Forensics Examiner (Several Levels)

Parsons; Maryland; On-site; USD 90,000 - 140,000; Full time

Job summary

Parsons is seeking an experienced Digital Forensic Examiner to conduct forensics on digital and multimedia evidence across computers, mobile devices, and network data. You will use leading tools like EnCase, FTK, and X-Ways, perform artifact interpretation, and maintain strict chain-of-custody.

The role supports reports, expert-witness activities, and QA within a security-sensitive environment. The position offers growth across Examiner levels with a focus on accuracy, process, and collaboration

Qualifications

• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, IT, Criminal Justice or related field; 4 years of hands-on digital-forensics may substitute.
• Active Secret clearance; TS with SCI eligibility preferred.
• 2+ years (Examiner 1) to 12+ years (Examiner 4) of hands-on digital-forensics experience depending on level.
• Ability to conduct forensic examinations, interpret artifacts, and document findings.
• Experience maintaining chain-of-custody and handling evidence per procedures.

Responsibilities

• Conduct forensic examinations of digital and multimedia evidence (images, computers, mobile devices, logs, network data).
• Use EnCase, FTK, X-Ways and approved tools to analyze devices and artifacts.
• Perform evidence identification, hashing, timestamp analysis, artifact interpretation and anti-forensic checks.
• Maintain chain-of-custody and proper evidence handling per lab procedures and security rules.
• Prepare complete forensic reports and support expert-witness activities as needed.
• Participate in peer reviews, training, audits, and accreditation documentation.

Skills

Active clearance

Top Secret eligibility preferred

Bachelor's degree in Digital Forensics

4+ years hands-on digital forensics

Forensic reporting

Analytical writing

Education

Bachelor's degree in Digital Forensics or related field

Tools

EnCase

FTK

X-Ways

Cellebrite

Oxygen Forensics

Magnet Forensics

Job description

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what's possible.

Job Description:

Parsons is looking for an amazingly talented Digital Forensic Examiner (Several Levels) to join our team! In this role, you will conduct forensic examinations of digital and multimedia evidence, analyze artifacts and user activity, maintain evidence integrity, and prepare technically accurate forensic reports in support of investigative and legal proceedings.

What You\'ll Be Doing:

• Conduct forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
• Use commercial and open-source forensic tools, including EnCase, FTK, X-Ways, and approved government tools, to analyze digital devices.
• Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
• Conduct initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
• Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• Prepare complete, technically accurate, and professionally formatted Forensic Analysis Reports.
• Validate forensic tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
• Participate in technical peer reviews of forensic reports and incorporate review comments.
• Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

What Required Skills You\'ll Bring:

• Active Secret clearance; Top Secret clearance with SCI eligibility is preferred.
• Bachelor\'s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. Four years of hands-on digital-forensics experience may be substituted for the degree.
• Hands-on digital-forensics experience appropriate to the assigned level:
  • Forensic Examiner 1: Minimum of two years.
  • Forensic Examiner 2: Minimum of five years
  • Forensic Examiner 3: Minimum of eight years
  • Forensic Examiner 4: Minimum of 12 years.
• Ability to conduct forensic examinations, interpret digital artifacts, analyze user activity, and document findings.
• Experience maintaining chain-of-custody records and handling evidence in accordance with laboratory procedures and security requirements.
• Ability to prepare accurate, complete, and professionally formatted forensic reports.
• Ability to use forensic tools and perform forensic image, extraction, hashing, timestamp, artifact, and anti-forensic analysis.
• Strong attention to detail, analytical ability, technical judgment, and written communication skills.
• Ability to work independently and collaborate effectively with investigators, attorneys, technical reviewers, government personnel, and multidisciplinary teams.

What Desired Skills You\'ll Bring:

• At least one active certification, or an equivalent certification approved by the COR, including
  • DC3 Cyber Training Academy Digital Forensic Examine
  • GIAC Certified Forensic Analyst
  • GIAC Certified Forensic Examiner
  • EnCase Certified Examiner
  • Digital Media Collector
  • Digital Forensic Examiner
  • Cyber Crime Investigator
  • Computer Hacking Forensic Investigator
  • IACIS Certified Forensic Computer Examiner
  • IACIS Certified Mobile Device Examiner
  • IACIS Certified Advanced Windows Forensics Examiner
  • Cellebrite Certified Mobile Examiner
  • Oxygen Forensic Certified Examiner
  • X-Ways Professional in Evidence Recovery Techniques
  • Magnet Certified Forensic Examiner

Formal training dedicated to expert-witness testimony, rules of evidence, and courtroom procedure, such as DC3's 40-hour Forensic Trial Training course, completed within the last three years when required for assigned duties.

Experience with EnCase, FTK, X-Ways, Cellebrite, Oxygen Forensics, Magnet Forensics, or comparable forensic platforms.

Experience validating forensic tools, verifying tool outputs, developing