forensics workflows to identify bottlenecks, redundancies, and opportunities for automation and process improvement
Design, build, and maintain automated forensic processing workflows that enable parallel, unattended evidence processing across multiple evidence types and platforms
Configure and optimize digital media analysis pipelines for large-scale investigations, including automated detection, hash matching, deduplication, and triage workflows
Support ICAC task force operations by standardizing investigative workflows for mobile forensics, cloud acquisition, peer-to-peer network investigations, and digital media triage
Develop, document, and maintain Standard Operating Procedures (SOPs) for digital evidence handling, processing, triage, and reporting — aligned with DOJ guidelines, ICAC program requirements, and evidence admissibility standards
Track and report on lab throughput, capacity utilization, and efficiency metrics; produce performance reports for program leadership
Evaluate new forensic tools and automation platforms for compatibility with existing workflows; serve as the primary liaison with vendors for updates, feature requests, and technical support
Develop and deliver training to forensic examiners and investigators on automated workflows, tool usage, and SOP adherence
Mentor junior examiners on best practices for tool-based workflows and process standardization
Ensure all workflows meet lab accreditation requirements (e.g., ASCLD, ISO 17025) and support legal defensibility of forensic findings
Support digital forensic criminal trials by preparing documentation of forensic methodologies, workflow processes, and findings suitable for court presentation; coordinate with legal teams and serve as a technical resource during proceedings