Digital Forensics Lead: Imaging, Extraction & Analysis

Spry Methods, Inc.; Linthicum (MD); On-site; USD 200,000 - 225,000; Full time

Job summary

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all forensic imaging and data extraction activities at a government digital forensics laboratory. This role manages the Imaging and Extraction section and provides technical oversight of staff and workflows, with emphasis on maintaining chain-of-custody documentation.

The candidate will work with FTK, EnCase, and X-Ways while ensuring compliance with legal and accreditation requirements.

Qualifications

• TS/SCI clearance eligible.
• Experience within the last five years leading technical efforts and supervising teams in a forensic laboratory environment similar in scope and complexity to the PWS.
• Experience within the last seven years performing digital and multimedia forensic examinations, analysis, and techniques.
• Experience within the last seven years using Microsoft Windows, Apple/UNIX, and Linux operating systems in forensic examinations.
• Experience within the last seven years conducting forensic network analysis in support of investigations.
• Experience within the last seven years analyzing endpoint, PCAP, and other relevant data sources.
• Experience within the last five years using common digital forensic tools, including FTK, EnCase, and X-Ways.

Responsibilities

• Lead technical efforts supporting system and network forensic examinations.
• Supervise teams operating in a forensic laboratory environment.
• Oversee malware analysis and reverse engineering activities.
• Guide digital and multimedia forensic examinations and analysis.
• Analyze endpoint, PCAP, and other relevant data sources.
• Apply forensic network analysis in support of investigative processes.
• Ensure technical activities comply with applicable legal, accreditation, and Government requirements.
• Use common forensic examination tools, including FTK, EnCase, and X-Ways.
• Support the quality and efficiency of task performance and assist with task-level financial and business processes, excluding inherently governmental functions.

Job description

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all forensic imaging and data extraction activities at a government digital forensics laboratory. This role manages the Imaging and Extraction section and provides technical oversight of staff and workflows, with emphasis on maintaining chain-of-custody documentation.

The candidate will work with FTK, EnCase, and X-Ways while ensuring compliance with legal and accreditation requirements.