Cyber Forensic Examiner – Intermediate, Investigative

SENTINEL GROUP LLC; Chantilly (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

SENTINEL GROUP LLC in Chantilly, VA, seeks an Intermediate Cyber Forensic Examiner to independently conduct digital forensic examinations across endpoints, servers, mobile devices, and cloud environments. You will apply established methodologies to identify, preserve, and analyze evidence and prepare technically defensible findings.

You will work with incident-response teams, report findings to stakeholders, mentor junior staff, and stay current with emerging forensic methods and tools.

Qualifications

• 3+ years of digital forensics, cyber operations, incident response, or related field.
• Experience with forensic tools such as Cellebrite, FTK, EnCase, Magnet AXIOM, or Paladin.
• Knowledge of evidence handling, chain of custody, and file-system analysis.
• Must hold Top Secret security clearance; counterintelligence polygraph desired.

Responsibilities

• Independently conduct forensic examinations of workstations, servers, mobile devices, storage media, virtual machines, cloud environments, and other digital systems.
• Identify and acquire relevant digital evidence while preserving forensic integrity and maintaining complete chain-of-custody documentation.
• Perform forensic imaging and acquisition from physical, logical, virtual, mobile, and cloud-based sources.
• Conduct forensic timeline analysis and correlate evidence across multiple systems and data sources.
• Perform mobile-device forensic examinations, including analysis of application data, communications, location information, media, and device activity.
• Analyze network and security data to identify evidence of unauthorized access, persistence, lateral movement, data staging, exfiltration, or other malicious activity.
• Perform recovery and analysis of deleted, fragmented, concealed, encrypted, or otherwise obfuscated data where technically feasible.
• Utilize forensic suites and specialized tools to acquire, parse, search, correlate, and analyze digital evidence.
• Develop and document forensic examination procedures and analytical methodologies.
• Identify relevant artifacts and develop investigative hypotheses based on available evidence.
• Produce comprehensive forensic examination reports documenting methodology, evidence examined, findings, analytical reasoning, and conclusions.
• Brief technical and government stakeholders regarding forensic findings and investigative conclusions.
• Support incident-response investigations and collaborate with cybersecurity, network, system, and threat-analysis personnel.
• Review junior examiner work products and provide technical guidance and mentoring.
• Maintain knowledge of emerging operating systems, applications, devices, forensic artifacts, and anti-forensic techniques.

Skills

Digital forensics

Analytical thinking

Technical writing

Documentation

Education

Bachelor's degree

Tools

Cellebrite

FTK

EnCase

Magnet AXIOM

Paladin

Job description

SENTINEL GROUP LLC in Chantilly, VA, seeks an Intermediate Cyber Forensic Examiner to independently conduct digital forensic examinations across endpoints, servers, mobile devices, and cloud environments. You will apply established methodologies to identify, preserve, and analyze evidence and prepare technically defensible findings.

You will work with incident-response teams, report findings to stakeholders, mentor junior staff, and stay current with emerging forensic methods and tools.