Forensic Examiner - multiple levels - CLEARED

Constellation Technologies, Inc; Fort Meade (MD); On-site; USD 100,000 - 200,000; Full time

Benefits offered by this job

Affordable healthcare options

Annual training & professional dues

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with match

Tech equipment/renewal support

Paid time off & development

Job summary

Constellation Technologies, Inc. is seeking a Digital Forensics Examiner for high-sensitivity contract work across multiple U.S. locations.

The role requires security clearance (SECRET with active polygraph) and US citizenship, with Top Secret eligibility preferred. A minimum of 12 years in digital forensics and a relevant degree or equivalent experience are required. The candidate will perform examinations of digital/multimedia evidence, maintain chain of custody, and produce expert forensic

Qualifications

• Requires US citizenship with SECRET clearance and active polygraph.
• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, IT, Criminal Justice or related field (or 12 years of hands-on experience in lieu of degree).
• Formal training in expert witness testimony/rules of evidence/courtroom procedure within last 3 years for certain tasks.
• Possession of one of the listed active certifications (DFE, GCFA, GCFE, EnCE, DMC, CFE, CCI, CHFI, CFCE, ICMDE, CAWFE, CCME, OFCE, X-PERT, MCFE).
• Conducts forensic examinations of digital/multimedia evidence using EnCase, FTK, X-Ways, and gov tools.

Responsibilities

• Conducts forensic examinations of digital and multimedia evidence (images, devices, logs, memory snapshots).
• Maintains accurate chain-of-custody and ensures secure handling of evidence.
• Prepares complete forensic analysis reports with technical detail.
• Validates forensic tools and documents validation results; may develop scripts.
• Supports expert-witness preparation, affidavits, warrants, and depositions when designated.

Skills

US Citizenship

Security Clearance

Polygraph

Education

Bachelor's degree in Digital Forensics / related field

Tools

EnCase

FTK

X-Ways

Government tools

Job description

Forensic Trial Training course, DC3 Cyber Training Academy Digital Forensic Examiner (DFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), EnCase Certified Examiner (EnCE), Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE), International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE), International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE ), Certified Forensic Computer Examiner (CFCE), Cellebrite Certified Mobile Examiner (CCME), Oxygen Forensic Certified Examiner (OFCE), EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)

Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position.

Required:

• Must be a US Citizen
• Must have SECRET clearance w/ active polygraph (Top Secret with SCI eligibility preferred)
• Multiple Levels of Years accepted

oLevel 04 requires a minimum twelve (12) years of experience

oLevel 03 requires a minimum eight (08) years of experience

oLevel 02 requires a minimum five (05) years of experience

oLevel 01 requires a minimum two (02) years of experience

• A minimum of twelve (12) years of hands-on digital forensics experience
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field
• In lieu of a Bachelor’s degree, an additional four (04) years of hand-on experience in a digital forensics role can be substituted for a degree for a total of twelve (12) years of experience.
• Verifiable completion of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3’s 40-hour Forensic Trial Training course) within the last three (03) years is required if assigned to certain job tasks
• Possession of at least one of the following active certifications (or an equivalent certification approved by the COR) is required:
  • DC3 Cyber Training Academy Digital Forensic Examiner (DFE)
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Forensic Examiner (GCFE)
  • EnCase Certified Examiner (EnCE)
  • Digital Media Collector (DMC)
  • Digital Forensic Examiner (DFE)
  • Cyber Crime Investigator (CCI)
  • Computer Hacking Forensic Investigator (CHFI)
  • International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE)
  • International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE)
  • International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE )
  • Certified Forensic Computer Examiner (CFCE)
  • Cellebrite Certified Mobile Examiner (CCME)
  • Oxygen Forensic Certified Examiner (OFCE)
  • EnCase Certified Examiner (EnCE)
  • X- Ways Professional in Evidence Recovery Techniques (X-PERT)
  • Magnet Certified Forensic Examiner (MCFE)
• Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
• Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
• Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction. Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
• Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports.
• May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices.
• May participate in technical peer review of forensic reports and incorporate review comments.
• May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• May provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

$100,000 - $200,000 a year

The benefits package:

• Affordable healthcare options with 80% employer paid premium PLUS a company-funded HSA
• Comprehensive Dental insurance
• Vision with 80% employer paid premium
• Employer paid Life insurance 100%
• Employer paid Short-term and Long-term disability 100%
• Annual training, continued education, and professional memberships reimbursement
• Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation
• Annual reimbursement for technology i.e. phones, computers, printers, etc.
• 401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment)

The environment and perks:

• Professional development investment and paid time off for training
• Contract and work locations in Maryland, Virginia, Colorado, Texas, Utah, Florida and Hawaii.
• Team building events throughout the year such as Destination Family Events, Holiday Party, Monthly Get-Togethers
• Leadership Team engagement and mentorship
• Performance Recognition Program
• Complimentary branded apparel

Constellation Technologies is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Job applicants can submit questions about CTI's equal employment opportunity policy to [e-mail].