Forensic Analyst II

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Operates in a leadership role, taking on responsibilities as a technical expert.

• Responsibilities encompass case assignment, case management, scene oversight, and similar tasks typically associated with a first-line supervisor.

• Functions at a senior level, applying widely accepted digital forensic principles for acquiring, collecting, preserving, and processing both structured and unstructured data according to established industry best practices and laboratory protocols.

• Manages digital forensics examinations throughout the entire lifecycle, which includes case planning, intake, acquisition, examination, analysis, extraction, presentation, disposition, and providing expert witness testimony.

• Offers support in identification and seizure, forensic data acquisition/imaging, and forensically-sound and non-forensic collection/capture of electronically stored information (ESI) from various file structures and sources, including Windows, MAC, Linux, and Unix-based systems, servers such as Exchange and Database, cloud-based storage, mobile devices, tablets, drones, and other digital storage media.

• Leverages extensive knowledge and experience in a diverse range of advanced computer and mobile technologies along with forensic theories to perform comprehensive forensic examinations/analyses, including processing allocated and unallocated space, file slack, data carving, and conducting timeline, Internet history, and registry analyses aimed at developing forensically sound evidence.

• Performs large-scale digital forensic examinations, including collection in a live client-server environment using validated remote forensic software.

• Recovers data, correlates information, prepares clear and comprehensive notes and reports of findings, and communicates results to legal staff, which includes legal declarations and expert witness testimony during trials for investigations and litigations.

• Utilizes industry-standard forensic and non-forensic tools such as EnCase, FTK, Harvester, Cellebrite UFED, and NUIX.

• Engages in research to maintain proficiency in current tools, techniques, and trends.

• Acts as a technical advisor and resource for forensic collection/processing activities as a digital forensics expert.

• Serves as a reference point for junior analysts and technicians, demonstrating the ability to lead forensic investigations in the field.

• Reviews and approves reports, notes, and case files prepared by junior analysts and technicians.

• Collaborates with fellow forensic analysts and technicians, law enforcement personnel, and legal experts to identify effective methods and procedures for recovering, preserving, and presenting computer evidence.

• Provides technical guidance and support to legal staff, ensuring proper precautions are taken to preserve electronic evidence and prevent spoliation.

• Adheres to established standards, policies, and procedures for the forensics laboratory, including accreditation requirements, supplements, criteria, and interpretations related to digital evidence.

• May oversee a team of digital forensic analysts.

⛳️ Requirements

• Ability to obtain and maintain a U.S. Government Public Trust clearance prior to commencing work.

• Authorized to work in the United States.

• Capable of working effectively in a fully remote environment.

• Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field; a Master’s degree in a relevant field is preferred along with 7 to 10 years of current experience in digital forensics collection and processing.

• The Contracting Officer may consider 10 years of relevant industry experience in Digital Forensics as a substitute for a degree.

• Must possess and maintain at least 2 of the following certifications: CompTIA™ A+, CompTIA™ Network+, CompTIA™ Server+; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE), or similar non-vendor specific certification; or vendor-specific certifications such as EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME).

• Extensive enterprise-level experience in conducting digital forensics collections and processing across various operating systems and hardware/software architectures (e.g., computers, mobile devices, file share, email, database servers, and cloud storage) is required.

• Proven senior-level experience utilizing industry-standard forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc., with the ability to articulate the processes performed by these tools.

• Demonstrated working knowledge of LAN/WAN/MAN network environments.

• Experienced in dead box, live, and hybrid data acquisition methodologies.

• Proven experience in the forensic, forensically sound, and non-forensic collection and processing of various enterprise e-mail and database systems, including Exchange, Lotus, SQL, Oracle, archiving systems, and backup systems.

• Experience in manually reconstructing a RAID array is required.

• Demonstrated ability to process large volumes of data.

• Knowledgeable in applying the Federal Rules of Evidence (FRE) to electronic evidence, with practical experience applying these rules within investigation or litigation frameworks.

• Experience in testifying and providing testimony in civil, criminal, regulatory, or administrative proceedings is essential.

• Strong project management skills with the capability to multitask and manage several projects simultaneously.

• Moderate travel is required.

🏝️ Benefits

• Health, Dental, and Vision coverage.

• 401(k) plan.

• Tuition Reimbursement program.

• Flexible Spending Account (FSA).

• 11 Paid Federal Holidays.

• 3 weeks of Paid Time Off.