Computer Specialist * Network and Digital Forensics Examiner (Gr with Security Clearance

Forensic Focus; Great Lakes (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

Forensic Focus is seeking an experienced digital forensics examiner to support NCIS in analyzing computers, networks, and digital media for criminal and intelligence cases.

The role includes evidence collection, intrusion analysis, log review, SQL querying, and coordination with field agents, with duties extending to testifying as an expert witness in court.

Qualifications

• 5+ years using Cellebrite UFED4PC/Physical Analyzer, FTK and/or OSForensics.
• Familiarity with Windows, Linux/Unix and Mac systems.
• Knowledge of network security devices.
• DCITA DoD Digital Forensic Examiner certification required.
• FBI CART certification required.
• SANS FOR500/585 and Cellebrite CCO/CCPA preferred.

Responsibilities

• Conduct forensic examinations of computers, networks and digital media involved in criminal or intelligence cases.
• Evidence collection, intrusion analysis, log review and SQL querying.
• Liaise with field agents and testify as an expert witness in court proceedings.

Skills

Cellebrite UFED4PC/Physical Analyzer

FTK

OSForensics

Windows

Linux/Unix

Mac OS

Network security

Education

DCITA DoD Digital Forensic Examiner

FBI CART certification

SANS FOR500

SANS FOR585

Cellebrite CCO/CCPA

Tools

Cellebrite CCO/CCPA

SANS FOR500

SANS FOR585

Job description

The Role

This position supports NCIS by conducting forensic examinations of computers, networks and digital media involved in criminal or intelligence cases. Duties include evidence collection, intrusion analysis, log review, SQL querying, liaison with field agents and testifying as an expert witness in court proceedings.

Skills & Experience

Requires five-plus years using Cellebrite UFED4PC/Physical Analyzer, FTK and/or OSForensics, familiarity with Windows, Linux/Unix and Mac systems, and network security devices. DCITA DoD Digital Forensic Examiner or FBI CART certification required, with SANS FOR500/585 and Cellebrite CCO/CCPA preferred.

Who It Suits

Ideal for a seasoned forensic examiner with active TS clearance and SCI eligibility who is comfortable working within law enforcement protocols, testifying in court, and collaborating closely with federal investigative agents.