Digital Forensics Examiner

The Amatriot Group; Linthicum (MD); On-site; USD 134,000 - 165,000; Full time

Job summary

A security and forensic services firm in Linthicum Heights seeks a Digital Forensic Analyst to support federal investigations. The role includes analyzing electronic media and preparing evidence documentation for court. A Bachelor's degree with 8+ years or a Master's degree with 6+ years in fields like Cybersecurity is required. Candidates must be certified in digital forensics and have experience with various forensic tools. This position is full-time and requires onsite work, offering a salary range of $134,000 - $165,000 depending on qualifications.

Qualifications

• Bachelor’s degree and 8+ years of experience or Master’s Degree and 6+ years with relevant certifications.
• Experience conducting digital forensic analysis on various media.
• Active forensic certification required.

Responsibilities

• Analyze electronic media for criminal investigations.
• Gather and handle digital evidence.
• Perform forensic and electronic discovery services.

Skills

Digital Forensic Analysis

Technical Report Writing

Experience with forensic tools (e.g., EnCase, FTK)

Understanding of network protocols

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Master’s Degree in relevant field

Tools

EnCase

FTK

X-Ways

Cellebrite

Job description

Security Clearance: Minimum active Secret

Location: 100% Onsite in Linthicum Heights, MD

Job Type: Full-Time

Target Salary Range*: $134,000 - $165,000.
This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

Seeking a Digital Forensic Analyst in support of a DoW customer to analyze electronic media in support of a federal government agency, focused on sensitive ongoing criminal investigations and operations.

Key Responsibilities

• Using a wide variety of forensic tools, the Digital Forensic Analyst examines the hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence that could be used in a court of law.
• Performs forensic analysis of digital information and gathers and handles evidence.
• Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination.
• Employs forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types.
• Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports.
• May be required to testify in federal/military court as expert witnesses.

Qualifications

Education:

• Bachelor’s degree and 8+ years of experience; OR Master’s Degree and 6+ years of experience. Degree must be in one of these fields of study: Computer Science, Cybersecurity, Information Technology, Information Systems, Data Science, Mathematics, or Software Engineering. In lieu or a Bachelor's degree in one of these fields, an additional 4 years of relevant experience or training is required along with one of the following certifications: DC3 Digital Forensic Examiner (DFE), CHFI, PenTest+, RCCE Level 1, CFR, CySA+, GCFA, or GCFE.

Experience:

• Must pass the customer's Mentorship Program within 4 months.
• At least 4 years experience conducting digital forensic analysis on a variety of media, including Windows, OS X, Linux, Android and iOS.
• Experience in supporting criminal investigations.
• Experience writing Technical Reports, detailing results of analysis.
• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools.
• Formalized training in the areas of computer science, forensics, etc.
• Understanding of network protocols and networking concepts.
• Knowledge of and experience with virtual environments.

Certifications:

• Required Active Forensic Certification (must upload a copy of the certification): One or more of the following - Digital Media Collector (DMC), *Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), *Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), *GIAC Certified Forensic Examiner (GCFE), *GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications. *Can count for both required and certification in lieu of degree.

Preferred Qualifications

• Previous Law Enforcement experience.
• Experience in performing technical reviews or peer reviews.
• Experience mentoring other examiners.
• Experience testifying as an expert witness in support of criminal trials.