Forensic Examiner - multiple levels - CLEARED with Security Clearance

Constellation Technologies, Inc; Maryland; On-site; USD 100,000 - 200,000; Full time

Benefits offered by this job

Healthcare options with 80% employer‑s

HSA funded

Dental insurance

Vision insurance

Life insurance

Disability coverage

Training reimbursement

401(k) match

Job summary

Constellation Technologies, Inc. is seeking a senior Digital Forensics Examiner for on-site work in Annapolis Junction/Fort Meade, MD. The role requires extensive hands-on digital forensics with strict chain-of-custody and reporting duties, including potential expert-witness support.

Active TS/SCI with polygraph is required for federal projects. Candidates must have 12+ years of experience, a relevant degree or equivalent, and at least one advanced certification (GCFE, GCFA, EnCE, CFCE, or

Qualifications

• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, IT, Criminal Justice, or related field.
• In lieu of a degree, 12 years of hands-on digital forensics experience may be substituted.

Responsibilities

• Conduct forensic examinations of digital and multimedia evidence including images, computers, and devices.
• Maintain chain-of-custody and ensure secure handling of evidence.
• Prepare technically accurate forensic analysis reports and testify when required.
• Support tool validation, script development, and peer reviews as needed.

Skills

Digital forensics

Forensic analysis

Evidence handling

Reports & testimony

Education

Bachelor’s degree in Digital Forensics

Tools

EnCase

FTK

X-Ways

Job description

Forensic Examiner - multiple levels - CLEARED Annapolis Junction, MD / Fort Meade, MD Analyst Based – ANA20 - Cyber Forensics / Cyberspace Professionals / On-site Forensic Trial Training course, DC3 Cyber Training Academy Digital Forensic Examiner (DFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), EnCase Certified Examiner (EnCE), Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE), International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE), International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE), Certified Forensic Computer Examiner (CFCE), Cellebrite Certified Mobile Examiner (CCME), Oxygen Forensic® Certified Examiner (OFCE), EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE). Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position. Required: * Must be a US Citizen * Must have SECRET clearance w/ active polygraph (Top Secret with SCI eligibility preferred) * Multiple Levels of Years accepted o Level 04 requires a minimum twelve (12) years of experience o Level 03 requires a minimum eight (08) years of experience o Level 02 requires a minimum five (05) years of experience o Level 01 requires a minimum two (02) years of experience * A minimum of twelve (12) years of hands-on digital forensics experience * Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field * In lieu of a Bachelor's degree, an additional four (04) years of hands-on experience in a digital forensics role can be substituted for a degree for a total of twelve (12) years of experience. * Verifiable completion of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3’s 40-hour Forensic Trial Training course) within the last three (03) years is required if assigned to certain job tasks * Possession of at least one of the following active certifications (or an equivalent certification approved by the COR) is required: * DC3 Cyber Training Academy Digital Forensic Examiner (DFE) * GIAC Certified Forensic Analyst (GCFA) * GIAC Certified Forensic Examiner (GCFE) * EnCase Certified Examiner (EnCE) * Digital Media Collector (DMC) * Digital Forensic Examiner (DFE) * Cyber Crime Investigator (CCI) * Computer Hacking Forensic Investigator (CHFI) * International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE) * International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE) * International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE ) * Certified Forensic Computer Examiner (CFCE) * Cellebrite Certified Mobile Examiner (CCME) * Oxygen Forensic® Certified Examiner (OFCE) * EnCase Certified Examiner (EnCE) * X- Ways Professional in Evidence Recovery Techniques (X-PERT) * Magnet Certified Forensic Examiner (MCFE) * Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data. * Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices * Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.

• Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization. * Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements. * Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports. * May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices. * May participate in technical peer review of forensic reports and incorporate review comments. * May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified. * May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation. * May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators. * May provide technical input to training, mentorship, process-improvement, and lessons-learned activities. $100,000 - $200,000 a year The pay range for this job, with multi-levels, is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. The benefits package:
• Affordable healthcare options with 80% employer paid premium PLUS a company-funded HSA
• Comprehensive Dental insurance
• Vision with 80% employer paid premium
• Employer paid Life insurance 100%
• Employer paid Short-term and Long-term disability 100%
• Annual training, continued education, and professional memberships reimbursement
• Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation
• Annual reimbursement for technology i.e. phones, computers, printers, etc.
• 401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment) The environment and perks:
• Professional development investment and paid time off for training
• Contract and work locations in Maryland, Virginia, Colorado, Texas, Utah, Florida and Hawaii.
• Team building events throughout the year such as Destination Family Events, Holiday Party, Monthly Get-Togethers
• Leadership Team engagement and mentorship
• Performance Recognition Program
• Complimentary branded apparel
• Constellation Technologies is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, etc.), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Job applicants can submit questions about CTI’s equal employment opportunity policy to . We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.