Lead Digital Forensics Imaging & Extraction

Spry Methods, Inc.; Linthicum (MD); On-site; USD 200,000 - 225,000; Full time

Job summary

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all imaging and data extraction activities within the Cyber Forensics Laboratory. The role will manage the Imaging and Extraction section and provide technical oversight to staff, ensuring evidence acquisition from hard drives, mobile devices, and IoT devices.

Laboratory workflows will be run with strict chain-of-custody documentation and PWS compliance.

Qualifications

• Seven+ years of hands-on digital forensics experience, with at least five years in evidence acquisition, imaging, and data extraction from hard drives, mobile devices, and IoT devices.
• Three+ years in leadership or supervisory roles within the last five years managing a digital forensics team, workflows, and chain-of-custody documentation.
• Experience in testing and validating forensic imaging tools and write-blockers within the last three years.

Responsibilities

• Lead forensic imaging, evidence acquisition, and data extraction operations.
• Provide direct management and technical oversight of Imaging and Extraction section personnel.
• Oversee laboratory workflows supporting evidence acquisition, imaging, and extraction.
• Maintain accurate chain-of-custody documentation and evidence accountability.
• Ensure imaging and extraction tasks comply with contractual and program requirements.
• Oversee testing and validation of imaging tools and write-blockers.
• Serve as the primary Government technical point of contact for imaging and extraction activities.

Skills

Digital forensics leadership

Laboratory workflow management

Chain-of-custody documentation

Education

EnCE Certification

Tools

EnCase

Forensic imaging tools

Write-blockers

Job description

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all imaging and data extraction activities within the Cyber Forensics Laboratory. The role will manage the Imaging and Extraction section and provide technical oversight to staff, ensuring evidence acquisition from hard drives, mobile devices, and IoT devices.

Laboratory workflows will be run with strict chain-of-custody documentation and PWS compliance.