Forensic Imaging Lead — Data Extraction & Evidence Custody

Sprymethods; Linthicum (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all imaging and data extraction activities in the Cyber Forensics Laboratory (CFL). This role manages the Imaging and Extraction section and provides technical oversight for staff and workflows.

The candidate will maintain chain-of-custody, ensure tasks meet PWS requirements, and serve as the government technical point of contact. A strong background in image acquisition and tool validation is essential.

Qualifications

• TS/SCI clearance eligibility.
• EnCE/GCFE/DFE or equivalent certification approved by COR.
• 7+ years hands-on digital forensics experience, incl. 5+ years in evidence acquisition, imaging, and data extraction.

Responsibilities

• Lead forensic imaging, evidence acquisition, and data extraction operations.
• Direct management and technical oversight of Imaging and Extraction section personnel.
• Oversee laboratory workflows supporting evidence acquisition, imaging, and extraction.
• Maintain chain-of-custody documentation and evidence accountability.
• Ensure imaging and extraction tasks align with the PWS.
• Oversee testing/validation of forensic imaging tools and write-blockers.
• Monitor quality and efficiency of team performance.
• Serve as primary Government technical point of contact for imaging/extraction activities.
• Identify and communicate technical, programmatic, and resource limitations.

Skills

Digital forensics

Team leadership

Imaging tools testing

Education

EnCE

DFE

GCFE

Tools

EnCase

Write-blockers

Job description

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all imaging and data extraction activities in the Cyber Forensics Laboratory (CFL). This role manages the Imaging and Extraction section and provides technical oversight for staff and workflows.

The candidate will maintain chain-of-custody, ensure tasks meet PWS requirements, and serve as the government technical point of contact. A strong background in image acquisition and tool validation is essential.