Digital Forensic Examiner

Archer; Springfield (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

Archer in Springfield, VA seeks a CI Digital Forensics Examiner to join a team supporting critical national security missions. You will acquire and analyze digital media, perform forensic examinations, and produce actionable intelligence for leadership and IC partners.

The role requires DoD/IC experience, proficiency with EnCase and FTK, and the ability to obtain DoD 8570 IAT II certification within a year. A TS/SCI clearance is required for this position.

Qualifications

• High School Diploma or GED with 7+ years of hands-on digital forensics in CI or law enforcement.
• Experience with DoD/IC environments and advanced forensic tools.
• Ability to obtain DoD 8570.01-M IAT II certification within 12 months.

Responsibilities

• Perform digital media acquisition, imaging, and forensic analysis across Windows, Linux, and macOS.
• Conduct in-depth examinations of computers, mobile devices, networks, and digital media.
• Author detailed forensic reports, weekly status updates, and investigative recommendations.
• Prepare and deliver executive briefings on CI cyber products and findings.
• Coordinate incident response events and liaise with IC partners and internal offices.
• Participate in DoD and IC working groups and cyber threat briefings.

Skills

Digital forensics

CI/Law enforcement

EnCase

FTK

Analyst's Notebook

Education

High School Diploma/GED

Bachelor’s degree STEM (preferred)

Tools

EnCase

FTK

Microsoft Office

Analyst's Notebook

Job description

Archer is collaborating with MANTECH to connect them with exceptional professionals for this role.

MANTECH seeks a motivated, career and customer-oriented CI Digital Forensics Examiner to join our team in Springfield, VA.

You will support critical Counterintelligence (CI) mission functions by conducting comprehensive digital media acquisitions, forensic examinations, and cyber incident assessments. In this role, you will collaborate with Intelligence Community and law enforcement partners to investigate cyber threats, analyze network penetrations, and deliver actionable forensic intelligence that protects national security systems.

Responsibilities Include But Are Not Limited To

• Perform digital media acquisition, imaging, and forensic analysis across Windows, Linux, and macOS platforms using industry-standard tools to investigate suspected cyber penetrations and malicious code.
• Conduct in-depth forensic examinations of computers, mobile devices, networks, and digital media in support of CI incident assessments and foreign intelligence entity inquiries.
• Author detailed forensic examination reports, weekly status updates, and Intelligence Information Reports documenting case backgrounds, technical findings, and investigative recommendations.
• Prepare and deliver executive briefings on CI cyber products, technical findings, and investigation results to senior leadership, government leads, and operational stakeholders.
• Coordinate enterprise incident response events and serve as a technical CI liaison between internal offices (such as Insider Threat and CSOC) and external Intelligence Community (IC) partners.
• Participate in DoD and IC working groups, technical exchanges, and cyber threat awareness briefings to share actionable technical threat intelligence.

Minimum Qualifications

• High School Diploma/GED and 7+ years of hands-on digital forensics experience in counterintelligence (CI) or law enforcement investigations.
• Demonstrated experience conducting computer forensics analysis within the Department of Defense (DoD) or Intelligence Community (IC).
• Demonstrated experience with advanced digital forensic tools and suites, including EnCase and Forensic Toolkit (FTK).
• Ability to obtain and maintain a qualifying Digital Forensic Examiner certification from an accredited government, military, or industry source within six months of assignment.
• Ability to obtain and maintain certification complying with DoD 8570.01-M Information Assurance Technical (IAT) Level II requirements within one year of assignment.
• Proficiency and experience in utilizing common analytical software and office productivity tools, including Microsoft Office (Word, Excel, PowerPoint) and Analyst's Notebook.

Preferred Qualifications

• Bachelor’s degree in a Science, Technology, Engineering, or Mathematics (STEM) discipline.
• Credentialed graduate of an accredited Federal CI, Federal Law Enforcement, DoD CI, or DoD Law Enforcement training academy (e.g., FBI Academy, DCITA).
• Possession of an active DoD Cyber Crimes Investigator certification or existing Digital Forensic Examiner certification.
• Comprehensive knowledge of foreign adversary intelligence services, terrorist organizations, and cyber threats posed to DoD and IC partner networks.

Clearance Requirements

• Must possess an active TS/SCI with the ability to obtain/maintain a Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, and must be able to exchange accurate information in these situations.