Forensic Examiner - multiple levels - CLEARED

LinuxCareers; Maryland; On-site; USD 100,000 - 170,000; Full time

Job summary

LinuxCareers seeks a Forensic Examiner at multiple levels for a federal contract in Maryland. You will conduct forensic examinations of digital and multimedia evidence using industry-standard tools, maintain chain-of-custody, and support expert-witness activities.

The role requires active TS/SCI with polygraph and years of hands-on digital forensics experience. Bachelor's degree or equivalent, plus certifications and scripting skills (Python/Perl) are preferred.

Qualifications

• Minimum bachelor’s degree in a relevant field or equivalent hands-on experience.
• Active TS/SCI clearance with polygraph is required.
• Experience with digital and multimedia evidence examinations.

Responsibilities

• Conduct forensic examinations of digital and multimedia evidence.
• Document chain-of-custody and ensure secure handling and disposal.
• Prepare detailed forensic analysis reports with technical accuracy.
• Support expert-witness preparation and testimony as needed.
• Validate tools and develop scripts under version-control practices.

Skills

Digital forensics

Evidence handling

Forensic reporting

Scripting (Python/Perl)

Education

Bachelor's degree in Digital Forensics or related field

Tools

EnCase

FTK

X-Ways

Job description

This is a federal contract position for a Forensic Examiner at multiple experience levels. The role involves conducting forensic examinations of digital and multimedia evidence using commercial and open-source forensic tools, with responsibilities ranging from evidence analysis and chain-of-custody documentation to expert witness support and quality assurance activities.

What You'll Do

• Conduct forensic examinations of digital and multimedia evidence including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, and memory snapshots
• Use commercial and open-source forensic tools such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
• Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti‑forensic detection, and user-activity reconstruction
• Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements
• Prepare complete, technically accurate, and professionally formatted Forensic Analysis Reports
• May validate forensic tools, develop or maintain approved scripts using version-control practices, participate in technical peer review of forensic reports, and support expert‑witness preparation and testimony

What You Need

• United States citizenship and an active TS/SCI security clearance with polygraph
• Minimum years of hands‑on digital forensics experience depending on level: Level 04 requires 12 years, Level 03 requires 8 years, Level 02 requires 5 years, Level 01 requires 2 years
• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field (or an additional four years of hands‑on digital forensics experience in lieu of degree)
• At least one active certification such as GCFA, GCFE, EnCE, CHFI, CFCE, or equivalent approved certification
• Proficiency with Linux, BASH, Perl, and Python
• Verifiable completion of formal training course on expert witness testimony, rules of evidence, and courtroom procedure within the last three years if assigned to certain job tasks

Nice to Have

• Top Secret with SCI eligibility (beyond the required SECRET clearance with active polygraph)
• Experience with Java and ETL tools
• Familiarity with Cassandra and IAM Level 3 certification
• Agile methodology experience