Senior Digital Forensic Analyst - Veterans Enterprise Technology Solutions

Overview:

Staffing Pros, a division of VETS Inc., is recruiting for a full-time Senior Digital Forensic Analyst. This position will work a rotating hybrid schedule in Rosslyn, VA. WEEK 1 - 2 days onsite, 3 days remote WEEK 2 - 3 days onsite, 2 days remote. An Active Secret clearance is required for this role. 

 

If you have additional questions not answered by the information contained within this posting, please contact our team directly at StaffingPros@vets-inc.com.

Responsibilities:

• Leverage your expertise in the area of digital forensics to perform in-depth examinations while assuring forensic soundness of recovered digital evidence is maintained to meet court admissibility standards of the Department of Justice.
• Serve as a Senior-level Digital Forensic Analyst, who will support the CIF program with the ability and skillset to provide in-depth digital forensic analysis of mobile devices, electronic storage devices, cloud, server, and personal computer systems.
• Conduct forensic examinations of digital evidence through the application of recognized scientific best practices for the recognition, collection, analysis, and interpretation of digital evidence for criminal and civil law or regulatory purposes.
• Leverage existing skillsets to perform in-depth forensic analysis of various operating systems including Android, Apple iOS/MAC, Microsoft Windows, and Linux based operating systems.
• Leverage existing skillsets to perform in-depth forensic analysis of file systems including APFS, NTFS, ExFAT, HFS/+, EXT2/3/4, and FAT/FAT32.
• Leverage existing skillsets to perform in-depth forensic analysis of system and third-party application databases.
• As a tool-agnostic examiner, maintain proficiency in the use of industry-standard forensic hardware and software tools such as Magnet Axiom, Cellebrite Inseyets, PA/UFED, Oxygen Forensic Detective, EnCase, X-Ways, Nuix and with mobile advanced extraction tools such as Graykey and Cellebrite Premium.
• Maintain non-vendor and vendor specific certifications related to job duties.  
• Provide on‐scene support during the execution of search warrants with the identification, collection, packaging, handling, and chain-of-custody procedures of digital evidence.
• Provide on-scene expertise and triaging guidance of mobile device and running computer systems regarding; encryption, RAM captures, signal-blocking, biometrics, pin-locks, and field acquisition considerations.
• Produce comprehensive notes, reports and illustrative exhibits for federal, state, and local judicial proceedings.
• Provide expert witness testimony to explain examination interpretations and conclusions from forensic examinations to a lay audience.
• Collaborate with program government and contractor leadership, forensic analysts, law enforcement officers, prosecutors, and other stakeholders to ensure that CIF maintains forensically-sound procedures and best practices in the imaging, analysis, and presentation of digital evidence.
• Stay abreast of new developments and trends in digital forensics, cybersecurity, forensic law, mobile devices, social media tools, mobile applications, and encryption technologies.

Qualifications:

Required Qualifications:

• Bachelor’s degree and a minimum of 9 years’ experience as a digital forensic examiner in performing both mobile and non-mobile analysis in a digital forensic laboratory.
• An additional four years of experience may be substituted in lieu of degree.
• Must possess one of the following approved forensic certifications:
• SANS (GCFE, or GASF)
• IACIS (CFCE, or CMFE)
• NCFI (BCERT, or MDE)
• Cellebrite (CCME, or CCO+CCPA)
• OpenText (EnCE)
• Demonstrated in-depth knowledge of forensic analysis of mobile device hardware, third-party applications, Apple iOS and Android-based operating systems; Apple Macintosh, Linux and Microsoft Windows operating systems, Windows Registry, Android Debug Bridge (ADB); Apple iTunes and iCloud; various computer file systems.
• Experience in providing on-scene triaging, processing, handling, and packaging of electronic/digital evidence (chain of custody) during search and seizure warrants.
• Demonstrated knowledge and experience in using various forensic software tools such as Magnet Axiom, Cellebrite Inseyets PA, Oxygen Forensic Detective, Nuix, X-ways, EnCase and with mobile advanced extraction tools such as GrayKey and Cellebrite Premium.
• Experience writing detailed notes and reports that translate complex technical information to non-technical audiences.
• Possess critical, creative, and sound decision-making skills, and have the situational awareness to know when to involve program leadership for guidance.
• Ability to travel for on-scene seizures of digital evidence, training, and/or testimony.
• Ability to work with individuals at all levels within and outside the organization and to deal tactfully, courteously, and professionally with CIF end-customers.
• Ability to obtain an interim Secret clearance before start date.
• The ability to obtain a final Top-Secret security clearance.

Preferred Qualifications:

• One of the following certifications: 
• Cyber Crime Center (CDFE, CDMC)
• Cellebrite (CASA, CCO+CCPA)
• Oxygen Forensic Detective (OFC)
• Magnet Forensics (MCFE)
• X-Ways (X-PERT)

EEO Statement:Staffing Pros a division of VETS-inc is an Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities.The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.