Forensics Imaging Lead

Parsons

Linthicum (MD)

On-site

USD 125,000 - 225,000

Full time

4 days ago
Be an early applicant
Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Medical
Dental
Vision
Paid time off
401(k)
Life insurance
Flexible work schedules
Holidays

Job summary

Parsons is seeking an experienced Forensics Imaging Lead to head a team performing cyber forensics imaging and evidence collection in support of a critical customer mission. The role blends hands-on forensic work with leadership, mentoring, and continuous improvement in a fast-paced cybersecurity environment.

You will lead imaging efforts across varied systems, ensuring strict chain-of-custody, data extraction accuracy, and defensible methodologies, while guiding the team through evolving tools

Qualifications

  • Active TS/SCI clearance required.
  • GCFE or equivalent cyber forensics certification.
  • 7+ years in digital forensics with 5+ years in imaging/evidence extraction.
  • 3+ years in a leadership/supervisory role over a digital forensics team.
  • Experience testing/validating forensic imaging tools and write-blockers in the last 3 years.
  • Experience handling evidence in secure/classified environments (SCIFs, air-gapped networks).
  • Strong understanding of chain-of-custody, ISO/IEC 17025 accreditation.
  • Ability to lead technical teams in dynamic cybersecurity environments.
  • Strong written and verbal communication skills.

Responsibilities

  • Lead a team performing cyber forensics imaging and evidence collection.
  • Oversee imaging across diverse systems and environments.
  • Ensure accurate extraction, preservation, and handling of digital evidence.
  • Maintain strict chain-of-custody procedures and best practices.
  • Drive repeatable, defensible forensic collections.
  • Guide team with emerging tools and methodologies.
  • Mentor team members and support technical growth.
  • Drive process improvements for quality and efficiency.
  • Collaborate with internal teams to support mission success.

Skills

TS/SCI clearance
GCFE
7+ years forensics
3+ years leadership
Forensic imaging tools testing
Digital evidence handling
ISO/IEC 17025
Leadership in cybersecurity
Adept written/verbal communication

Tools

Write-blockers

Job description

Job Description

Parsons is looking for an experienced Forensics Imaging Lead to lead a team conducting critical cyber forensics imaging and digital evidence collection in support of an important customer mission. This role offers the opportunity to combine hands-on forensic expertise with leadership, mentorship, and continuous improvement in a fast-paced cybersecurity environment where quality and mission impact matter.

In this role, you will lead a team responsible for conducting cyber forensics imaging and related evidence-handling activities in support of customer requirements. Your team will perform forensic imaging, extract data from a variety of systems, maintain strict chain-of-custody procedures, and help ensure forensic collections are conducted with precision, consistency, and technical rigor. You will play a key role in maintaining quality standards, improving workflows, and helping the team evolve as new tools, technologies, and forensic methods become available.

This position is ideal for someone who combines strong technical forensics experience with proven team leadership skills. You will work closely with a skilled group of cyber professionals, providing day-to-day leadership, mentorship, and guidance while helping team members strengthen their capabilities and grow in their careers. Your leadership will directly influence both mission success and the long-term development of a high-performing forensic imaging team.

You’ll be joining Parsons’ local Analytics & Engineering team, a community known for its strong culture of defensive cyber operations, technical excellence, and collaboration. We invest in both mission success and team connection through regular social events, technical talks, training opportunities, and hands-on innovation activities at our Cybersecurity Center of Excellence Lab in Columbia, MD. From team lunches and ice cream socials to family-friendly seasonal events and technical learning sessions, we work hard to create an environment where people can do meaningful work and enjoy being part of the team.

What You’ll Be Doing
  • Lead a team performing cyber forensics imaging and evidence collection activities

  • Oversee forensic imaging efforts across a variety of systems, devices, and environments

  • Ensure accurate extraction, preservation, and handling of digital evidence

  • Maintain and enforce strict chain-of-custody procedures and forensic best practices

  • Help ensure collections are performed in a repeatable, defensible, and technically sound manner

  • Guide the team in adapting to emerging tools, technologies, and forensic methodologies

  • Mentor team members and support their technical growth and career development

  • Drive process improvements that increase quality, efficiency, and operational effectiveness

  • Collaborate with internal technical teams and stakeholders to support mission success

What Required Skills You’ll Bring
  • Active TS/SCI clearance

  • GCFE or equivalent cyber forensics certification

  • 7+ years of hands-on experience in digital forensics, with at least 5 years focused on evidence acquisition, forensic imaging, and data extraction from a variety of media (e.g., hard drives, mobile devices, IoT devices)

  • 3+ years in a leadership or supervisory role, responsible for managing a digital forensics team, overseeing laboratory workflows, and maintaining chain of custody documentation

  • Demonstrated experience within the last three years in the testing and validation of forensic imaging tools and write-blockers

  • Experience conducting forensic operations and handling evidence within secure and classified environments (e.g., SCIFs, air-gapped networks, cross-domain solutions)

  • Strong understanding of digital evidence handling, chain-of-custody requirements, and ISO/IEC 17025 accreditation standards

  • Ability to lead technical teams in a dynamic cybersecurity environment

  • Strong written and verbal communication skills

What Desired Skills You’ll Bring
  • Experience leading teams performing cyber forensic collection or imaging in support of Government or national security missions

  • Experience working with a range of operating systems, storage media, and forensic collection techniques

  • Familiarity with evolving forensic technologies, tooling, and evidence-handling processes

  • Proven ability to improve team processes, technical quality, and operational consistency

  • Passion for mentoring and developing highly technical cyber professionals

Security Clearance Requirement

An active Top Secret SCI security clearance is required for this position.

This position is part of our Federal Solutions team.

The Federal Solutions segment delivers resources to our US government customers that ensure the success of missions around the globe. Our intelligent employees drive the state of the art as they provide services and solutions in the areas of defense, security, intelligence, infrastructure, and environmental. We promote a culture of excellence and close-knit teams that take pride in delivering, protecting, and sustaining our nation's most critical assets, from Earth to cyberspace. Throughout the company, our people are anticipating what’s next to deliver the solutions our customers need now.

Salary Range: $125,100.00 - $225,200.00

  • medical
  • dental
  • vision
  • paid time off
  • 401(k)
  • life insurance
  • flexible work schedules
  • holidays

Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.

About Us

Parsons is a digitally enabled solutions provider focused on the defense, security, and infrastructure markets. With nearly 75 years of experience, Parsons is uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services to federal, regional, and local government agencies, as well as to private industrial customers worldwide.

Parsons is an equal opportunity, drug-free employer committed to diversity in the workplace. Minority/Female/Disabled/Protected Veteran/LGBTQ+.

For more about Parsons, visit parsons.com and follow us on Facebook, Twitter, LinkedIn, and YouTube.

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Forensics Analysis Lead
Forensics Analysis Lead

Parsons • Linthicum (MD)

On-site
USD 125,000 - 225,000
Intrusion Analysis Technical Lead
Intrusion Analysis Technical Lead

Parsons • Linthicum (MD)

On-site
USD 125,000 - 225,000
Medical benefits
Dental & Vision
Paid time off
+4
Cyber Forensics Analyst / Cyber Intrusion Analyst
Cyber Forensics Analyst / Cyber Intrusion Analyst

Parsons • Linthicum (MD)

On-site
USD 110,000 - 160,000
Cybersecurity Lead
Cybersecurity Lead

Parsons • Linthicum (MD)

On-site
USD 148,000 - 267,000
Medical insurance
Dental insurance
Vision insurance
+4
Program Manager- Cyber Forensics
Program Manager- Cyber Forensics

Parsons • Linthicum (MD)

On-site
USD 180,000 - 240,000
Forensics Imaging Lead
Forensics Imaging Lead

Forensic Focus Limited • Linthicum (MD), Northern (KY)

Hybrid
USD 90,000 - 154,000
Customer Finance Lead
Customer Finance Lead

Parsons • Linthicum (MD)

On-site
USD 104,000 - 181,000
Requirements Analysis Lead
Requirements Analysis Lead

Parsons • Linthicum (MD)

On-site
USD 104,000 - 181,000
Medical benefits
Dental benefits
Vision benefits
+5
Data Analyst - Top Secret
Data Analyst - Top Secret

Parsons • Baltimore (MD)

On-site
USD 88,000 - 155,000
Flexible benefits
Strategic Communications Lead
Strategic Communications Lead

Parsons • Linthicum (MD)

On-site
USD 88,000 - 155,000
Medical
Dental
Vision
+5