Digital Forensic Examiner

MANTECH; Springfield (VA); On-site; USD 125,000 - 190,000; Full time

Job summary

MANTECH seeks a motivated CI Digital Forensics Examiner in Springfield, VA to support critical national security missions. You will conduct digital media acquisitions, forensic examinations, and cyber incident assessments, working with IC and law enforcement partners to produce actionable forensic intelligence.

The role requires DoD/IC experience, certification readiness (IAT II), proficiency with EnCase/FTK, and the ability to prepare detailed reports and executive briefings for senior

Qualifications

• 7+ years of hands-on digital forensics experience in counterintelligence (CI) or law enforcement investigations.
• Experience conducting computer forensics analysis within DoD or IC.
• Proficiency with EnCase and FTK and ability to obtain DoD IAT II certification within 12 months.
• Ability to obtain DoD cyber forensics certifications and maintain TS/SCI clearance with polygraph.

Responsibilities

• Perform digital media acquisition, imaging, and forensic analysis across multiple platforms.
• Conduct forensic examinations of computers, mobile devices, networks, and digital media for CI investigations.
• Author detailed forensic reports, weekly updates, and Intelligence Information Reports.

Skills

Forensics analysis

Executive briefings

Report writing

Cyber incident analysis

Education

High School Diploma

DoD 8570.01-M IAT II certification

Digital Forensic Examiner certification

Bachelor’s degree (preferred)

Tools

EnCase

FTK

Analyst's Notebook

Microsoft Office

Job description

MANTECH seeks a motivated, career and customer-oriented CI Digital Forensics Examiner to join our team in Springfield, VA.

You will support critical Counterintelligence (CI) mission functions by conducting comprehensive digital media acquisitions, forensic examinations, and cyber incident assessments. In this role, you will collaborate with Intelligence Community and law enforcement partners to investigate cyber threats, analyze network penetrations, and deliver actionable forensic intelligence that protects national security systems.

Responsibilities Include But Are Not Limited To

• Perform digital media acquisition, imaging, and forensic analysis across Windows, Linux, and macOS platforms using industry-standard tools to investigate suspected cyber penetrations and malicious code.
• Conduct in-depth forensic examinations of computers, mobile devices, networks, and digital media in support of CI incident assessments and foreign intelligence entity inquiries.
• Author detailed forensic examination reports, weekly status updates, and Intelligence Information Reports documenting case backgrounds, technical findings, and investigative recommendations.
• Prepare and deliver executive briefings on CI cyber products, technical findings, and investigation results to senior leadership, government leads, and operational stakeholders.
• Coordinate enterprise incident response events and serve as a technical CI liaison between internal offices (such as Insider Threat and CSOC) and external Intelligence Community (IC) partners.
• Participate in DoD and IC working groups, technical exchanges, and cyber threat awareness briefings to share actionable technical threat intelligence.

Minimum Qualifications

• High School Diploma/GED and 7+ years of hands-on digital forensics experience in counterintelligence (CI) or law enforcement investigations.
• Demonstrated experience conducting computer forensics analysis within the Department of Defense (DoD) or Intelligence Community (IC).
• Demonstrated experience with advanced digital forensic tools and suites, including EnCase and Forensic Toolkit (FTK).
• Ability to obtain and maintain a qualifying Digital Forensic Examiner certification from an accredited government, military, or industry source within six months of assignment.
• Ability to obtain and maintain certification complying with DoD 8570.01-M Information Assurance Technical (IAT) Level II requirements within one year of assignment.
• Proficiency and experience in utilizing common analytical software and office productivity tools, including Microsoft Office (Word, Excel, PowerPoint) and Analyst's Notebook.

Preferred Qualifications

• Bachelor’s degree in a Science, Technology, Engineering, or Mathematics (STEM) discipline.
• Credentialed graduate of an accredited Federal CI, Federal Law Enforcement, DoD CI, or DoD Law Enforcement training academy (e.g., FBI Academy, DCITA).
• Possession of an active DoD Cyber Crimes Investigator certification or existing Digital Forensic Examiner certification.
• Comprehensive knowledge of foreign adversary intelligence services, terrorist organizations, and cyber threats posed to DoD and IC partner networks.

Clearance Requirements

• Must possess an active TS/SCI with the ability to obtain/maintain a Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, and must be able to exchange accurate information in these situations.