Digital Forensics Lead: Imaging, Malware & Network Analysis

Sprymethods; Linthicum (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Spry Methods seeks a Forensic Acquisition and Extraction Lead to direct all imaging and data extraction activities at a government digital forensics laboratory. You will supervise staff, oversee malware analysis and reverse engineering, and guide digital and multimedia examinations while ensuring chain-of-custody and compliance with legal and government standards.

The role requires oversight of endpoint and network data sources, PCAP analysis, and use of FTK, EnCase, and X-Ways.

Qualifications

• Experience leading forensic imaging and data extraction in a lab setting.
• Experience with regulatory and government requirements in forensics.
• Proven ability to supervise teams and manage workflows in a lab.

Responsibilities

• Lead technical efforts supporting system and network forensic examinations.
• Supervise teams operating in a forensic laboratory environment.
• Oversee malware analysis and reverse engineering activities.
• Guide digital and multimedia forensic examinations and analysis.
• Analyze endpoint, PCAP, and other data sources.
• Apply forensic network analysis in support of investigations.
• Ensure compliance with applicable legal, accreditation, and Government requirements.
• Use common forensic examination tools, including FTK, EnCase, and X-Ways.
• Support quality and efficiency of task performance and assist with task-level financial and business processes.

Skills

Leadership

Team supervision

Forensic investigations

Network forensics

Malware analysis

Reverse engineering

Regulatory compliance

Tools

FTK

EnCase

X-Ways

Job description

Spry Methods seeks a Forensic Acquisition and Extraction Lead to direct all imaging and data extraction activities at a government digital forensics laboratory. You will supervise staff, oversee malware analysis and reverse engineering, and guide digital and multimedia examinations while ensuring chain-of-custody and compliance with legal and government standards.

The role requires oversight of endpoint and network data sources, PCAP analysis, and use of FTK, EnCase, and X-Ways.