skillfactor-pipeline/data/gated/digital-forensics-expert_relevant.json

[
 {
  "job_id": "Y-mj4g3c9pkGHkHmAAAAAA==",
  "title": "Mid-Level Digital Forensic Analyst",
  "employer": "Peraton",
  "country": "us",
  "description": "Responsibilities\n\nPeraton is currently seeking a Mid-Level Digital Forensic Analyst to support Federal Strategic Cyber programs in the Cyber & Intelligence sector.\n\nLocation: On-site, Arlington, VA\n\nRole:\n\n• This role focuses on the recovery, analysis, and reporting of digital evidence to support criminal, cyber, and administrative investigations.\n\n• The ideal candidate brings strong digital forensics expertise, a disciplined analytical approach, and the ability to produce court-defensible findings in a mission-driven environment.\n\nIn this role, you will:\n\n• Conduct forensic examinations of digital data from cellphones, tablets, computers, removable media, cloud sources, and other platforms.\n\n• Apply recognized scientific practices to identify, analyze, interpret, and present digital evidence for criminal, civil, and administrative matters.\n\n• Perform detailed, targeted examinations in line with investigative objectives, legal process, and search warrant limitations.\n\n• Use industry-standard forensic tools—such as Cellebrite (including Inseyets), Oxygen Forensic Detective, Magnet Forensics GrayKey and Axiom, Nuix, X-Ways, and similar for extraction and examination.\n\n• Analyze data from various operating systems and applications, including Windows, macOS, iOS, Android, cloud services, and common backup formats.\n\n• Produce clear, comprehensive reports that explain findings for investigators, prosecutors, and other stakeholders.\n\n• Provide expert witness testimony, explaining examination procedures and technical findings to non-technical audiences in federal, state, and local proceedings.\n\n• Provide on-site support during search warrant executions by identifying, collecting, packaging, documenting, and preserving digital evidence while maintaining strict chain of custody.\n\n• Work closely with program leadership and peers to maintain forensically sound procedures and best practices for acquisition, analysis, and presentation of digital evidence.\n\n• Conduct peer reviews and quality checks of reports and artifacts to ensure accuracy, completeness, and clarity before customer delivery.\n\n• Share lessons learned and emerging techniques with colleagues to enhance collective expertise.\n\n• Stay current on developments in digital forensics, cybersecurity, forensic law, mobile devices and applications, social media platforms, and encryption/decryption methods.\n\nQualifications\n\nMinimum qualifications:\n\n• Bachelor's degree and a minimum of 5 years with bachelor’s degree; 3 years with a Masters degree.\n\n• An additional 4 years of experience will be considered in lieu of degree/education.\n\n• Must either possess and maintain, or obtain prior to starting date, one of the following professional certifications:\n\n• GIAC: GCFE, GASF\n\n• IACIS: CFCE, ICMDE\n\n• NCFI: BCERT, MDE\n\n• DC3: CDFE, CDMC\n\n• Opentext: EnCE\n\n• Cellebrite: [CCO & CCPA], CCME\n\n• Oxygen Forensics: OFC\n\n• Demonstrated proficiency with mobile and non-mobile forensic software tools such as Magnet Axiom, Cellebrite, and Oxygen, as well as advanced mobile extraction hardware and software.\n\n• Working knowledge of Windows and MacOS, Apple iOS, Android, and their associated backup technologies.\n\n• Experience writing detailed, technically accurate reports that clearly communicate complex digital forensic findings to non-technical audiences.\n\n• Strong critical thinking, creativity, sound judgment, and awareness to recognize when to seek leadership guidance.\n\n• Ability to collaborate effectively and professionally with leadership, peers, forensic analysts, law enforcement, prosecutors, CIF customers, and other stakeholders at all levels to deliver high quality‑ forensic products.\n\n• Willingness and ability to travel for on-scene evidence seizures, training, and/or testimony.\n\n• Commitment to staying current on advancements in digital forensics, cybersecurity, forensic law, mobile technologies, social media, applications, and encryption.\n\n• U.S. Citizenship required.\n\n• The ability to obtain an interim Secret security clearance before start date.\n\nPeraton Overview\n\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\n\nTarget Salary Range\n$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.\nEEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law."
 },
 {
  "job_id": "Elol-pTpywtg-VqGAAAAAA==",
  "title": "Digital Forensics SME",
  "employer": "ActioNet Inc",
  "country": "us",
  "description": "Description\n\nDigital Forensics Subject Matter Expert\n\nLocation: Rockville, MD\n\nPosition Overview:\n\nThe Digital Forensics SME provides advanced digital forensics and incident response (DFIR) expertise, supporting investigation, analysis, and remediation of complex cybersecurity incidents across the Agency enterprise.\n\nSalary $140K-184K\n\nKey Responsibilities\n• Perform advanced forensic analysis on endpoints, networks, and digital media.\n• Identify root causes of incidents using agency-provided tools and forensic methodologies.\n• Conduct malware analysis, including static and dynamic analysis techniques.\n• Collect, preserve, and analyze evidence in accordance with chain-of-custody requirements.\n• Produce forensic reports, indicators of compromise (IOCs), and investigative findings.\n• Support incident response and remediation efforts, including hands-on technical engagement when required.\n• Contribute to threat intelligence development and reporting.\n• Analyze phishing campaigns, email threats, and adversary tactics.\n• Support SOC operations (SOC-48) with both oversight and technical execution.\n• Collaborate with law enforcement and federal partners as needed.\n\nRequired Qualifications\n• Bachelor's degree in cybersecurity, digital forensics, or related field.\n• 8+ years of experience in digital forensics and incident response.\n• Expertise in:\n• Forensic toolsets (e.g., EnCase, FTK, X-Ways, Velociraptor, etc.)\n• Malware analysis and reverse engineering\n• Network and endpoint forensics\n• Experience producing evidentiary-quality documentation.\n\nKey Competencies\n• Deep forensic expertise\n• Investigative rigor\n• Analytical problem-solving\n• Technical leadership\n\nSkills:\nAnalysis Skills, Computer Forensics, Digital Media, Dynamic Analysis, Email Campaign, EnCase, Federal Laws and Regulations, Forensic Science, Incident Response, Internet Security, Law Enforcement, Malware Analysis, Network Performance/Analysis, Operational Support, Phishing, Problem Solving Skills, Reporting Skills, Reverse Engineering, Root Cause Analysis, Static Analysis, Technical Leadership\n\nAbout the Company:\nActioNet Inc"
 },
 {
  "job_id": "f5lV-TAO2HJRUnuLAAAAAA==",
  "title": "Digital Forensics Analyst",
  "employer": "AIS (Applied Information Sciences)",
  "country": "us",
  "description": "Why AIS?\n\nWhen you join AIS, you’re joining a mission-driven team that’s passionate about making a difference. You’ll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.\n\n• Employee Ownership: Your contributions directly impact the company’s success, and you share in its achievements.\n• Continuous Learning: Access to resources, training, and mentorship to support your professional growth.\n• Inclusive Culture: A workplace where diversity is celebrated, and everyone’s voice is valued.\n• Mission-Driven Work: Engage in projects that make a meaningful difference for our clients and communities.\n\nWhat are we looking for?\n\nAt AIS, we're looking for more than just skills - we're looking for driven individuals who are passionate about making a difference, eager to grow, and aligned with our core principles.\n\nWhat you will be doing?\n\nThis position is contingent upon contract award. We are currently pursuing a proposal and are seeking qualified candidates to include in our submission and identify candidates for future hiring needs on the program once awarded.\n\nAt AIS, we are dedicated to providing our employees with diverse opportunities to grow their careers while supporting a variety of impactful projects. For this position, we are seeking a talented individual to join AIS as a Senior Security Engineer.\n\n• Core Knowledge & Skills: Designs secure architectures, leverages advanced threat detection, leads incident response, and implements security automation.\n• Work & Complexity: Manages complex incidents, conducts threat analysis, leads audits, and implements process improvements.\n• Quality & Independence: Delivers high-quality reports, aligns practices with industry standards, and operates with high autonomy.\n• Teamwork & Communication: Leads team projects, collaborates cross-functionally, mentors juniors, and resolves conflicts.\n• Consulting & Engagement: Provides strategic consulting, leads improvement initiatives, recommends advanced technologies, and manages vendor relationships.\n\nAs your initial project assignment, you will support the unique needs of our client as a Digital Forensics Analyst.\n\nProject Summary\n\nThe Digital Forensics Analyst is responsible for conducting advanced forensic examinations across a wide range of digital systems, environments, and devices. This role performs deep-dive investigations involving endpoint activity, network traffic, malware, cloud platforms, and virtualized environments. The ideal candidate has hands-on experience with digital media acquisition, malware analysis, cloud forensics, and the use of modern security technologies to support threat hunting and investigative operations.\n\nThis is a proposal-based position; employment is contingent upon contract award and funding availability.\n\nKey Responsibilities\n\nDigital Forensic Analysis\n\n• Conduct forensic examinations on Windows, Linux, and MacOS systems.\n• Perform digital media acquisition, including disk imaging, preservation, and chain-of-custody documentation.\n• Execute mobile device acquisition and analysis, including iOS and Android platforms.\n• Perform malware analysis to determine behavior, indicators of compromise (IOCs), and impact.\n\nCloud & Virtual Environment Forensics\n\n• Investigate virtualized environments, including Virtual Machines and associated logs/artifacts.\n• Perform cloud-based forensic analysis using:\n• Microsoft 365\n• Azure\n• AWS\n• Analyze cloud-native logs such as CloudTrail, IAM logs, and other platform security telemetry.\n\nThreat Hunting & Investigative Activities\n\n• Utilize EDR, SIEM, and full packet capture tools to examine endpoint behavior, network activity, and anomalous patterns.\n• Conduct proactive threat hunting to identify previously undetected malicious activity.\n• Correlate forensic data with threat intelligence to support broader investigations.\n\nTools, Documentation & Reporting\n\n• Leverage industry-standard forensic tools, including EnCase and SANS methodologies.\n• Generate detailed forensic reports for technical stakeholders, legal teams, and leadership.\n• Maintain strict adherence to evidence handling, analysis integrity, and investigative best practices.\n\nRequired For This Opportunity\n\n• Minimum of 5 years of experience conducting or supporting digital forensic investigations, including:\n• Windows, Linux, and MacOS forensic analysis\n• Disk imaging and media preservation\n• Mobile device forensic acquisition and analysis\n• Malware analysis\n• Experience conducting forensic investigations in M365, Azure, and AWS environments.\n• Ability to analyze virtualized systems and cloud-native telemetry (CloudTrail, IAM logs).\n• Extensive experience using:\n• Endpoint Detection & Response (EDR)\n• Security Information & Event Management (SIEM)\n• Full packet capture platforms\n• Strong analytical, documentation, and evidence-handling skills.\n• Clearance: Secret\n\nCertifications: One or more of these certifications\n\n• SANS GIAC\n• GCIH – Incident Handler\n• GCFA – Forensic Analyst\n• GCFE – Forensic Examiner\n• GREM – Malware Reverse Engineering\n• GISF – Information Security Fundamentals\n• GXPN – Exploit Research & Advanced Pen Testing\n• GCTI – Cyber Threat Intelligence\n• GOSI – Open-Source Intelligence\n• EnCase Certifications (EnCE, CFSR, ENCEP)\n\nNice To Have Skills\n\n• Experience working in federal, law enforcement, or regulated environments.\n• Background in threat intelligence and advanced incident response.\n• Familiarity with scripting or automation (Python, PowerShell) for forensic workflows.\n\nAt AIS, we are committed to offering competitive and fair compensation that reflects the skills, experience, and contributions of each team member. The targeted base salary range for this role is $101,000-$152,000 per year. Please note that this range is provided as a guideline and the final offer will be based on several factors, including but not limited to, skillset and competencies, level of experience, education, certifications, and location. We value transparency in our hiring process and are happy to discuss how your unique qualifications align with our compensation structure during the interview process.\n\nApplied Information Sciences does not discriminate on the basis of race, national origin, religion, color, gender, sexual orientation, age, disability, protected veteran status, or any other basis. Employment decisions are based solely on qualifications, merit, and business needs."
 },
 {
  "job_id": "cWFLdgrQsMh8VjiCAAAAAA==",
  "title": "Digital Forensics Examiner",
  "employer": "Senseient",
  "country": "us",
  "description": "Sensei Enterprises, Inc. is looking for a motivated, digital forensics technologist with 1 to 5 years of experience. The successful applicant will be someone who projects professionalism and meticulous attention to detail. Forensic certification(s) and/or technical certification(s) are a plus.\n\nThis position requires some, although infrequent, travel. Interaction with clients is a necessary part of this position. We are looking to fill this full-time position immediately. Some of the qualities we’re looking for in a successful candidate include: Bachelor’s degree in Digital Forensics or applicable field Basic familiarity with Cellebrite, X-Ways, Magnet Forensics or other digital forensics software Familiarity with acquiring electronic evidence such as hard drives, USB flash drives and mobile phones Solid technical background of computers, hardware and software Sound understanding of basic forensic concepts and evidence handling Understanding of file systems and artifacts Basic knowledge of computer repair and support Basic knowledge of scripting Expert testimony experience a plus We pay 100% of individual health insurance for employees, offer a 401K retirement plan with matching contributions, along with paid vacations and Federal holidays."
 },
 {
  "job_id": "rx1tkYsuPfg0XZneAAAAAA==",
  "title": "Remote Cyber Forensics & Exploitation Expert",
  "employer": "Kids for the Future",
  "country": "us",
  "description": "Kids for the Future in Washington DC is seeking a Cyber Forensics and Digital Exploitation Specialist. This role involves identifying and analyzing digital evidence across various systems to support investigations and legal proceedings.\n\nThe ideal candidate will possess strong analytical skills, a background in cybersecurity or related fields, and the ability to maintain strict evidence handling standards. The position allows for a combination of on-site and remote work."
 },
 {
  "job_id": "lfRhEazVvrjIDfknAAAAAA==",
  "title": "Digital Forensic Analyst (TS/SCI)- Senior & Mid",
  "employer": "Vexterra Group",
  "country": "us",
  "description": "Vexterra Group is searching for a Digital Forensic Analysts to provide the following support:\n\n• Conduct forensic examination of High Priority Digital Media to include:\n• Full-Scope forensic examinations\n• Advanced registry and Internet history analysis\n• Date obfuscation and steganography detection and analysis\n• Large data set analysis and Target language Keyword search\n• Forensic tool and script development\n• Sector-level entity extraction\n• Metadata extraction and analysis\n• Network forensics and analysis\n• Generate professional technical exploitation reports of interest to the customer and the Intel Community\n• Perform application and internet activities analysis to support source vetting, digital profiling, and other requirements\n• Coordinate, enhance, and promulgate forensic and technical exploitation standards for forward deployed customer assets\n• Provide Subject Matter Expert-level technical support for federated partners, internal customer, and customer deployed platforms\n• Provide global technical exploitation response capabilities to include:\n• Provide deployable technical exploitation personnel to meet customer and partner contingency requirements\n• Provide expert multi-functional exploitation expertise as required\n• Coordinate with customer operations on technical exploitation platform and training related issues\n• Plan, integrate and execute full-spectrum technical exploitation plans, exercises, training, and operations as required\n• Assist in the conduct of Site Exploitation (SE) activities as required\n• Provide technical support to field collection and other operational partner elements to include:\n• Diverse set of technical exploitation tools and tradecraft\n• Assist asset validation and credibility assessments by providing baseline assessments of digital media and cellular telephones\n\nEducation/Experience\n\n• Eight (8) years of digital forensic experience; OR\n• Bachelor’s degree in Digital Forensics or Computer Science + six (6) years of digital forensic experience; OR\n• Master's degree in Digital Forensics or Computer Science + five (5) years of digital forensic experience\n• Ability to design, implement and document computer forensics services to include evidence seizure, computer forensic analysis and data recovery\n• Ability to convey technical information effectively and concisely to a wide range of audiences\n• Working experience in hardware configuration and network/data communications\n• Working experience in software development and scripting\n• Working experience in law enforcement evidence seizure\n• Working experience conducting intelligence analysis and writing finished intelligence reporting with high quality and with minimal revision\n• Willing to travel CONUS and/or OCONUS on TDY to include hazardous zones\n\nCertifications\n\n• Two or more industry standard digital forensic certifications (e.g. EnCE, MCFE, CCME, CCFE, GCFE, GASF, ACE, or CCE etc)\n\nClearance\n\n• Active TS/SCI\n• Counter Intelligence Polygraph or be willing to obtain one\n\nPowered by JazzHR\n\nEU8BVW9viR"
 },
 {
  "job_id": "KdIuAvLQHQpgmRLmAAAAAA==",
  "title": "Senior Digital Forensics Analyst ( Python, Splunk, Arcsight)",
  "employer": "BAE Systems",
  "country": "us",
  "description": "Job Description BAE Systems has a job opening for a Digital Forensics Analyst. The Forensics Analyst will conduct digital media acquisition and analysis, team leadership and mentoring, and incident response analysis in an enterprise network environment. The candidate will have the ability to perform deep dive analysis of preserved and collected digital evidence to restore deleted files, determine usage patterns, Internet history, USB analysis, data carving/recovery, and other advanced analytical processes to recover evidence and artifacts in support of a variety of case types. The candidate will be familiar with Incident Response and Handling best practices in accordance with NIST SP documentation (800-61, etc.). Digital forensic and incident handling case types may include: advanced malware, digital media misuse, insider threat, and potential criminal conduct. This position requires ongoing proficiency in digital and mobile forensic tools, practices, and procedures, as well as emerging threats to networks and systems. Additionally, this role is responsible for producing and managing automation improvements in the Python scripting language.Required Education, Experience, & Skills Must be eligible to possess a final US Secret Security Clearance. Minimum of one industry recognized technical certification.\n\nDemonstrated experience in the following skills:\n• Written and verbal communications.\n• Professional and technical report writing.\n• Ability to make recommendations to senior leadership in all matters involving digital forensics.\n• Ability to work independently as well as in a team environment.\n• Demonstrated knowledge of current digital forensic techniques and procedures.\n• Knowledge of the forensic laboratory accreditation process.\n• Creative problem solving abilities.\n• Ability to anticipate and respond to changing priorities in a professional manner (triage, prioritization, multi-tasking, project scheduling).\n• Ability to collaborate with and provide support to internal and external customers.\n• Case tracking and investigation management.\nExperience with the following tools/languages:\n• Forensic Toolkit (FTK)\n• Microsoft Purview\n• Python\n• Splunk\n• Arcsight\nAt least one of the following certifications:\n• EnCase® Certified Examiner (EnCE)\n• GIAC Certified Forensic Examiner (GCFE)\n• GIAC Certified Forensic Analyst (GCFA)\n• GIAC Certified Intrusion Analyst (GCIA)\n• GIAC Certified Enterprise Defender (GCED)\n• GIAC Certified Incident Handler (GCIH)\n• Access Data Certified Examiner (ACE)\n• Certified Ethical Hacker (CEH)\n• Certified Computer Examiner (CCE)\nPreferred Education, Experience, & Skills\n• 8+ Years Digital Forensics experience.\n• 5+ years incident response and handling experience.\n• Bachelor’s Degree in Criminal Justice, Digital Forensics, Computer Science, or a related discipline.\n• Relevant forensics or incident handling certification.\n\nPay Information\nFull-Time Salary Range: $132962 - $226035\n\nPlease note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.\n\nEmployee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.\nAbout BAE Systems, Inc.BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it’s what we do at BAE Systems. Working here means using your passion and ingenuity where it counts – defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team—making a big impact on a global scale. At BAE Systems, you’ll find a rewarding career that truly makes a difference.\n\nThis position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified."
 },
 {
  "job_id": "k2VGSa_YSiZ_vp6eAAAAAA==",
  "title": "Digital Media Forensics Specialist - Expert",
  "employer": "Cherokee Federal",
  "country": "us",
  "description": "Digital Media Forensics Specialist - Expert\nThis position requires an active TS/Sensitive Compartmental Information (SCI) clearance.\nPlease Note:This position is pending a contract award.If you are interested in a future with Cherokee Federal, APPLY TODAY!Although this is not an approved position, we are accepting applications for this future and anticipated need.\nCherokee Analytics is seeking a Digital Media Forensics Specialist to support the Army Counterintelligence Command (ACIC).\nCompensation & Benefits:\nPay commensurate with experience.\nFull time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.\nDigital Media Forensics Specialist - Expert Responsibilities Include:• Provide support for CI and CT investigations\n• Research, design, deploy, and lead training events\n• Evaluate emerging forensic technologies\n• Provide operational security assessments and support cyber forensic and cyber security tasks\n• Combine computer science with forensic skills to recover information from computers and storage devices to recover data like documents, photos, and emails from computer hard drives and other data storage devices that have been deleted, damaged, or otherwise manipulated\n• Use forensic tools and investigative methods to find specific electronic data, including internet use history, word processing documents, images, and other files\n• Hunt for files and information that have been hidden, deleted or lost\n• Help officials analyze data and evaluate its relevance\n• Utilize expertise to protect computers from infiltration, determine how a computer was broken into, or recover lost files\n• Create detailed notes on processes undertaken and develop intelligence-based reporting\n• Provide testing and evaluation of emerging trends in digital forensics software and hardware and assist in developing new and innovative forensic processes and procedures\n• Perform all phases of the forensic examination of digital media, including on-site and off-site evidence acquisition/seizures, forensic analysis, and reporting, ensuring chain of custody is maintained and that applicable rules of evidence are adhered to\n• Provide support for incident response activities, intrusion events, and malware analysis\n• Performs other job-related duties as assigned\nDigital Media Forensics Specialist - Expert Experience, Education, Skills, Abilities requested:• Current TS/SCI security clearance\n• Must meet one of the following: • High School Diploma with twenty (20) years of relevant experience\n• Associates degree with seventeen (17) years of relevant experience\n• Bachelor\\'s degree with fifteen (15) years of relevant experience\n• Master\\'s degree with twelve (12) years of relevant experience\n\n• Minimum of two (2) years of host based forensic experience\n• DoD Digital Forensic Examiner (DFE) certification\n• Experience with mobile device forensics is highly desired\n• Certified Forensic Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), or EnCase Certified Examiner highly desired\n• Must pass pre-employment qualifications of Cherokee Federal\nCompany Information:\nCherokee Analytics (CA) is a part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government\\'s mission with compassion and heart. To learn more about CA, visit\n\nCherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.\nSimilar searchable job titles: • Computer Forensics Specialist\n• Cyber Intelligence Analyst\n• Media Exploitation Specialist\n• Collected Enemy Material Intelligence Analyst\n• Exploitation Intelligence Analyst\nLegal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law.\nMany of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.\nAs required by our governmental client, this position requires being a US Citizen AND an active TS/Sensitive Compartmental Information (SCI) clearance.\n\nSalary: USD 72000 - 108000 per year\n\nExperience: 5 years required"
 },
 {
  "job_id": "I__CIlLR5nevZsGKAAAAAA==",
  "title": "Junior Digital Forensic Analyst",
  "employer": "Peraton",
  "country": "us",
  "description": "Responsibilities\n\nPeraton is currently seeking to hire a Junior Digital Forensic Analyst to join our Federal Strategic Cyber program in the Cyber & Intelligence sector.\n\nLocation: On-site, Arlington, VA\n\nRole:\n\n• The programs' Computer Investigations and Forensics Division (CIF) recovers and analyzes digital evidence in support of Diplomatic Security Service (DSS) criminal, cyber, and administrative investigations.\n\n• CIF’s digital forensics laboratory processes and examines a wide range of digital media using advanced technologies, decryption methods, and forensic tools to support the DSS mission.\n\nIn this role, you will:\n\n• Solve complex investigative challenges and ensures digital evidence meets Department of Justice court-admissibility standards.\n\n• Conduct forensic examinations of digital data from cellphones, tablets, computers, removable media, cloud sources, and other platforms.\n\n• Apply recognized scientific practices to identify, analyze, interpret, and present digital evidence for criminal, civil, and administrative matters.\n\n• Perform detailed, targeted examinations in line with investigative objectives, legal process, and search warrant limitations.\n\n• Use industry-standard forensic tools—such as Cellebrite (including Inseyets), Oxygen Forensic Detective, Magnet Forensics GrayKey and Axiom, Nuix, X-Ways, and similar for extraction and examination.\n\n• Analyze data from various operating systems and applications, including Windows, macOS, iOS, Android, cloud services, and common backup formats.\n\n• Produce clear, comprehensive reports that explain findings for investigators, prosecutors, and other stakeholders.\n\n• Provide expert witness testimony, explaining examination procedures and technical findings to non-technical audiences in federal, state, and local proceedings.\n\n• Provide on-site support during search warrant executions by identifying, collecting, packaging, documenting, and preserving digital evidence while maintaining strict chain of custody.\n\n• Work closely with program leadership and peers to maintain forensically sound procedures and best practices for acquisition, analysis, and presentation of digital evidence.\n\n• Conduct quality checks of artifacts to ensure accuracy, completeness, and clarity before customer delivery.\n\n• Share lessons learned and emerging techniques with colleagues to enhance collective expertise.\n\n• Stay current on developments in digital forensics, cybersecurity, forensic law, mobile devices and applications, social media platforms, and encryption/decryption methods.\n\nWork environment:\n\n• On-site role based in Arlington, VA.\n\n• Collaborative, mission-focused team environment.\n\n• Work may include support during time-sensitive investigative activities.\n\nQualifications\n\nMinimum qualifications:\n\n• Bachelor’s degree and 1+ year of relevant experience. An additional 4 years of relevant experience without a degree.\n\n• One of the following certifications, with continued certification required as a condition of employment:\n\n• GIAC: GCFE or GASF\n\n• IACIS: CFCE or ICMDE\n\n• NCFI: BCERT or MDE\n\n• DoD: CDFE\n\n• OpenText: EnCE\n\n• Cellebrite: CCO+CCPA or CCME\n\n• Oxygen Forensics: OFC\n\n• Magnet Forensics: MCFE\n\n• X-Ways: XPERT\n\n• Demonstrated proficiency with mobile and non-mobile forensic software tools such as Magnet Axiom, Cellebrite, and Oxygen, as well as advanced mobile extraction hardware and software.\n\n• Working knowledge of Windows and macOS, Apple iOS, Android, and their associated backup technologies.\n\n• Experience writing detailed, technically accurate reports that clearly communicate complex digital forensic findings to non-technical audiences.\n\n• Demonstrated strong critical thinking, creativity, sound judgment, and awareness to recognize when to seek leadership guidance.\n\n• Ability to collaborate effectively and professionally with leadership, peers, forensic analysts, law enforcement, prosecutors, CIF customers, and other stakeholders at all levels to deliver high quality forensic products.\n\n• Willingness and ability to travel for on-scene evidence seizures, training, and/or testimony.\n\n• Commitment to staying current on advancements in digital forensics, cybersecurity, forensic law, mobile technologies, social media, applications, and encryption.\n\n• U.S. citizenship required.\n\n• Ability to obtain an interim Secret clearance before starting.\n\n• Ability to obtain and maintain a final Top-Secret security clearance.\n\nPeraton Overview\n\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\n\nTarget Salary Range\n$66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.\nEEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law."
 },
 {
  "job_id": "3tsftVsSFqD_jAOUAAAAAA==",
  "title": "Expert Network Forensics Cybersecurity Analyst",
  "employer": "NewGen",
  "country": "us",
  "description": "Our Partner provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. They offer advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. They are seeking Network Forensics Cybersecurity Analysts to support this critical customer mission.\n\nResponsibilities\n\n• Assist the Government lead in coordinating teams in preliminary incident response investigation\n\n• Assist the Government lead with interfacing with the customer while on site\n\n• Determine appropriate courses of actions in response to identified and analyses anomalous network activity\n\n• Assess network topology and device configurations, identifying critical security concerns and providing security best practice recommendations\n\n• Assist with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies\n\n• Collect network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and use discovered data to enable mitigation of potential Computer Network Defense incidents\n\n• Analyze identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information\n\n• Assist with real-time CND incident handling (i.e., forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation) tasks to support onsite engagements\n\n• Provide technical briefings as required\n\nRequirements\n\n• TS/SCI Clearance\n\n• U.S. Citizenship\n\n• Must be able to obtain DHS Suitability\n\n• BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 10+ years of network investigations experience\n\n• 8+ years of directly relevant experience in network investigations\n\n• In depth knowledge of CND policies, procedures and regulations\n\n• In depth knowledge of standard protocols - ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, TCP/IP\n\n• In depth knowledge and experience of Wifi networking\n\n• In depth knowledge and experience of network topologies - DMZ's, WAN's, etc.\n\n• Substantial knowledge of Splunk (or other SIEM's)\n\n• Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)\n\n• Knowledge of Computer Network Defense policies, procedures, and regulations\n\n• Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture\n\n• Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources\n\n• Ability to identify and analyze anomalies in network traffic using metadata\n\n• Experience with reconstructing a malicious attack or activity based on network traffic\n\n• Experience examining network topologies to understand data flows through the network\n\n• Must be able to work collaboratively across physical locations\n\nDesired Skills\n\n• Substantial knowledge of network device integrity concepts and methodologies\n\n• Proficiency with network analysis software (e.g. Wireshark)\n\n• Proficiency with carving and extracting information from PCAP data\n\n• Proficiency with non-traditional network traffic (e.g. Command and Control)\n\n• Proficiency with preserving evidence integrity according to standard operating procedures or national standards\n\n• Proficiency with virtualized environments\n\nDesired Certifications\n\n• DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Analyst/CSSP Incident Responder, CEH\n\n• SANS GIAC GNFA preferred\n\nAbout Us\n\nFor more than 20 years, NewGen Technologies has solved our clients' toughest IT challenges with integrity, security, and outstanding service by delivering both technology and talent. We have helped secure borders, have used artificial intelligence (AI) to fight terror, aided the identification of criminals, and have helped to prevent crime through the introduction of biometrics. Our team of Highly Cleared Specialists have hard-to-find skills and expertise in a wide spectrum of technologies to provide solutions that transform business processes and solve problems of national significance. #CJ"
 },
 {
  "job_id": "-YOCorMrWEkhfyJGAAAAAA==",
  "title": "Cyber Forensics Investigations Specialist",
  "employer": "NXTKey Corporation",
  "country": "us",
  "description": "NXTKEY CORPORATION, located in Washington, DC, seeks a skilled Digital Investigator to provide investigative support and analysis. Candidates should hold formal training in Digital Forensics and relevant certifications, as well as experience in law enforcement settings.\n\nThe role involves analyzing data, working with technical experts, and presenting findings in legal contexts. If you're a detail-oriented professional passionate about supporting law enforcement operations, apply now to join the NXTKEY team!"
 },
 {
  "job_id": "S0f2hktH4fciFT8EAAAAAA==",
  "title": "Principal/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)",
  "employer": "Charles River Associates",
  "country": "us",
  "description": "About Charles River Associates\n\nCRA is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations. Our two main services – economic and management consulting – are delivered by practice groups that focus on specific areas of expertise or industries. Click here to learn how CRA can help you launch your career.\n\nPosition Overview\n\nCRA’s Forensic Services practice supports companies’ commitment to integrity by assisting them and their counsel in independently responding to allegations of fraud, waste, abuse, misconduct, and non-compliance. We are noted for deploying cross-trained teams of forensic professionals to assist our clients in gaining deeper insights and greater value more quickly. We provide accounting and forensic services as well as cybercrime investigation services.\n\nResponsibilities\n\nAs an experienced leader in the forensic & cyber investigations space, your responsibilities as a Principal may include (but are not limited to):\n\n• Leading security and privacy investigations for CRA clients, in preparation of, and in response to, data security matters, which may include ongoing theft of trade secret investigations, cyber breach detection, threat analysis, incident response and malware analysis;\n• Performing forensic analysis of digital information using standard computer forensics and evidence handling techniques and computer forensics tools;\n• Serving as primary point of contact for clients with regard to all engagement activities;\n• Supervising project team execution by leading quality assurance efforts and overseeing work product;\n• Identifying opportunities and implementing improvements to increase the abilities of the digital forensic and incident response team;\n• Maintaining effective relationships with local, state and federal law enforcement agencies to assist in criminal matters;\n• Creating, leading, and maintaining leveraged team environment that is positioned for continued success and expansion by actively recruiting and retaining employees, and managing team morale;\n• Participating in and leading business development efforts by building relationships with current and potential clients, drafting and presenting proposals, participating in pitches, and demonstrating firm capabilities to potential clients;\n• Providing technical assessment/audit and guidance to clients on the adequacy of cyber security controls in accordance with cybersecurity frameworks that are included in one or more of the following - NIST CSF 2.0, HIPAA, ISO 27001 and 27002, SOC2, NERC-CIP;\n• Assist with team recruiting and training efforts as needed.\n\nDesired Qualifications\n\n• Must hold a Bachelor’s or Master’s degree in a related field.\n• 10+ years’ experience in cyber intrusion investigation, digital forensics or incident response analysis.\n• Ability to effectively lead teams, prioritize multiple projects and meet timely deadlines.\n• Experience in a hands-on technical role functioning as a testifying expert, incident responder, network forensic analyst or malware analyst;\n• Experience leading data analytics engagements and managing the execution of technology-based best practices.\n• Working knowledge of computer hardware components, operating systems, file systems, computer networks, e-mail systems, mobile devices, IT security or incident response.\n• Deep knowledge of networking (TCP/IP, design, traffic flow, protocols, sessions), operating systems (Windows / *nix) and web technologies.\n• Experience performing “pixel tracking” investigations;\n• Experience in software development lifecycle, full-stack development and performing source code review;\n• Willing and able to travel for client projects.\n\nTo Apply\n\nTo be considered for a position in the United States, we require the following:\n\n• Resume – please include current address, personal email and telephone number;\n\nIf you are interested in applying for one of our international locations, please visit our Careers site to view and apply for available jobs.\n\nCareer Growth And Benefits\n\n• CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually through formal and informal programs, encourage you to thrive as an individual and team member. Beginning with research and analysis skill building, training continues with technical training, presentation skills, internal seminars, and career mentoring and performance coaching from an assigned senior colleague. Additional leadership and collaboration opportunities exist through internal firm development activities.\n• We offer a comprehensive total rewards program including a superior benefits package, wellness programming to support physical, mental, emotional and financial well-being, and in-house immigration support for foreign nationals and international business travelers.\n\nWork Location Flexibility\n\nCRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship and inclusivity. At the same time, we recognize that individuals realize a range of benefits when working from home periodically. We currently expect that individuals spend at least 3 to 4 days a week working in the office (which may include traveling to another CRA office or to client meetings), with specific days determined in coordination with your practice or team.\n\nOur Commitment to Equal Employment Opportunity\n\nCharles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.\n\nSalary And Other Compensation\n\nA good-faith estimate of the annual base salary range for this position is $175,000 - $250,000. Stating pay within this range may vary based on factors such as education level, experience, skills, geographic location, market conditions, and other qualifications of the successful candidate. This position may be eligible for additional bonus incentive compensation.\n\nCRA offers a comprehensive benefits package, subject to eligibility requirements, which may include: medical, dental, and vision insurance; 401(k) retirement plan with employer match; life and disability insurance; paid time off (vacation, sick leave, holidays); paid parental leave; wellness programs and employee assistance resources; and commuter benefits."
 },
 {
  "job_id": "-_rDUc38xRJAJnrFAAAAAA==",
  "title": "Digital Forensics Examiner",
  "employer": "Peraton",
  "country": "us",
  "description": "Required Qualifications:\n• Education: Bachelor's degree and 8+ years relevant experience, or Master's degree and 6+ years relevant experience. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.\n• Certifications: One or more of the following active forensic certification - Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications.\n• Security Clearance: Minimum active Secret.\n• At least 4 years experience conducting digital forensic analysis on a variety of media, including Windows, OS X, Linux, Android and iOS.\n• Experience in supporting criminal investigations.\n• Experience writing Technical Reports, detailing results of analysis.\n• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools.\n• Formalized training in the areas of computer science, forensics, etc.\n• Understanding of network protocols and networking concepts.\n• Knowledge of and experience with virtual environments.\n• Must pass the customer’s Mentorship Program within 4 months.\n\nDesired Qualifications:\n• Previous Law Enforcement experience.\n• Experience in performing technical reviews or peer reviews.\n• Experience mentoring other examiners.\n• Experience testifying as an expert witness in support of criminal trials.\n\nPeraton is seeking a Digital Forensics Examiner in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.\n\nThe person in this role will analyze electronic media in support of a federal government agency, focused on sensitive on-going criminal investigations and operations.  Using a wide variety of forensic tools, the Digital Forensic Analyst examines the hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence that could be used in a court of law. Performs forensic analysis of digital information and gathers and handles evidence. Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Employs forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types. Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. May be required to testify in federal/military court as expert witnesses.\n\nThis position is fully on-site M-F in the Baltimore-Metropolitan area."
 },
 {
  "job_id": "eGdlmRxG8IVQMvy0AAAAAA==",
  "title": "Senior Digital Forensic Analyst",
  "employer": "Vexterra Group",
  "country": "us",
  "description": "Overview\n\nVexterra Group is searching for a Digital Forensic Analyst to provide support across forensic examinations, technical exploitation, and related activities for diverse customer assets and stakeholders.\n\nResponsibilities\n\n• Conduct forensic examination of High Priority Digital Media, including full-scope forensics, advanced registry and Internet history analysis, date obfuscation and steganography detection, and large data set analysis with target language keyword search.\n\n• Develop forensic tools and scripts; perform sector-level entity extraction, metadata extraction and analysis, and network forensics and analysis.\n\n• Generate professional technical exploitation reports for customers and the Intel Community.\n\n• Analyze applications and Internet activities to support source vetting, digital profiling, and other requirements.\n\n• Coordinate, enhance, and promulgate forensic and technical exploitation standards for forward deployed customer assets.\n\n• Provide Subject Matter Expert-level technical support for federated partners, internal customers, and customer-deployed platforms.\n\n• Provide global technical exploitation response capabilities, including deployable personnel to meet customer and partner contingency requirements.\n\n• Offer expert multi-functional exploitation expertise as required and coordinate with customer operations on platform and training issues.\n\n• Plan, integrate, and execute full-spectrum technical exploitation plans, exercises, training, and operations as required.\n\n• Assist in the conduct of Site Exploitation (SE) activities as required.\n\n• Provide technical support to field collection and other operational partner elements, including a diverse set of technical exploitation tools and tradecraft.\n\n• Assist asset validation and credibility assessments by providing baseline assessments of digital media and cellular telephones.\n\nEducation/Experience\n\n• Eight (8) years of digital forensic experience; OR\n\n• Bachelor’s degree in Digital Forensics or Computer Science + six (6) years of digital forensic experience; OR\n\n• Master's degree in Digital Forensics or Computer Science + five (5) years of digital forensic experience\n\n• Ability to design, implement and document computer forensics services including evidence seizure, computer forensic analysis, and data recovery\n\n• Ability to convey technical information effectively and concisely to a wide range of audiences\n\n• Working experience in hardware configuration and network/data communications\n\n• Working experience in software development and scripting\n\n• Working experience in law enforcement evidence seizure\n\n• Experience conducting intelligence analysis and writing finished intelligence reporting with high quality and minimal revision\n\n• Willing to travel CONUS and/or OCONUS on temporary duty to include hazardous zones\n\nCertifications\n\n• Two or more industry standard digital forensic certifications (e.g., EnCE, MCFE, CCME, CCFE, GCFE, GASF, ACE, or CCE, etc.)\n\nClearance\n\n• Active TS/SCI\n\n• Counter Intelligence Polygraph or be willing to obtain one"
 },
 {
  "job_id": "OVuw7diLC5f3tEB-AAAAAA==",
  "title": "Cyber Forensic Specialist",
  "employer": "Accenture Federal Services",
  "country": "us",
  "description": "At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.\n\nJoin Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.\n\nJoin us to drive positive, lasting change that moves missions and the government forward!\n\nWe are seeking a skilled and detail-oriented Cyber Forensic Specialist to join our Digital Forensics and Incident Response (DFIR) team. This role is critical in supporting the organization's Cyber Incident Response Team (CIRT) by providing expert-level digital forensic and investigative support. Additionally, the position involves working closely with cross-functional teams, including Human Resources, Legal, and Insider Threat, to conduct sensitive internal investigations related to policy adherence and organizational concerns.\n\nThe Cyber Forensic Specialist will also collaborate with the internal Legal team to execute litigation holds and eDiscovery-related evidence captures, ensuring full compliance with organizational and regulatory requirements. The role further involves serving as the central point for evidence intake, processing, and management for cases, litigation holds, and investigations.\n\nThe Work\n\n• DFIR Support:\n• Collaborate with the Cyber Incident Response Team (CIRT) to investigate and respond to cybersecurity incidents, including malware infections, unauthorized access, data breaches, and advanced persistent threats (APTs).\n• Perform digital forensic analysis on devices such as laptops, desktops, servers, mobile devices, and network logs to identify the root cause and scope of incidents.\n• Provide recommendations on containment, remediation, and recovery activities.\n• Investigative Support:\n• Conduct internal investigations in collaboration with HR, Legal, and Insider Threat teams related to:\n• Potential risks to organizational assets and operations.\n• Inquiries requiring the collection and analysis of electronic evidence.\n• Other internal matters involving digital investigations.\n• Analyze electronic communications, file systems, and digital artifacts to uncover evidence.\n• Prepare detailed, well-documented reports and findings to support decision-making and potential actions.\n• Litigation Holds and eDiscovery:\n• Partner with the Legal team to ensure the timely and accurate implementation of litigation holds, including identifying, preserving, and collecting electronically stored information (ESI).\n• Perform eDiscovery-related data captures, including on-premises and cloud-based systems, in alignment with legal and regulatory requirements.\n• Maintain thorough documentation of all eDiscovery activities for legal proceedings and audits.\n• Evidence Intake and Management:\n• Serve as the central point for evidence intake, ensuring proper chain of custody and documentation for all collected digital evidence.\n• Maintain and enforce evidence management protocols, including secure storage, tagging, and tracking for litigation holds and legal proceedings.\n• Ensure compliance with data retention and destruction policies.\n• Process Optimization and Tooling:\n• Leverage forensic tools (e.g., EnCase, FTK, X-Ways, Magnet Axiom) to analyze and process evidence efficiently.\n• Continuously improve and document forensic methodologies, workflows, and playbooks.\n• Stay up to date with emerging forensic techniques, tools, and industry best practices.\n• Collaboration and Training:\n• Provide guidance and training to the CIRT and other internal teams on forensic processes and evidence handling.\n• Collaborate with outside counsel or external third-party forensic services, when required.\n\nWhat You Need\n\n• US Citizenship required.\n• 3-5 years of experience in information security, or other equivalent combination of education or equivalent work experience.\n• 3 + years of experience with performing digital forensics on physical and cloud systems.\n• 2+ years of experience performing event and log analysis including one or more of the following: Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools and other security tools found in large enterprise network environments; along with experience working with Security Information and Event Management (SIEM) solutions.\n• 1+ years of experience investigating, containing, eradicating, and preventing current and future compromises i.e., implementing or requesting an IP/domain/URL block, file hash block, email purge, software removal, device reimage, etc.\n• 1+ years of experience with collecting, processing, reviewing, and producing Electronically Stored Information (ESI) to legal teams.\n• Work independently to deliver prompt solutions without direct supervision.\n• Excellent written and oral communication skills, attention to detail, and interpersonal skills.\n• Experience presenting complex technical information to decision makers and leading them through the decision-making process.\n• Experience with digital forensic imaging (FTK, Cellebrite, Paladin, etc.) and analysis tools (EnCase, Autopsy, Nuix, etc.)\n• Experience with evidence preservation and chain of custody.\n• Experience with TCP/IP, common application layer protocols, and packet analysis of the same.\n• Experience performing static and dynamic malware analysis.\n• Experience with indicators of attack and compromise.\n• Experience with basic data parsing and analysis tools, i.e., Excel, grep, sed, awk, regex, etc.\n• Familiarity with various network and host-based security applications and tools, such as network and host assessment/scanning tools, network and host-based intrusion detection systems, and other security software packages.\n• Familiarity with detection design & engineering concepts to tune detections.\n• Familiarity with Windows / Linux architecture and endpoint analysis of the same.\n• Familiarity with the Electronic Discovery Reference Model (EDRM) for ESI discovery, preservation, and production.\n\nBonus if you have\n\n• DFIR related certifications including but not limited to: SANS (GCED, GCLD, GCIH, GCFE,GCFA,GREM),CFCE,EnCE.\n• Knowledge of scripting languages (e.g., Python, PowerShell) to automate forensic tasks.\n• Experience with eDiscovery toolsets such as: Microsoft Purview eDiscovery (Standard/Premium) and Nuix.\n\nAs required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.\n\nThe pay range for the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland is:\n\n$69,900—$153,000 USD\n\nWhat We Believe\n\nAs a company wholly dedicated to serving the US federal government, we bring together the best talent to help reinvent how federal agencies operate and deliver greater value for their mission and the American people. We have an unwavering commitment to creating a culture in which all our people are respected, feel a sense of belonging, and have equal opportunity. As a business imperative, every person at Accenture Federal Services has the responsibility to create and sustain a culture where everyone feels welcomed and included. This is grounded in our core values and our experience that hiring and developing great people who reflect different perspectives, experiences, and backgrounds is key to driving innovation and delivering the results that our clients and the country count on.\n\nEqual Employment Opportunity Statement\n\nWe believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. For details, view a copy of the Accenture Federal Services Equal Opportunity Policy Statement.\n\nAccenture Federal Services is an Equal Employment Opportunity employer. Additionally, as an Affirmative Action Employer for Veterans and Individuals with Disabilities, Accenture Federal Services is committed to providing veteran employment opportunities to our service men and women.\n\nRequesting An Accommodation\n\nAccenture Federal Services is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture Federal Services and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.\n\nIf you are being considered for employment opportunities with Accenture Federal Services and need an accommodation for a disability or religious observance during the interview process or for the job you are interviewing for, please speak with your recruiter.\n\nOther Employment Statements\n\nApplicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.\n\nCandidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.\n\nJob candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.\n\nThe Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.\n\nCalifornia requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please click here for additional important information."
 },
 {
  "job_id": "quJoUAo3DiVseDKFAAAAAA==",
  "title": "Digital Forensics Systems Specialist",
  "employer": "NXTKEY CORPORATION",
  "country": "us",
  "description": "Company Description\n\nNXTKey Corporation has been delivering Information Technology, Information management, Information Assurance (IA) and cybersecurity solutions to US Federal Government and Commercial Clients since 2005.\n\nJob Description\n\nThe Digital Forensics Systems Specialist provides technical leadership and operational support for a federal digital forensic laboratory environment supporting active law enforcement and regulatory investigations. This position ensures the availability, security, and forensic integrity of systems, tools, and infrastructure used to collect, process, analyze, and preserve digital evidence in accordance with federal evidentiary, legal, and security requirements.\n\nDuties and Responsibilities\n• Support and sustain digital forensic laboratory systems and infrastructure directly supporting active federal investigations and enforcement actions.\n• Lead and execute technical initiatives that modernize digital forensic capabilities while maintaining forensic soundness, evidentiary integrity, and chain-of-custody requirements.\n• Plan, manage, and deliver assigned technical projects of moderate to advanced complexity, ensuring adherence to federal schedules, budgets, and operational priorities.\n• Perform system validation, functional testing, and operational readiness assessments for new or upgraded forensic tools, platforms, and environments prior to production use.\n• Develop, maintain, and enforce system, operational, and forensic documentation required for audits, accreditation, discovery, and legal proceedings.\n• Provide hands-on technical support for information systems supporting forensic examinations, evidence storage, analysis, and reporting.\n• Ensure forensic systems comply with applicable federal policies, standards, and controls related to data integrity, access control, auditing, and security.\n• Proactively monitor and assess system performance, reliability, and security; identify risks and implement corrective actions to ensure uninterrupted investigative operations.\n• Implement automation and process improvements that increase examiner efficiency while preserving evidentiary defensibility.\n• Coordinate with forensic examiners, investigators, cybersecurity staff, and program leadership to support mission-critical investigative operations.\n\nQualifications\n• Demonstrated expertise in Digital Forensics, including forensic tools, laboratory systems, and workflows supporting computer, mobile, and media examinations.\n• Experience supporting forensic laboratory environments used in active law enforcement or regulatory investigations.\n• Advanced knowledge of enterprise networking, including secure network segmentation and monitoring, with experience supporting Cisco and Fortinet technologies.\n• Expert experience with virtualized environments, including:\n• On-premises platforms (VMware, Nutanix)\n• Cloud platforms (Microsoft Azure, AWS)\n• Virtual Desktop Infrastructure (VDI) solutions (Citrix, VMware Horizon)\n• Experience supporting hybrid and isolated environments designed for sensitive or classified investigative data.\n• Ability to support systems operating under federal cybersecurity and information assurance requirements (e.g., logging, access controls, incident response).\n\nAdditional Information\n• Current professional certifications such as:\n• IACIS Certified Forensic Computer Examiner (CFCE)\n• BCERT / ACERT\n• SANS (GCFE, GCFA, or equivalent)\n• Prior federal or state Law Enforcement experience as a Digital Forensic Examiner may be substituted for specific certification requirements, subject to agency approval."
 },
 {
  "job_id": "mb4IcV67vRm7-SBSAAAAAA==",
  "title": "Digital Forensics Analyst",
  "employer": "Defianx",
  "country": "us",
  "description": "Job Description\nThe Digital Forensics Analyst is responsible for collecting, preserving, analyzing, and documenting digital evidence associated with cybersecurity incidents, investigations, legal proceedings, and insider threat cases.\n\nThis position conducts forensic examinations of computers, servers, mobile devices, cloud environments, virtual systems, and storage media to determine what occurred during a security incident. The analyst reconstructs timelines, identifies attacker activity, recovers deleted artifacts, and supports root cause investigations.\n\nThe Digital Forensics Analyst maintains evidence integrity, follows chain-of-custody procedures, and produces detailed investigative reports suitable for executive, legal, regulatory, and law enforcement review.\n\nThe position frequently supports ransomware investigations, insider threat investigations, fraud investigations, intellectual property theft cases, and major breach investigations.\n\nRequirements\n• The candidate must have a minimum of Secrete Clearance.\n• Candidates must possess advanced knowledge of digital forensics principles, evidence preservation techniques, forensic acquisition methods, operating systems, file systems, memory analysis, and artifact analysis.\n• The candidate should have experience using industry-standard forensic tools and conducting investigations across Windows, Linux, macOS, cloud platforms, and mobile devices. Strong documentation skills are essential due to the legal and evidentiary nature of forensic work.\n• The position requires patience, precision, objectivity, and the ability to produce defensible findings based on evidence rather than assumptions.\n• Typical certifications include GCFA, GCFE, EnCE, CHFI, CFCE, or equivalent forensic certifications."
 },
 {
  "job_id": "0AjffNpgH6NUCxY7AAAAAA==",
  "title": "Digital Forensics Examiner",
  "employer": "Peraton",
  "country": "us",
  "description": "Responsibilities\n\nPeraton is seeking a Digital Forensics Examiner in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.\n\nThe person in this role will analyze electronic media in support of a federal government agency, focused on sensitive on-going criminal investigations and operations.  Using a wide variety of forensic tools, the Digital Forensic Analyst examines the hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence that could be used in a court of law. Performs forensic analysis of digital information and gathers and handles evidence. Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Employs forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types. Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. May be required to testify in federal/military court as expert witnesses.\n\nThis position is fully on-site M-F in the Baltimore-Metropolitan area.\n\nQualifications\n\nRequired Qualifications:\n• Education: Bachelor's degree and 8+ years relevant experience, or Master's degree and 6+ years relevant experience. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.\n• Certifications: One or more of the following active forensic certification - Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications.\n• Security Clearance: Minimum active Secret.\n• At least 4 years experience conducting digital forensic analysis on a variety of media, including Windows, OS X, Linux, Android and iOS.\n• Experience in supporting criminal investigations.\n• Experience writing Technical Reports, detailing results of analysis.\n• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools.\n• Formalized training in the areas of computer science, forensics, etc.\n• Understanding of network protocols and networking concepts.\n• Knowledge of and experience with virtual environments.\n• Must pass the customer’s Mentorship Program within 4 months.\n\nDesired Qualifications:\n• Previous Law Enforcement experience.\n• Experience in performing technical reviews or peer reviews.\n• Experience mentoring other examiners.\n• Experience testifying as an expert witness in support of criminal trials.\n\nPeraton Overview\n\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\n\nTarget Salary Range\n\n$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.\nEEO\n\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law."
 },
 {
  "job_id": "tuAopZ289fM0gPcAAAAAAA==",
  "title": "Senior Digital Forensics Analyst - Onsite in Arlington",
  "employer": "SkyePoint Decisions",
  "country": "us",
  "description": "SkyePoint Decisions is looking for a Senior Digital Forensics Analyst located in Arlington, Virginia. This role involves performing in-depth forensic analysis on various digital systems and providing expert witness testimony in judicial proceedings.\n\nThe ideal candidate will have a Bachelor’s degree, relevant certifications, and at least 9 years of experience in digital forensics. The position requires on-site presence, as hybrid or telework is not permitted.\n\nCompetitive salary within the range of $120,000–$136,000 and comprehensive benefits offered.\n#J-18808-Ljbffr"
 },
 {
  "job_id": "MX5vhmjRS--DtHSbAAAAAA==",
  "title": "Digital Forensics Examiner",
  "employer": "Sensei Enterprises",
  "country": "us",
  "description": "January 2, 2025\n\nSensei Enterprises, Inc. is looking for a motivated, digital forensics technologist with 1 to 5 years of experience. The successful applicant will be someone who projects professionalism and meticulous attention to detail. Forensic certification(s) and/or technical certification(s) are a plus. This position requires some, although infrequent, travel. Interaction with clients is a necessary part of this position. We are looking to fill this full-time position immediately.\n\nSome of the qualities we’re looking for in a successful candidate include:\n\n• Bachelor’s degree in Digital Forensics or applicable field\n\n• Basic familiarity with Cellebrite, X-Ways, Magnet Forensics or other digital forensics software\n\n• Familiarity with acquiring electronic evidence such as hard drives, USB flash drives and mobile phones\n\n• Solid technical background of computers, hardware and software\n\n• Sound understanding of basic forensic concepts and evidence handling\n\n• Understanding of file systems and artifacts\n\n• Basic knowledge of computer repair and support\n\n• Basic knowledge of scripting\n\n• Experience with web-browser analysis and reporting\n\n• Expert testimony experience a plus\n\nWe pay 100% of individual health insurance for employees, offer a 401K retirement plan with matching contributions, along with paid vacations and Federal holidays.\n\nTo apply for this position, please send your resume and a cover e-mail with your desired salary to mmaschke@senseient.com."
 },
 {
  "job_id": "udqKfWodUru4Y6v2AAAAAA==",
  "title": "Forensic Analyst II",
  "employer": "ITC Federal, Inc.",
  "country": "us",
  "description": "Overview\n\nJOB TITLE: Forensic Analyst II\n\nAGENCY SUPPORTED: U.S. Department of Justice (DOJ) - MEGA 6 Automated Litigation Support\n\nPOSITION TYPE: Full-Time, Contingent Upon Award\n\nLOCATION: Remote\n\nCLEARANCE: Public Trust - Candidates do not need to be cleared at the time of application but must be able to obtain and maintain a Public Trust clearance prior to starting.\n\nBENEFITS: Health, Dental and Vision, 401(k), Tuition Reimbursement, Flexible Spending Account (FSA), 11 Paid Federal Holidays, 3 weeks' Paid Time Off\n\nITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers an outstanding compensation and benefits plan and a challenging and rewarding professional work environment.\n\nWe are seeking an experienced Forensic Analyst II to support ITC Federal's work for the U.S. Department of Justice (DOJ) under the anticipated MEGA 6 automated litigation support (ALS) program. This is a fully remote position supporting DOJ's complex litigation mission.\n\nImportant: This opening is being established in connection with the MEGA 6 contract vehicle award itself. ITC Federal must still be awarded individual task orders under the vehicle before employees can be onboarded. Accordingly, this position is full-time and contingent upon both contract award and the award of the applicable task order.\n\nPOSITION OVERVIEW:\n\nFunctions in a lead capacity assuming responsibilities as a technical specialist.\n\nPROGRAM CONTEXT:\n\nThis position supports the U.S. Department of Justice (DOJ) under the anticipated MEGA 6 procurement. MEGA 6 is expected to continue DOJ's multiple-award contract vehicle for automated litigation support (ALS) services, following the structure of the MEGA 5 contract. These contracts are designed to provide DOJ offices, boards, divisions, and other federal agencies with information technology, professional services, and litigation support tools to manage complex legal proceedings efficiently.\n\nResponsibilities\n\nRESPONSIBILITIES:\n\n• Duties include: case assignment, case management, scene management, and other similar duties of a first line supervisor.\n\n• Operates at a senior-level, applying industry accepted digital forensic principles in acquiring, collecting, preserving, and processing structured and unstructured data per established industry best practices and laboratory procedures and protocols.\n\n• Responsible for managing digital forensics examinations through the entire lifecycle (case planning, intake, acquisition, examination, analysis, extraction, presentation, disposition, and expert witness testimony).\n\n• Provides identification and seizure support, forensic data acquisition/imaging; forensically-sound and non-forensic collection/capture of electronically stored information (ESI) from innumerable file structures and sources (i.e., Windows, MAC, Linux, and Unix-based desktop/laptop computer systems, servers to include Exchange, Database, Files Shares, and cloud-based email and storage; mobile devices and tablets (all operating systems), drones, and related digital storage media.\n\n• Uses vast knowledge and experience of a wide variety of advanced computer and mobile technologies and forensic theories to conduct full forensic examinations/analyses to include processing of allocated and unallocated space and file slack, data carving, and conducting timeline, Internet history, and registry analyses with the goal of developing forensically sound evidence.\n\n• Responsible for performing large-scale digital forensic examinations to include collection in a live client-server environment utilizing validated remote forensic software.\n\n• Recovers data and correlates information, prepares clear and comprehensive notes and reports of findings, and provides oral and written communications to legal staff concerning results of examinations to include legal declarations as well as expert witness testimony at trial for investigations and litigations.\n\n• Utilizes industry accepted forensic and non-forensic tools such as EnCase, FTK, Harvester, Cellebrite UFED, and NUIX.\n\n• Researches and maintains proficiency in tools, techniques, and trends.\n\n• As a digital forensics expert, serves as a source of technical counsel and advice for forensic collection/processing activities.\n\n• Acts as a source of reference for junior analysts and technicians and possesses the ability to lead forensic investigations in the field.\n\n• Reviews and approves reports, notes, and case files of junior analysts and technicians.\n\n• Collaborates with other forensic analysts and technicians, law enforcement officers, and legal experts to identify methods and procedures for recovery, preservation, and presentation of computer evidence.\n\n• Provides technical guidance and assistance to legal staff while ensuring that proper precautions are taken in the preservation and prevention of spoliation of electronic evidence.\n\n• Complies with standards, policies, and procedures established for the forensics laboratory including accreditation requirements, supplements, criteria, and interpretations as it applies to digital evidence.\n\n• May supervise a team of digital forensic analysts\n\nQualifications\n\nREQUIRED:\n\n• Ability to obtain and maintain a U.S. Government Public Trust clearance prior to start (candidates are not required to be cleared at the time of application).\n\n• Authorized to work in the United States.\n\n• Ability to work effectively in a fully remote environment.\n\n• Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field; preferred a Master's degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field and 7 to 10 years' current digital forensics collection and processing experience is required.\n\n• The Contracting Officer may consider 10 years of current industry related Digital Forensics experience as a substitute for degree.\n\n• Must possess and maintain at least 2 of the following certifications: CompTIA™ A+; CompTIA™ Network+, CompTIA™ Server+ Certification; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE), or similar non-vendor specific certification; or EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification (CCME), or similar vendor specific certifications.\n\n• Must possess extensive enterprise level experience conducting digital forensics collections and processing across a variety of operating systems and hardware and software architectures (e.g., computers, mobile devices, file share, email, and database servers, and cloud-based storage).\n\n• Must have demonstrated senior-level experience in the use of industry standard forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc. and be able to articulate the processes being conducted by these forensic tools.\n\n• Must have demonstrated working knowledge of LAN/WAN/MAN network environments.\n\n• Must have demonstrated experience in dead box, live and hybrid data acquisition methodologies.\n\n• Must have demonstrated experience in the forensic, forensically sound, and non-forensic collection and processing of a wide variety of enterprise e-mail and database systems such as Exchange, Lotus, SQL, Oracle, etc., archiving systems, and backup systems.\n\n• Must have demonstrated experience in the manual reconstruction of a RAID array.\n\n• Must have demonstrated working experience in the processing of large data volumes.\n\n• Must have demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation.\n\n• Must have demonstrated experience testifying and taking testimony in a civil, criminal, regulatory or administrative proceeding.\n\n• Must have demonstrated strong project management skills with the ability to multitask and manage several projects at one time.\n\n• Moderate travel is required.\n\nWORK ENVIRONMENT AND PHYSICAL DEMANDS:\n\n• This is a fully remote position; work is performed from a home office.\n\n• Must be located in or near the Washington, DC area and available for short-notice on-site meetings.\n\n• Work is primarily sedentary, performed while using a computer for extended periods of time.\n\nITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law."
 },
 {
  "job_id": "d9xcozYH6JtuIBgiAAAAAA==",
  "title": "Computer Forensics Specialist (Expert) - Digital Media Forensics with Security Clearance",
  "employer": "The Mission Essential Group, LLC.",
  "country": "us",
  "description": "DESCRIPTION Position: Computer Forensics Specialist (Expert) - Digital Media Forensics Team Support Location: Fort Meade/Linthicum, MD (on-site) Security Clearance: TS/SCI required; CI-poly eligibility highly desired (ability to complete polygraph as directed).\n\nSalary Range: $140,000 - $200,000 Job Description: The Expert Computer Forensics Specialist leads the Digital Media Forensics Team in support of counterintelligence (CI) and counterterrorism (CT) investigations. This role executes the full forensic lifecycle (on-site/off-site acquisition, lab analysis, reporting) for host-based and mobile devices, conducts incident response/malware triage, and mentors other forensics specialists. The Expert also designs and delivers training, evaluates emerging technologies (software/hardware), performs operational security assessments, and authors/maintains SOPs to standardize and improve forensic workflows Core Responsibilities · Support CI/CT investigations by researching, designing, deploying, and leading training events for examiners and analysts; create training artifacts and checklists that codify best practices. · Conduct operational security assessments tied to forensic operations and coordinate with Tech Ops/Cyber teams for secure handling and storage of evidence. · Evaluate and test emerging digital forensic software/hardware; recommend adoption paths and integration steps; document validation/verification of tools for evidentiary defensibility. · Develop and refine forensic procedures/SOPs and end-to-end workflows (acquisition ? analysis ? reporting) to improve cycle times and quality against established thresholds. · Recover data (documents, photos, emails, log files) from hostile or damaged systems; hunt for hidden/deleted/manipulated files and internet artifacts (history, cookies, cache, cloud sync). · Perform mobile device forensics (logical/physical extractions, app artifact analysis); corroborate host/mobile findings for holistic case narratives. · Maintain chain of custody and adhere to rules of evidence; prepare lab worksheets, imaging notes, and custody logs for audit readiness. · Produce intelligence-leveled reporting and detailed process documentation (e.g., AARs, capability/architecture assessments, policy analysis, analytical information reports); ensure timeliness, clarity, and accuracy. · Brief findings to technical/non-technical audiences; provide testimony support when required. · Coordinate priorities and schedules with COR/TPOC/PMO; provide status inputs and update risk/issue logs for forensic operations.\n\nREQUIREMENTS Minimum Qualifications · TS/SCI clearance (active); CI-poly eligibility preferred · DoD Certified Digital Forensic Examiner (DFE). · Team-level certifications covering at least one of: CFCE, GCFE, EnCase Certified Examiner must have minimum 2 years host-based and mobile device forensics. · Proven execution of full forensic lifecycle with chain of custody and evidentiary protocols. · Ability to collaborate with CI/HUMINT, Cyber, and Tech Ops stakeholders.\n\nMinimum Education\n\nQualifications · High school diploma and 20 years of relevant experience with at least a portion of the experience in the last two years OR · Associate degree and 17 years of relevant experience with at least a portion of the experience in the last two years OR · Bachelor's degree and 15 years of relevant experience with at least a portion of the experience within the last 2 years OR · Master's degree and 15 Years of relevant experience with at least a portion of the experience within the last 2 years.\n\nPreferred Qualifications · 10+ years recent digital forensics in DoD/IC environments;\n\nexperience in malware triage and incident response supporting CI/CT missions. · Additional certifications (e.g., EnCE, CFCE, GCFA/GNFA, GREM, CCE). · Experience designing/running forensic labs, tool validation programs, and writing SOPs; history of optimizing workflows and reducing cycle time. · Familiarity with RMF, ACIC editorial standards, and integration with Tech Ops/Cyber investigative processes. *Position is contingent upon award #CJ"
 },
 {
  "job_id": "3NTq6_aKQ6NzhNslAAAAAA==",
  "title": "Digital Media Forensics Specialist - Senior",
  "employer": "Cherokee Federal",
  "country": "us",
  "description": "JOB DESCRIPTION\nDigital Media Forensics Specialist - Senior\nThis position requires an active TS/Sensitive Compartmental Information (SCI) clearance.\n\nPlease Note: This position is pending a contract award. If you are interested in a future with Cherokee Federal, APPLY TODAY! Although this is not an approved position, we are accepting applications for this future and anticipated need.\nCherokee Analytics is seeking a Digital Media Forensics Specialist to support the Army Counterintelligence Command (ACIC).\n\nCompensation & Benefits:\nPay commensurate with experience.\nFull time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.\n\nDigital Media Forensics Specialist - Senior Responsibilities Include:\n• Provide support for CI and CT investigations\n\n• Research, design, deploy, and lead training events\n\n• Evaluate emerging forensic technologies\n\n• Provide operational security assessments and support cyber forensic and cyber security tasks\n\n• Combine computer science with forensic skills to recover information from computers and storage devices to recover data like documents, photos, and emails from computer hard drives and other data storage devices that have been deleted, damaged, or otherwise manipulated\n\n• Use forensic tools and investigative methods to find specific electronic data, including internet use history, word processing documents, images, and other files\n\n• Hunt for files and information that have been hidden, deleted or lost\n\n• Help officials analyze data and evaluate its relevance\n\n• Utilize expertise to protect computers from infiltration, determine how a computer was broken into, or recover lost files\n\n• Create detailed notes on processes undertaken and develop intelligence-based reporting\n\n• Provide testing and evaluation of emerging trends in digital forensics software and hardware and assist in developing new and innovative forensic processes and procedures\n\n• Perform all phases of the forensic examination of digital media, including on-site and off-site evidence acquisition/seizures, forensic analysis, and reporting, ensuring chain of custody is maintained and that applicable rules of evidence are adhered to\n\n• Provide support for incident response activities, intrusion events, and malware analysis\n\n• Performs other job-related duties as assigned\n\nDigital Media Forensics Specialist - Senior Experience, Education, Skills, Abilities requested:\n• Current TS/SCI security clearance\n\n• Must meet one of the following:\n• High School Diploma with 14 years of relevant experience\n\n• Associates degree with 12 years of relevant experience\n\n• Bachelor’s degree with 10 years of relevant experience\n\n• Master’s degree with 8 years of relevant experience\n\n• Minimum of two (2) years of host based forensic experience\n\n• DoD Digital Forensic Examiner (DFE) certification\n\n• Experience with mobile device forensics is highly desired\n\n• Certified Forensic Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), or EnCase Certified Examiner highly desired\n\n• Must pass pre-employment qualifications of Cherokee Federal\n\nCompany Information:\nCherokee Analytics (CA) is a part of Cherokee Federal – the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government’s mission with compassion and heart. To learn more about CA, visit cherokee-federal.com.\n\n#CherokeeFederal #LI-CK4 #IntelCareers\n\nCherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.\n\nSimilar searchable job titles:\n• Computer Forensics Specialist\n\n• Cyber Intelligence Analyst\n\n• Media Exploitation Specialist\n\n• Collected Enemy Material Intelligence Analyst\n\n• Exploitation Intelligence Analyst\n\nKeywords:\n• DOMEX\n\n• DOCEX\n\n• NMEC\n\n• Computer\n\nLegal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law.\nMany of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.\n\nAs required by our governmental client, this position requires being a US Citizen AND an active TS/Sensitive Compartmental Information (SCI) clearance."
 },
 {
  "job_id": "cB6NFgjg1JsQWF_JAAAAAA==",
  "title": "TS/SCI Digital Forensics Specialist | CI Poly | DFE",
  "employer": "Prescient Edge",
  "country": "us",
  "description": "A veteran-owned business in Linthicum, MD is seeking candidates for a forensics role requiring a minimum of 2 years host-based forensic experience and digital forensic certification. Candidates should possess security clearance TS/SCI with CI Polygraph or the ability to obtain it. The position offers a competitive salary, comprehensive healthcare benefits, and career development opportunities in a supportive work environment."
 },
 {
  "job_id": "0S-hEk-VIKGniIwGAAAAAA==",
  "title": "Expert Digital Media Forensics Team Support - USACIC with Security Clearance",
  "employer": "CELESTAR CORPORATION",
  "country": "us",
  "description": "Celestar Corporation is seeking a Digital Media Forensics Team Support to support The U.S. Army Intelligence and Security Command (INSCOM) under the United States Army Counterintelligence Command (USACIC) Analytical Support Contract. The primary place of performance will be Linthicum, MD. If interested and meet the qualifications, we encourage you to apply for this rewarding and impactful opportunity.\n\nANTICIPATED AWARD: July 2026 ANTICIPATED START: July 2026 PERIOD OF PERFORMANCE: 1 Base Year + 4 Option Years LOCATION: Linthicum, MD SALARY: $165,000-$170,000 CLEARANCE REQUIREMENT: Active TS/SCI About Us: Celestar, a proud Veteran-Owned company, offers highly competitive salaries and benefits. Our comprehensive benefits package includes company-paid employee and family dental insurance, employee health insurance, life insurance, and disability coverage. Additionally, we provide a 401(k)-retirement plan with company matching, paid holidays, and personal time off.\n\nResponsibilities\n\n• The Digital Media Forensics Team Support shall provide support for CI and CT investigations; research, design, deploy, and lead training events; evaluate emerging forensic technologies; provide operational security assessments and support cyber forensic and cyber security tasks.\n• The analysts will combine computer science with forensic skills to recover information from computers and storage devices to recover data like documents, photos, and e-mails from computer hard drives and other data storage devices that have been deleted, damaged, or otherwise manipulated.\n• The analyst uses forensic tools and investigative methods to find specific electronic data, including Internet use history, word processing documents, images, and other files.\n• They use their technical skills to hunt for files and information that have been hidden, deleted or lost.\n• They help officials analyze data and evaluate its relevance. The analyst may also use their expertise to protect computers from infiltration, determine how a computer was broken into, or recover lost files.\n• The analyst creates detailed notes on processes undertaken and develops intelligence-based reporting.\n• The analyst may also provide testing and evaluation of emerging trends in digital forensics software and hardware and assist in developing new and innovative forensic processes and procedures.\n\nRequired qualifications/skills\n\n• Minimum education and years of experience requirements for the following: o High School Diploma: 20 years of relevant experience with at least a portion of the experience within the last 2 years. -OR- o Associates Degree: 17 years of relevant experience with at least a portion of the experience within the last 2 years. -OR- o Bachelors Degree: 15 years of relevant experience with at least a portion of the experience within the last 2 years -OR- o Masters Degree or higher: 12 years of relevant experience with at least a portion of the experience within the last 2 years • A minimum of 2 years of host based forensic experience and must have DoD Certified Digital Forensic Examiner (DFE). Individuals without DFE certification must obtain one within one year during the Period of Performance.\n• The Digital Media Forensics Team as a whole must possess the following qualifications Digital forensic certification, such as: o Certified Forensic Computer Examiner (CFCE), or o GIAC Certified Forensic Examiner (GCFE), or o EnCase Certified Examiner; o and 2 years of mobile device forensics.\n• Certification through the International Society of Forensic Computer Examiners (ISFCE) or the International Association of Computer Investigative Specialists (IACIS) is preferred . Come on board with a company that Values its Employees!\n\nCelestar\n\nCorporation is an Equal Opportunity Employer.\n\nThe Celestar\n\nCorporation prohibits discrimination, harassment, and retaliation in employment based on race; color; religion; genetic information; national origin; sex (including same-sex); sexual orientation; gender identity; pregnancy, childbirth, or related medical conditions; age; disability or handicap; citizenship status; marital status; service member/protected veteran status; or any other category protected by federal, state, or local law."
 },
 {
  "job_id": "yZYuvEBe8N8jiFR7AAAAAA==",
  "title": "Digital Forensic Analyst",
  "employer": "Allyon, Inc.",
  "country": "us",
  "description": "Digital Forensic Analyst\n\nJob Details\n\nLocation : Linthicum Heights, MD\n\nPosition Contact : Tyler Pettway\n\nJob Number : 32040\n\nJob Posted Date : 7/25/2025\n\nJob Description\n\nJob Title:\n\nDigital Forensic Analyst\n\nLocation:\n\nLinthicum Heights, MD\n\nMinimum Requirements:\n\n• HS 12+ years experience, AS/AA 10+ years experience, BS/BA 8+ years experience, MS/MA 6+ years experience, or PhD 3+ years experience.\n• Secret Clearance\n• Certification Requirement: One or more of the following - Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE) Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications (e.g., certifications offered by My Hard Drive Died, Teel Technologies, H-11, SANS, etc.\n• At least 4 years experience conducting digital forensics on a variety of media, including Windows, OS X, Linux, Android and iOS\n• Experience writing Technical Reports, detailing results of analysis\n• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools\n• Experience with court room proceedings, expert witness testimony\n• Formalized training in the areas of computer science, forensics, etc.\n• Knowledge of and experience with virtual environment\n\nDuties & Key Responsibilities:\n\n• Using a wide variety of forensic tools, the Digital Forensic Analyst examines the hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence that could be used in a court of law. Performs forensic analysis of digital information and gathers and handles evidence. Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Employs forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types. Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. May be required to testify in federal/military court as expert witnesses.\n\nSummary:\n\nAllyon is a certified woman-owned small business dedicated to empowering cleared IT professionals to reach their career goals and building high-performance teams for our federal government clients nationwide. With over 15 years of experience supporting the federal government, we've proudly helped professionals like you achieve their career goals across all areas of IT. Apply today and become part of our mission to support the nation's most critical technology, infrastructure, and cybersecurity initiatives. Together, we can drive innovation and make a difference where it matters most!\n\nWhat we Offer:\n\n• Competitive pay and benefits\n• 401k eligibility after 6 months, including company match\n\nAllyon, Inc. is an equal employment opportunities (EEO) employer and terms of employment are without regard to race, color, religion, sex, national origin, age, disability, or genetics. Allyon, Inc. complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment."
 },
 {
  "job_id": "kPprGyb4u9f40P-TAAAAAA==",
  "title": "Computer Specialist - Network and Digital Forensics Examiner at Longeviti, LLC Washington DC",
  "employer": "Longeviti, LLC",
  "country": "us",
  "description": "Computer Specialist - Network and Digital Forensics Examiner job at Longeviti, LLC. Washington DC. Longeviti LLC is searching for a Computer Specialist - Network & Computer Forensics Examiner with an active Top Secret clearance and SCI eligibility to support the Naval Criminal Investigative Service (NCIS) at Joint Base Anacostia–Bolling in Washington, D.C.\n\nDESCRIPTION\nProvide detailed forensic examinations for NCIS cases when computers or other digital media are instruments of crime, DoN computer networks are victims, or when computers or other digital media is used to store data of evidentiary or intelligence value. Additionally, serve as SME and testify in court proceedings, test new network-based investigative tools and network monitoring technologies, and provide informal on-the-job training to government staff as needed.\n\nDUTIES AND RESPONSIBILITIES:\n• Conduct complex and high-profile, non-destructive evaluations of target computer systems to determine operating and file systems, stored information, user and program logs, ownership, and access methodology, as well as security features and usage\n• Provide detailed forensic examinations for NCIS cases\n• Document artifacts and deliverables according to standardized formats and approved templates created through collaboration with NCIS Divisions\n• Follow NCIS organizational policies and procedures\n• Work in a team environment to provide forensic support via active engagement with Cyber-Referent agents\n• Liaison between NCIS agents in the field and NCIS analysts at NCISHQ\n• Collect and preserve critical evidence from large data sets\n• Conduct intrusion identification\n• Write SQL queries to verify/retrieve data\n• Perform log analysis in support of NCIS investigations\n• Conduct forensic extraction and analysis of data and electronic evidence from seized digital media\n• Analyze computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data\n• Assist the NCIS Special Agent as a technical consultant, ensuring that the data is seized in compliance with computer forensic standards and in compliance with chain of custody guidelines\n• Serve as a subject matter expert (SME) and testify in court proceedings regarding forensic procedures utilized to acquire evidence and the description of any evidence obtained\n• Analyze and test network monitoring technologies\n• Test and assess new commercial and government-developed network-based investigative tools for reviewing and improving NCIS' current collection platforms\n• Evaluate and implement new technologies to support the improvement and modernization of the NCIS criminal and intelligence capabilities regarding the gathering digital evidence\n• Provide emergent forensic response support to internal and external surge requirements\n• Configure, install, and maintain Network Intrusion Detection systems and Network Forensic Analysis Tools on locally configured networks\nREQUIRED EXPERIENCE, KNOWLEDGE, SKILLS, ABILITIES, COMPETENCIES:\n• Minimum of five (5) years of digital forensics experience using Cellebrite UFED4PC/Physical Analyzer.\n• Proficiency with FTK, and/or OSForensics.\n• SANS FOR 500 and SANS FOR 585\n• Cellebrite CCO and CCPA.\n• Expertise with various computer operating systems to include Windows, Linux/Unix, and Macintosh OS.\n• Expertise with a variety of computer hardware to include servers, workstations, desktops, laptops, networking equipment, tablets and cellphones.\n• Full understanding of proper forensic data collection procedures, chain of custody, and documentation procedures in a law enforcement environment.\n• Strong documentation skills.\n• Ability to testify as an expert witness in judicial proceedings.\n• Proficient in information security, information assurance, information technology, and cyber defense best practices and principles.\nCERTIFICATIONS OR TRAINING REQUIRED :\n• Must have certification in DCITA DoD Digital Forensic Examiner or FBI Computer Analysis Response Team (CART).\nSECURITY CLEARANCE:\n• Active Top Secret clearance with SCI eligibility. This position requires the person(s) to be eligible AND adjudicated to Top Secret (TS SCI) clearance level at contract start.\n\nEDUCATION:\n• Bachelor’s Degree in a Computer Science-related field OR five (5) years of equivalent work experience.\nSAFETY and HEALTH\nLongeviti, LLC, as the employer, herein notifies each employee candidate and hired employee of the enterprise-wide employee requirement to follow and adhere to all Longeviti Occupational Safety, Health, and Environmental (LOSH)-E controls, policies, procedures, standards, rules, regulations, orders, and guidelines as a condition of employment (herein referred to as safety controls) as directed by Longeviti, LLC supervision, management, and administration .\n\nBENEFITS\nLongeviti offers a comprehensive and generous benefits package. The Longeviti benefits package includes medical, dental, and vision insurance for the employee and/or families . Longeviti also includes basic life insurance plus short- and long-term disability for the employee. Employees may elect to enroll in our company’s 401k plan. Employees will also accrue paid time off and holidays. Additional voluntary options include legal coverage, supplemental insurance plans, and commuter benefits.\n\nABOUT LONGEVITI\nLongeviti is a government contractor specializing in providing professional support services in the fields of information technology, program management, agency administration, and intelligence analysis.\n\nWe are a certified 8(a) and small disadvantaged business that excels in the market having earned our status as an ISO 9001 certified provider of services and are rated as CMMI Level 3 in both Development and Services. Quality and continuous improvement are basic tenets of the organization and giving our staff the tools to make it happen are a trademark. Customer satisfaction is paramount.\n\nLongeviti, LLC is committed to hiring and retaining a diverse workforce. Longeviti is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law."
 },
 {
  "job_id": "PhQ3-Mc-S2-QxL0zAAAAAA==",
  "title": "Senior Digital Forensic Analyst Site in Arlington",
  "employer": "Peraton",
  "country": "us",
  "description": "Position: Senior Digital Forensic Analyst — On‑Site in Arlington\n\nPeraton is seeking a Senior Digital Forensic Analyst in Arlington, VA to support Federal Strategic Cyber programs in the Cyber & Intelligence sector. In this role, you will conduct forensic examinations of digital data from various platforms and provide expert witness testimony in legal proceedings.\n\nThe ideal candidate will have a Bachelor's degree and a minimum of 9 years of relevant experience or equivalent. The target salary range is $104,000 to $166,000 annually, and candidates must obtain necessary certifications prior to starting. U.S. Citizenship is required.\n#J-18808-Ljbffr"
 },
 {
  "job_id": "y0XivbK4T_6I793UAAAAAA==",
  "title": "Cyber Forensic Investigator – DFIR & ESI Expert",
  "employer": "Accenture-Federal-Services-2",
  "country": "us",
  "description": "Accenture Federal Services is seeking a Cyber Forensic Specialist to support its Digital Forensics and Incident Response (DFIR) team. You will manage evidence intake, perform digital forensic analyses, and collaborate on sensitive investigations across the organization.\n\nYour role is essential in the Cyber Incident Response Team (CIRT) to ensure robust cybersecurity measures and effective incident response. Ideal candidates have 3-5 years in information security, expertise in forensic tools, and excellent communication skills.\n#J-18808-Ljbffr"
 },
 {
  "job_id": "qMzEGADpdXkd0mE1AAAAAA==",
  "title": "Digital Forensics Examiner",
  "employer": "Loehrs Forensics",
  "country": "us",
  "description": "Company Description Loehrs Forensics, LLC, founded in 1999, is a specialized computer forensics firm that evolved from a broader litigation support company to focus exclusively on digital forensics. The organization has developed a strong reputation for delivering high-quality digital forensics services with reliable, defensible results. Loehrs Forensics serves a diverse range of clients, including individuals, corporations, private attorneys, Federal Public Defender offices, court-appointed counsel and state and county defender offices across the United States, Puerto Rico, and Northern Mariana Islands. The firm's work has contributed to favorable outcomes in both civil and criminal matters, including settlements, plea agreements, and case dismissals. Professionals joining the team can expect to work in a setting that values technical excellence, integrity, and impactful casework. Role Description This is a full‐time, hybrid Digital Forensics Examiner position based in Phoenix, Arizona. Responsibilities may be performed remotely, at the Loehrs Forensics laboratory, or on‐site at client locations, law enforcement facilities, and other investigative venues throughout the United States. The Digital Forensics Examiner will collect, preserve, and analyze digital evidence from computers, mobile devices, storage media, cloud‐based sources, and other electronic systems using industry‐standard forensic tools and methodologies. Daily responsibilities include reviewing case discovery, conducting forensic acquisitions, creating and validating forensic images and extractions, performing artifact and timeline analysis, recovering deleted or hidden data, and documenting findings in clear, detailed, and defensible forensic reports. The examiner will collaborate with attorneys, investigators, law enforcement personnel, and other stakeholders to understand case objectives, identify relevant evidence, and communicate technical findings in a manner suitable for both technical and non‐technical audiences. Additional responsibilities may include preparing demonstrative exhibits, assisting with litigation support, and participating in case strategy discussions. This role requires strict adherence to forensic best practices, chain‐of‐custody procedures, and evidentiary standards. The examiner may also provide expert testimony or technical support during depositions, hearings, trials, and other legal proceedings. Candidates should be comfortable working independently and as part of a team, managing multiple active cases, and traveling periodically for evidence collections, laboratory examinations, court appearances, training, and other case‐related assignments. Required Qualifications Bachelor's degree in Digital Forensics, Computer Science, Information Technology, Criminal Justice, or a related field; equivalent professional experience may be considered. Strong digital forensics skills, including evidence acquisition, forensic imaging, artifact analysis, and data recovery using tools such as EnCase, FTK, X‐Ways, Cellebrite, Magnet AXIOM, or similar platforms. Solid technical foundation in operating systems (Windows, macOS, Linux), file systems, network fundamentals, and mobile device ecosystems (iOS, Android). Experience reviewing and analyzing large datasets, logs, emails, and internet activity, with the ability to identify relevant patterns and case‐critical artifacts. Proficiency in writing clear, concise, and defensible forensic reports, including documentation of methods, tools, and results suitable for legal proceedings. Ability to communicate complex technical concepts to non‐technical audiences, including attorneys, clients, and court personnel, both verbally and in writing. Familiarity with legal and evidentiary principles such as chain of custody, admissibility, and best practices for handling digital evidence in civil and criminal matters. Strong analytical thinking, attention to detail, and problem‐solving skills, with the capacity to work independently and manage multiple cases and deadlines. Ability to manage multiple cases while maintaining accuracy and attention to detail. Valid driver's license and ability to travel for case‐related assignments, including overnight and occasional nationwide travel. Ability to work remotely, in a laboratory environment, and on‐site at client, law enforcement, or government facilities as required. Ability to obtain and maintain access to law enforcement, government, and secure facilities, including passing any required background checks. Preferred Qualifications Professional certifications such as CCE, CCFE, CECI, CFCE, GIAC Certifications, forensic vendor certifications (e.g. Cellebrite or Magnet Forensics), or equivalent credentials. Experience conducting forensic examinations involving computers, mobile devices, cloud data, social media, and network artifacts. Familiarity with civil litigation, criminal investigations, eDiscovery, and expert witness support. Prior experience preparing reports and exhibits for attorneys, courts, government agencies, or corporate clients. Compensation and Benefits Competitive salary based on experience, qualifications, certifications, and demonstrated forensic expertise. $75,000–$120,000+ DOE Higher starting compensation available for candidates with substantial case experience, advanced certifications, specialized technical skills, or prior expert witness support experience. Employer‐sponsored retirement plan with company contribution/matching opportunities. Paid time off, holidays, and sick leave. Professional development, continuing education, and certification reimbursement opportunities. Company‐provided equipment and forensic software tools. Hybrid work schedule offering a combination of remote and in‐office work, subject to case requirements and evidence handling needs. Opportunities for travel throughout Arizona and nationwide for evidence collections, client meetings, court proceedings, training, and other case‐related activities. Supportive team environment with opportunities for advancement and specialization. How to Apply Qualified candidates should submit a resume and cover letter outlining their relevant experience, certifications, and forensic examination background. Loehrs Forensics, LLC is an equal opportunity employer and values professionalism, integrity, and excellence in forensic science. #J-18808-Ljbffr"
 },
 {
  "job_id": "Oplexhg4uCH5Oyi2AAAAAA==",
  "title": "Senior Digital Forensic Cyber Analyst; TS​/SCI - Remote",
  "employer": "Seneca Resources Company, LLC",
  "country": "us",
  "description": "Position: Senior Digital Forensic Cyber Analyst (TS/SCI) - Remote A trusted staffing and consulting firm seeks an Intrusion Analyst to support federal law enforcement with advanced digital forensic investigations. The role involves detailed forensic analysis, evidence preservation, and expert testimony. Candidates should have a minimum of 8 years of experience in digital forensics, active TS clearance, and expertise with various forensic tools. A salary range of $70–$85 per hour is offered with full remote capabilities and comprehensive support for career growth. #J-18808-Ljbffr"
 },
 {
  "job_id": "_rPcDi_--m15HfxJAAAAAA==",
  "title": "Digital Forensics Examiner",
  "employer": "Peraton",
  "country": "us",
  "description": "About Peraton\n\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.\n\nAbout The Role\n\nPeraton is seeking a Digital Forensics Examiner in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.\n\nThe person in this role will analyze electronic media in support of a federal government agency, focused on sensitive on-going criminal investigations and operations. Using a wide variety of forensic tools, the Digital Forensic Analyst examines the hard drives of computers, storage devices, cell phones, PDA's, or any electronic device that may hold evidence that could be used in a court of law. Performs forensic analysis of digital information and gathers and handles evidence. Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Employs forensic tools and techniques to crack files and system passwords, detect steganography and recover deleted, fragmented and corrupted data from digital media of all types. Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. May be required to testify in federal/military court as expert witnesses.\n\nThis position is fully on-site M-F in the Baltimore-Metropolitan area.\n\nQualifications\n\nRequired Qualifications:\n\n• Education: Bachelor's degree and 8+ years relevant experience, or Master's degree and 6+ years relevant experience. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.\n• Certifications: One or more of the following active forensic certification - Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS) certifications: Certified Computer Examiner (CCE) Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), Certifications related to mobile device forensic tools (e.g. Cellebrite Certified Mobile Examiner (CCME), XRY, Oxygen Forensic® Certified Examiner (OFCE)), Certifications related to computer forensic tools (e.g., EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)), Data recovery or advanced data acquisition related certifications.\n• Security Clearance: Minimum active Secret.\n• At least 4 years experience conducting digital forensic analysis on a variety of media, including Windows, OS X, Linux, Android and iOS.\n• Experience in supporting criminal investigations.\n• Experience writing Technical Reports, detailing results of analysis.\n• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools.\n• Formalized training in the areas of computer science, forensics, etc.\n• Understanding of network protocols and networking concepts.\n• Knowledge of and experience with virtual environments.\n• Must pass the customer's Mentorship Program within 4 months.\n\nDesired Qualifications:\n\n• Previous Law Enforcement experience.\n• Experience in performing technical reviews or peer reviews.\n• Experience mentoring other examiners.\n• Experience testifying as an expert witness in support of criminal trials.\n\nDetails\n\nTarget Salary Range: $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.\n\nBenefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.\n\nApplication Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.\n\nEEO:Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law."
 },
 {
  "job_id": "-z8mIHnStqWcOWIdAAAAAA==",
  "title": "Computer Forensics and Analyst at Ractsol Corp Columbia, MD",
  "employer": "Ractsol Corp",
  "country": "us",
  "description": "Computer Forensics and Analyst job at Ractsol Corp. Columbia, MD.\n\nComputer Forensics and Analyst\n\nLocation: Linthicum Heights, Maryland, United States\n\nSeeking Senior to Mid-level Analyst experience for roles to perform a broad range of technical support, threat monitoring and digital analysts for DOD and supporting organizations. These positions preform technical validation and assessment of web security vulnerabilities. You will be part of the forensic examination process, investigating, reporting and developing new forensic processes.\n\nAre you looking for the opportunity to utilize your Computer forensic and analyst experience and be part of a growing and innovative IT Management and Tech Support team? You may be a great fit for our team.\n\nRACTSOL’s mission is to provide both quality services and cost-effective savings through integrated technology management and support services to government and commercial agencies in Secure and Non-secure facilities. RACTSOL takes pride in providing professional and quality service to our customers.\n\nPositions: Senior to Mid-level Computer Forensic & Intrusion Analysts\n\nSalary: Competitive Salary Package Based Upon Qualifications and Experience with comprehensive benefit package\n\nGeneral Qualifications and Skills:\n\nKnowledge of current DOD cyber security challenges and threats\n\nKnowledge of various software testing methodologies\n\nExpert technical understanding of software and web applications (i.e. CWE, CVE)\n\nStrong verbal and written communication skills\n\nAwareness of industry trends: IoT,ICS/SCADA, Dev-Sec-Ops\n\nExperience with diagnosing and debugging software systems\n\nAppropriate certifications (GCTI, CISSP, GCIH, CEH etc.)\n\nPreferably experience coding and disassembling software on both Windows and Linux or other BSD and Unix variants\n\nAdvanced/Expert level experience in hardware configuration and network/data communications and protocols\n\nAdvanced/Expert level experience in software development and scripting\n\nAdvanced/Expert level experience conducting intelligence analysis and writing finished intelligence reporting\n\nExperience establishing defense mechanisms to detect and deflect cyber-attacks on networks and communications systems and structures and designing and evaluating applications that are secure from known and potential methods of cyber attack\n\nPreference for Bachelors degree in related discipline with minimum of 5 years of professional experience\n\nAdditional Certifications or Requirements:\n\nCertifications (any): CEH, GCIH, Security+, CCNA Cyber Ops, GWAPT, GPEN, OSCP, OSWE\nSecurity Clearance based upon level of positions may range between TS/SCI with Full Scope Polygraph to TS/with SCI Eligibility Required\n\nWe look forward to seeing your qualified resume and sharing with you our vision of growth.\n\nRACSTOL CORP is an Equal Opportunity, E-Verify Workplace\n\nH.O.P.E, Through Innovative Technology"
 },
 {
  "job_id": "NZh-2XW3c1TEjt-uAAAAAA==",
  "title": "Senior Digital Forensic Analyst",
  "employer": "Peraton",
  "country": "us",
  "description": "Responsibilities\n\nPeraton is currently seeking a Senior Digital Forensic Analyst to support Federal Strategic Cyber programs in the Cyber & Intelligence sector.\n\nLocation: On-site, Arlington, VA\n\nIn this role, you will:\n\n• Conduct forensic examinations of digital data from cellphones, tablets, computers, removable media, cloud sources, and other platforms.\n\n• Apply recognized scientific practices to identify, analyze, interpret, and present digital evidence for criminal, civil, and administrative matters.\n\n• Perform detailed, targeted examinations in line with investigative objectives, legal process, and search warrant limitations.\n\n• Use industry-standard forensic tools-such as Cellebrite (including Inseyets), Oxygen Forensic Detective, Magnet Forensics GrayKey and Axiom, Nuix, X-Ways, and similar for extraction and examination.\n\n• Analyze data from various operating systems and applications, including Windows, MacOS, iOS, Android, cloud services, and common backup formats.\n\n• Produce clear, comprehensive reports that explain findings for investigators, prosecutors, and other stakeholders.\n\n• Provide expert witness testimony, explaining examination procedures and technical findings to non-technical audiences in federal, state, and local proceedings.\n\n• Provide on-site support during search warrant executions by identifying, collecting, packaging, documenting, and preserving digital evidence while maintaining strict chain of custody.\n\n• Work closely with program leadership and peers to maintain forensically sound procedures and best practices for acquisition, analysis, and presentation of digital evidence.\n\n• Conduct peer reviews and quality checks of reports and artifacts to ensure accuracy, completeness, and clarity before customer delivery.\n\n• Mentor new hires on CIF workflows, tools, and best practices to support effective onboarding and team performance.\n\n• Share lessons learned and emerging techniques with colleagues to enhance collective expertise.\n\n• Stay current on developments in digital forensics, cybersecurity, forensic law, mobile devices and applications, social media platforms, and encryption/decryption methods.\n\nQualifications\n\nMinimum Qualifications:\n\n• Bachelor's degree and a minimum of 9 years of relevant experience; 7 years with a Master's degree; or 4 years with a PhD. An additional 4 years of experience may be substituted for a degree.\n\n• Must either possess and maintain, or obtain prior to start date, one of the following professional certifications:\n\n- GIAC: GCFE, GASF\n\n- IACIS: CFCE, ICMDE\n\n- NCFI: BCERT, MDE\n\n- DC3: CDFE, CDMC\n\n- Opentext: EnCE\n\n- Cellebrite: CCO & CCPA, CCME\n\n- Oxygen Forensics: OFC\n\n- Magnet Forensics: MCFE\n\n• Demonstrated expertise with mobile and non-mobile forensic tools such as Magnet Axiom, Cellebrite, and Oxygen, as well as advanced mobile extraction hardware and software.\n\n• Strong knowledge of Windows, MacOS, Apple iOS, Android, and their associated backup technologies.\n\n• Experience writing detailed, technically accurate reports that clearly communicate complex digital-forensic findings to non-technical audiences.\n\n• Strong critical thinking, creativity, sound judgment, and the awareness to recognize when to seek guidance from leadership.\n\n• Ability to collaborate effectively and professionally with leadership, forensic analysts, law enforcement, prosecutors, CIF customers, and other stakeholders at all levels to deliver high-quality forensic products.\n\n• Willingness and ability to travel for on-scene evidence seizures, training, and/or testimony.\n\n• Experience conducting digital-forensic examinations of mobile devices, computer systems, storage media, and cloud data across a broad range of case types.\n\n• Demonstrated proficiency with industry-standard forensic tools-such as Cellebrite, Oxygen, Nuix, Axiom, X-Ways, and similar-to perform in-depth analysis of mobile and computer operating systems, file systems, iOS, and third-party application data.\n\n• Ability to prepare evidentiary exhibits for judicial proceedings and provide expert testimony on forensic methods and findings.\n\n• Commitment to staying current on advancements in digital forensics, cybersecurity, forensic law, mobile technologies, social media, applications, and encryption.\n\n• U.S. Citizenship required.\n\n• Ability to obtain an interim Secret security clearance prior to start date.\n\n• Ability to obtain a final Top Secret security clearance.\n\nPeraton Overview\n\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.\n\nTarget Salary Range\n\n$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.\n\nEEO\n\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law."
 },
 {
  "job_id": "PmAX6da7ENopGzYOAAAAAA==",
  "title": "Computer Specialist – Network and Digital Forensics Examiner",
  "employer": "Longeviti LLC",
  "country": "us",
  "description": "Description\n\nLongeviti LLC is searching for a Digital Forensic Examiner with an active TS clearance and SCI eligibility and five (5) or more years of experience to support NCIS in Norfolk, VA. Candidates must have five (5) or more years of experience using Cellebrite UFED4PC/Physical Analyzer, proficiency in FTK, and/or OSForensics and certification in DCITA DoD Digital Forensic Examiner or FBI Computer Analysis Response Team (CART).\n\nProvide detailed forensic examinations for NCIS cases when computers or other digital media are instruments of crime, DoN computer networks are victims, or when computers or other digital media is used to store data of evidentiary or intelligence value. Additionally, serve as SME and testify in court proceedings, test new network-based investigative tools and network monitoring technologies, and provide informal on-the-job training to government staff as needed.\nDuties And Responsibilities\n• Conduct complex and high-profile, non-destructive evaluations of target computer systems to determine operating and file systems, stored information, user and program logs, ownership, and access methodology, as well as security features and usage\n• Provide detailed forensic examinations for NCIS cases\n• Document artifacts and deliverables according to standardized formats and approved templates created through collaboration with NCIS Divisions\n• Follow NCIS organizational policies and procedures\n• Work in a team environment to provide forensic support via active engagement with Cyber-Referent agents\n• Liaison between NCIS agents in the field and NCIS analysts at NCISHQ\n• Collect and preserve critical evidence from large data sets\n• Conduct intrusion identification\n• Write SQL queries to verify/retrieve data\n• Perform log analysis in support of NCIS investigations\n• Conduct forensic extraction and analysis of data and electronic evidence from seized digital media\n• Analyze computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data\n• Assist the NCIS Special Agent as a technical consultant, ensuring that the data is seized in compliance with computer forensic standards and in compliance with chain of custody guidelines\n• Serve as a subject matter expert (SME) and testify in court proceedings regarding forensic procedures utilized to acquire evidence and the description of any evidence obtained\n• Analyze and test network monitoring technologies\n• Test and assess new commercial and government-developed network-based investigative tools for reviewing and improving NCIS' current collection platforms\n• Evaluate and implement new technologies to support the improvement and modernization of the NCIS criminal and intelligence capabilities regarding the gathering digital evidence\n• Provide emergent forensic response support to internal and external surge requirements\n• Configure, install, and maintain Network Intrusion Detection systems and Network Forensic Analysis Tools on locally configured networks\nRequired Experience, Knowledge, Skills, Abilities, Competencies\n• Minimum of five years digital forensics experience using Cellebrite UFED4PC/Physical Analyzer. Proficiency with FTK, and/or OSForensics.\n• Expertise with various computer operating systems to include Windows, Linux/Unix, and Macintosh OS.\n• Expertise with a variety of computer hardware to include servers, workstations, desktops, laptops, networking equipment, tablets and cellphones.\n• Full understanding of proper forensic data collection procedures, chain of custody, and documentation procedures in a law enforcement environment.\n• SANS FOR 500 and SANS FOR 585\n• Cellebrite CCO and CCPA.\n• Strong documentation skills.\n• Ability to testify as an expert witness in judicial proceedings.\n• Proficient in information security, information assurance, information technology, and cyber defense best practices and principles.\nCertifications Or Training Required\n• DCITA DoD Digital Forensic Examiner, or FBI Computer Analysis Response Team (CART) certification.\nSecurity Clearance\n• This position requires the person(s) to be eligible AND adjudicated to Top Secret (TS SCI) clearance level at contract start.\nEducation\n• Minimum of a Bachelor's Degree in a Computer Science-related field OR five years of equivalent work experience.\nSafety and Health\n\nLongeviti, LLC, as the employer, herein notifies each employee candidate and hired employee of the enterprise-wide employee requirement to follow and adhere to all Longeviti Occupational Safety, Health, and Environmental (LOSH)-E controls, policies, procedures, standards, rules, regulations, orders, and guidelines as a condition of employment (herein referred to as safety controls) as directed by Longeviti, LLC supervision, management, and administration.\nBenefits\n\nLongeviti offers a comprehensive and generous benefits package. The Longeviti benefits package includes medical, dental, and vision insurance for the employee and/or their families. Longeviti also includes basic life insurance which includes AD&D plus short- and long-term disability for the employee. Employees may elect to enroll in our company’s 401k plan. Employees will also accrue paid time off and holidays. Additional voluntary elections include legal coverage, supplemental accident, critical illness and hospital insurance plans, and commuter benefits.\nAbout Longeviti\n\nLongeviti, LLC is a government contractor specializing in providing professional support services in the fields of information technology, program management, agency administration, and intelligence analysis.\n\nWe are a certified 8(a) and small disadvantaged business that excels in the market having earned our status as an ISO 9001 certified provider of services and are rated as CMMI Level 3 Services. Quality and continuous improvement are basic tenets of the organization and giving our staff the tools to make it happen are a trademark. Customer satisfaction is paramount.\n\nLongeviti, LLC is committed to non-discrimination and equal employment opportunity. All qualified applicants will receive consideration for employment without discrimination based on disability, protected veteran status or any other characteristics protected by law.\n\n#J-18808-Ljbffr\n\nSalary: USD 72000 - 108000 per year\n\nExperience: 5 years required"
 },
 {
  "job_id": "IRtzr5rky6sDcwZcAAAAAA==",
  "title": "Cyber Forensics Specialist-Raritan, NJ",
  "employer": "Georgia IT Inc",
  "country": "us",
  "description": "Cyber Forensics Specialist\n\nLocation: Raritan, NJ (Hybrid) Duration: 10+ Months Skills and Competencies: Deep technical experience of and comfort with computer hardware, mobile device, electronic storage technology such as hard disk, flash memory, tape backup, etc., and cloud-based data repositories. Possess advance skills to forensically collect, preserve, process, and analyze data from electronic data sources, including computers, servers, volatile memory (i.e., RAM), mobile devices, and cloud-based environments. Ability to lead examinations of data and/or digital evidence and follow through on leads until all possible avenues in investigating a case have been exhausted while using established policies, procedures, and precedent techniques. Ability to serve as a Subject Matter Expert, providing onsite technical guidance and collaborating with team members to examine data and/or digital evidence to identify, diagnose, and resolve error and complex conditions. Ability to communicate orally and in writing to prepare and present reports, briefings, of information and findings obtained during investigations to keys stakeholders. Ability to serve as a mentor to others, providing guidance and training on technical matters related to the collection and analysis of data and/or digital evidence. Desired qualifications: GCFE, GCFA, GCIH, GNFA or other certification(s) would be beneficial (EnCE, MCFE, MCME, MCCE, CFCE, CCE, etc.)."
 },
 {
  "job_id": "7KZ8qc6pVlbMnA4oAAAAAA==",
  "title": "Computer Specialist – Network and Digital Forensics Examiner (Norfolk, VA)",
  "employer": "Longeviti, LLC",
  "country": "us",
  "description": "Longeviti LLC is searching for a Digital Forensic Examiner with an active TS clearance and SCI eligibility and five (5) or more years of experience to support NCIS in Norfolk, VA. Candidates must have five (5) or more years of experience using Cellebrite UFED4PC/Physical Analyzer, proficiency in FTK, and/or OSForensics and certification in DCITA DoD Digital Forensic Examiner or FBI Computer Analysis Response Team (CART).\n\nDescription\n\nProvide detailed forensic examinations for NCIS cases when computers or other digital media are instruments of crime, DoN computer networks are victims, or when computers or other digital media is used to store data of evidentiary or intelligence value. Additionally, serve as SME and testify in court proceedings, test new network-based investigative tools and network monitoring technologies, and provide informal on-the-job training to government staff as needed.\n\nDuties And Responsibilities\n\n• Conduct complex and high-profile, non-destructive evaluations of target computer systems to determine operating and file systems, stored information, user and program logs, ownership, and access methodology, as well as security features and usage\n• Provide detailed forensic examinations for NCIS cases\n• Document artifacts and deliverables according to standardized formats and approved templates created through collaboration with NCIS Divisions\n• Follow NCIS organizational policies and procedures\n• Work in a team environment to provide forensic support via active engagement with Cyber-Referent agents\n• Liaison between NCIS agents in the field and NCIS analysts at NCISHQ\n• Collect and preserve critical evidence from large data sets\n• Conduct intrusion identification\n• Write SQL queries to verify/retrieve data\n• Perform log analysis in support of NCIS investigations\n• Conduct forensic extraction and analysis of data and electronic evidence from seized digital media\n• Analyze computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data\n• Assist the NCIS Special Agent as a technical consultant, ensuring that the data is seized in compliance with computer forensic standards and in compliance with chain of custody guidelines\n• Serve as a subject matter expert (SME) and testify in court proceedings regarding forensic procedures utilized to acquire evidence and the description of any evidence obtained\n• Analyze and test network monitoring technologies\n• Test and assess new commercial and government-developed network-based investigative tools for reviewing and improving NCIS' current collection platforms\n• Evaluate and implement new technologies to support the improvement and modernization of the NCIS criminal and intelligence capabilities regarding the gathering digital evidence\n• Provide emergent forensic response support to internal and external surge requirements\n• Configure, install, and maintain Network Intrusion Detection systems and Network Forensic Analysis Tools on locally configured networks\n\nRequired Experience, Knowledge, Skills, Abilities, Competencies\n\n• Minimum of five years digital forensics experience using Cellebrite UFED4PC/Physical Analyzer. Proficiency with FTK, and/or OSForensics.\n• Expertise with various computer operating systems to include Windows, Linux/Unix, and Macintosh OS.\n• Expertise with a variety of computer hardware to include servers, workstations, desktops, laptops, networking equipment, tablets and cellphones.\n• Full understanding of proper forensic data collection procedures, chain of custody, and documentation procedures in a law enforcement environment.\n• SANS FOR 500 and SANS FOR 585\n• Cellebrite CCO and CCPA.\n• Strong documentation skills.\n• Ability to testify as an expert witness in judicial proceedings.\n• Proficient in information security, information assurance, information technology, and cyber defense best practices and principles.\n\nCertifications Or Training Required\n\n• DCITA DoD Digital Forensic Examiner, or FBI Computer Analysis Response Team (CART) certification.\n\nSecurity Clearance\n\n• This position requires the person(s) to be eligible AND adjudicated to Top Secret (TS SCI) clearance level at contract start.\n\nEducation\n\n• Minimum of a Bachelor's Degree in a Computer Science-related field OR five years of equivalent work experience.\n\nSAFETY and HEALTH\n\nLongeviti, LLC, as the employer, herein notifies each employee candidate and hired employee of the enterprise-wide employee requirement to follow and adhere to all Longeviti Occupational Safety, Health, and Environmental (LOSH)-E controls, policies, procedures, standards, rules, regulations, orders, and guidelines as a condition of employment (herein referred to as safety controls) as directed by Longeviti, LLC supervision, management, and administration.\n\nBenefits\n\nLongeviti offers a comprehensive and generous benefits package. The Longeviti benefits package includes medical, dental, and vision insurance for the employee and/or their families. Longeviti also includes basic life insurance which includes AD&D plus short- and long-term disability for the employee. Employees may elect to enroll in our company’s 401k plan. Employees will also accrue paid time off and holidays. Additional voluntary elections include legal coverage, supplemental accident, critical illness and hospital insurance plans, and commuter benefits.\n\nAbout Longeviti\n\nLongeviti, LLC is a government contractor specializing in providing professional support services in the fields of information technology, program management, agency administration, and intelligence analysis.\n\nWe are a certified 8(a) and small disadvantaged business that excels in the market having earned our status as an ISO 9001 certified provider of services and are rated as CMMI Level 3 Services. Quality and continuous improvement are basic tenets of the organization and giving our staff the tools to make it happen are a trademark. Customer satisfaction is paramount.\n\nLongeviti, LLC is committed to non-discrimination and equal employment opportunity. All qualified applicants will receive consideration for employment without discrimination based on disability, protected veteran status or any other characteristics protected by law."
 },
 {
  "job_id": "WzEz798rYEggQPyTAAAAAA==",
  "title": "Senior Digital Forensics Investigator",
  "employer": "NAXO Labs LLC",
  "country": "us",
  "description": "NAXO is an blockchain investigations and digital forensics firm trusted by top law firms, corporations, and law enforcement agencies for their most technically complex cases. Our experts have distinguished law enforcement backgrounds, deep technical expertise, and a track record of investigating the most complex crypto and cyber matters since the advent of blockchain technology. The nature of our work ranges from analyzing complex blockchain transaction activity and its underlying technology to investigating criminal activity on the dark web.\n\nWe are looking for a highly technical and experienced investigator who can analyze diverse sources of digital evidence in support of complex investigations. The successful candidate will have a experience investigating sophisticated computer-enabled crime, strong communications skills, comfort using programming languages (e.g. Python, SQL) to accomplish investigative objectives, and an understanding of evidentiary rules and procedures. Candidates will also be able to identify, analyze, and synthesize relevant information from various sources to support investigations. The ideal candidate will also have experience analyzing software code and conducting investigations in support of ongoing litigation.\n\nKey Responsibilities:\n\n• Analyze digital evidence from various sources in support of investigations.\n\n• Extract and preserve data from mobile devices, computers, cloud systems and other digital media.\n\n• Conduct open-source research and analysis to support technical analysis.\n\n• Develop and maintain tools to facilitate investigations.\n\n• Create reports and other materials to summarize findings and support investigative efforts.\n\n• Contribute to ongoing research and development efforts.\n\n• Advise clients regarding cybersecurity best practices.\n\nRequirements:\n\n• Experience using a programming language to accomplish investigative goals (e.g. Python).\n\n• Strong analytical and critical thinking skills, with the ability to synthesize complex information from multiple sources.\n\n• Excellent communication skills, both written and verbal.\n\n• Bachelor's degree in a related field\n\n• At least five years of experience conducting technical investigations.\n\n• Ability to work independently and as part of a team in a fast-paced, dynamic environment.\n\nPreferred Qualifications:\n\n• Familiarity with software application and/or platform development and, ideally, experience analyzing source code.\n\n• Basic understanding of the cryptocurrency ecosystem, including knowledge of various blockchain networks, cryptocurrencies, and exchanges.\n\n• Data science experience, including exposure to programming languages used to understand and synthesize large data sets.\n\n• Knowledge of relevant legal and regulatory frameworks related to cryptocurrency and cybersecurity investigations.\n\n• An advanced degree in a related field\n\n• Experience developing, implementing and/or maintaining network security systems.\n\n• Experience working in a law enforcement or intelligence agency.\n\nNAXO is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.\n\nThe pay range for this role is:\n\n130,000 - 250,000 USD per year (NAXO NY)\n\n100,000 - 250,000 USD per year (Remote)"
 },
 {
  "job_id": "1cTv_6bLGFlTmVwLAAAAAA==",
  "title": "Digital Forensic Examiner 1 at Crime Scene Resources, Inc Wilkes Barre, PA",
  "employer": "Crime Scene Resources, Inc",
  "country": "us",
  "description": "Digital Forensic Examiner 1 job at Crime Scene Resources, Inc. Wilkes Barre, PA.\n\nDuties and Requirements Click to read more\n\nDuties\nDESCRIPTION OF WORK\n• As a Digital Forensic Examiner 1, you will develop a strong skill set in the preservation, collection, and examination of electronic evidence. This evidence will include various operating and file system environments and network communications found in diverse technology. You will work to recover deleted, encrypted, and damaged file information from sources such as computer towers, laptops, tablets, smartphones, routers, and servers. You will be responsible for maintaining an evidence chain of custody and preparing investigation reports which document your analysis and findings. Excellent communication and organizational skills are essential, as you will be called to provide expert testimony regarding digital evidence, the procedures used to obtain the evidence, and the findings of digital forensic examinations. You will also assist with court preparation of evidence and media used during prosecution.\n• Additional details regarding this position can be found in the position description .\n\nRequirements\nMinimum Experience and Training Requirements:\n• A bachelor’s degree in digital forensics, cyber forensics, forensic science, computer science or any information technology field that includes 3 college credits in computer networking and 3 college credits in information technology security, network security, or cyber security; or\n• An equivalent combination of experience and training that includes 3 college credits in computer networking and 3 college credits in information technology security, network security, or cybersecurity.\n• Applicants will be considered to have met the educational requirements once they are within 3 months of graduating with a qualifying degree/credits.\nSpecial Requirement:\n• You must possess an active motor vehicle license.\nOther Requirements:\n• The selected candidate must be able to obtain and maintain designation as a Certified Forensic Computer Examiner within one year from starting the certification process with the International Association of Computer Investigative Specialists.\n• You must meet the PA residency requirement . For more information on ways to meet PA residency requirements, follow the link and click on Residency.\n• You must be able to perform essential job functions.\nLegal Requirements:\n• You must pass criminal history and background investigations if you do not have a current Pennsylvania State Police background on file.\n• This job title has been identified as performing critical duties. Prior to placement in this job title, the selected candidate regardless of their current job, must submit a Report of Mediations for screening by the Pennsylvania State Police Medical Officer.\n• You must pass a background investigation and meet Criminal Justice Information Services (CJIS) compliance requirements.\n\nDo you have the Education Required? See available on-line and campus-based degree programs now!"
 },
 {
  "job_id": "9El-JMBA5_TdFeXPAAAAAA==",
  "title": "Computer Investigative Forensic Specialist (CIFA)",
  "employer": "Treasury Department",
  "country": "us",
  "description": "Job Title\nDigital Forensic Analyst\nDuties\nThe following are the duties of this position at the full working level. If this vacancy includes more than one grade and you are selected at a lower grade level, you will have the opportunity to learn to perform these duties and receive training to help you grow in this position.\n• Provides expert digital forensic support through the scientific analysis of electronic evidence by recovering and analyzing electronic evidence associated with investigations of potential breaches of US tax law. Conducts computer and mobile forensic examinations that are consistent with those standards established by IRS-CI, as well as reflective of current trends and techniques within the law enforcement and professional communities. This may include the testing of forensic software and other appropriate automated analytical tools to meet diverse investigative requirements. This can have a material adverse effect on national security.\n• As an expert in the field of computer forensics, the incumbent is counted on to develop agency wide policies, procedures, and strategies involving the recovery and forensic analysis of electronic evidence. Provides expert technical advice, guidance, and recommendations to agency management and other senior agents, officers, or inspectors on critical investigations of electronic evidence.\n• Conducts internal and/or external investigations, inquiries, or audits related to cases that might have an impact on national security."
 },
 {
  "job_id": "mUKH7pD-7pLLUhH7AAAAAA==",
  "title": "Digital Forensic Incident Response Consultant",
  "employer": "Verizon",
  "country": "us",
  "description": "Welcome to Verizon, a leading provider of telecommunications, technology, and digital solutions. We are currently seeking a highly skilled and experienced Digital Forensic Incident Response Consultant to join our dynamic team. In this role, you will be responsible for providing expert digital forensic analysis and incident response services to our clients. Your technical expertise, attention to detail, and problem-solving skills will be critical to ensuring the protection and security of our clients' digital assets. If you are a motivated and driven individual with a passion for digital forensics and incident response, we encourage you to apply for this exciting opportunity.\nConduct thorough digital forensic analysis to identify, collect, preserve, and analyze electronic data in support of incident response investigations.\nRespond to and manage digital security incidents, including breaches, malware infections, and unauthorized access.\nUtilize industry-standard tools and techniques to conduct forensic examinations and produce detailed reports for clients.\nCollaborate with cross-functional teams to identify and mitigate potential security risks and vulnerabilities.\nStay updated on the latest trends and developments in digital forensics and incident response.\nProvide expert guidance and recommendations to clients on how to effectively prevent, detect, and respond to cyber threats.\nCommunicate complex technical concepts and findings in a clear and concise manner to both technical and non-technical stakeholders.\nDevelop and maintain standard operating procedures and best practices for digital forensic and incident response processes.\nMaintain accurate and detailed documentation of all investigations and findings.\nParticipate in on-call rotation to provide 24/7 incident response support to clients.\nTrain and mentor junior team members on digital forensic and incident response techniques and procedures.\nAdhere to all legal and ethical standards in handling sensitive and confidential information.\nCollaborate with law enforcement and external partners as needed during investigations.\nContinuously assess and improve the digital forensic and incident response capabilities of the company.\nRepresent the company in a professional and competent manner at all times.\n\nVerizon is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics."
 },
 {
  "job_id": "3i0DcViNZoOh0E7eAAAAAA==",
  "title": "Senior Associate/Digital Forensics, Incident Response & Cybersecurity (Forensic Services practice)",
  "employer": "Charles River Associates",
  "country": "us",
  "description": "About Charles River Associates\n\nCRA is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations. Our two main services – economic and management consulting – are delivered by practice groups that focus on specific areas of expertise or industries. Click here to learn how CRA can help you launch your career.\n\nPosition Overview\n\nCRA’s Forensic Services practice supports companies’ commitment to integrity by assisting them and their counsel in independently responding to allegations of fraud, waste, abuse, misconduct, and non-compliance. We are noted for deploying cross-trained teams of forensic professionals to assist our clients in gaining deeper insights and greater value more quickly. We provide accounting and forensic services as well as cybercrime investigation services.\n\nThe opportunities to contribute to the team in this Senior Associate role may include (but are not limited to):\n\n• Executing security and privacy investigations for CRA clients, in preparation of, and in response to, data security matters, which may include ongoing theft of trade secret investigations, cyber breach detection, threat analysis, incident response and malware analysis;\n• Performing forensic analysis of digital information using standard computer forensics and evidence handling techniques and computer forensics tools;\n• Improving the ability of the digital forensic and incident response team to react to incidents by evaluating and implementing new tools and processes;\n• Contributing to the creation and maintenance of effective relationships with local, state and federal law enforcement agencies to assist in criminal matters;\n• Preparing client communications for project milestones and senior leadership;\n• Managing risk by implementing quality control measures and documentation;\n• Participating in team recruiting and retention efforts and managing team morale;\n• Manage the growth and professional development of junior staff members;\n• Providing management support to engagement teams led by senior personnel;\n• Participating in project team execution, analysis, and work product;\n• Managing and supervising teams as appropriate;\n• Experience performing “pixel tracking” investigations;\n• Experience in software development lifecycle, full-stack development and performing source code review;\n• Providing technical assessment/audit and guidance to clients on the adequacy of cyber security controls in accordance with cybersecurity frameworks that are included in one or more of the following - NIST CSF 2.0, HIPAA, ISO 27001 and 27002, SOC2, NERC-CIP;\n• Interfacing with client personnel;\n• Assisting in business development efforts by drafting proposals and coordinating with other practice areas within the firm.\n\nDesired Qualifications\n\n• 5-7 years of experience in digital forensics, cyber intrusion investigation or incident response analysis.\n• Must hold a Bachelor’s or Master’s degree in a related field.\n• Ability to effectively prioritize multiple projects and meet timely deadlines.\n• Experience in a hands-on technical role functioning as a digital forensic examiner, incident responder, network forensic analyst or malware analyst.\n• Experience with data analytics engagements and contributing to the execution of technology-based best practices.\n• Working knowledge of computer hardware components, operating systems, file systems, computer networks, e-mail systems, mobile devices, IT security or incident response.\n• Deep knowledge of networking (TCP/IP, design, traffic flow, protocols, sessions), operating systems (Windows / *nix) and web technologies.\n\nTo Apply\n\nTo be considered for a position in the United States, we require the following:\n\n• Resume – please include current address, personal email and telephone number;\n\nIf you are interested in applying for one of our international locations, please visit our Careers site to view and apply for available jobs.\n\nCareer Growth And Benefits\n\n• CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually through formal and informal programs, encourage you to thrive as an individual and team member. Beginning with research and analysis skill building, training continues with technical training, presentation skills, internal seminars, and career mentoring and performance coaching from an assigned senior colleague. Additional leadership and collaboration opportunities exist through internal firm development activities.\n• We offer a comprehensive total rewards program including a superior benefits package, wellness programming to support physical, mental, emotional and financial well-being, and in-house immigration support for foreign nationals and international business travelers.\n\nWork Location Flexibility\n\nCRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship and inclusivity. At the same time, we recognize that individuals realize a range of benefits when working from home periodically. We currently expect that individuals spend at least 3 to 4 days a week working in the office (which may include traveling to another CRA office or to client meetings), with specific days determined in coordination with your practice or team.\n\nOur Commitment to Equal Employment Opportunity\n\nCharles River Associates is an equal opportunity employer (EOE). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, status as a protected veteran, or any other protected characteristic under applicable law.\n\nSalary And Other Compensation\n\nA good-faith estimate of the annual base salary range for this position is $130,000 - $152,500. Stating pay within this range may vary based on factors such as education level, experience, skills, geographic location, market conditions, and other qualifications of the successful candidate. This position may be eligible for additional bonus incentive compensation.\n\nCRA offers a comprehensive benefits package, subject to eligibility requirements, which may include: medical, dental, and vision insurance; 401(k) retirement plan with employer match; life and disability insurance; paid time off (vacation, sick leave, holidays); paid parental leave; wellness programs and employee assistance resources; and commuter benefits."
 },
 {
  "job_id": "xGz_55NSbOPMp3hBAAAAAA==",
  "title": "Digital Forensics Cybersecurity Advisor",
  "employer": "Booz Allen Hamilton",
  "country": "us",
  "description": "The Opportunity:\n\nTo achieve an organization’s mission, leaders need strong team members who can support digital forensics. Whether investigating an incident or proposing a solution to mitigate risk, our clients need an advisor who can help advise clients on comprehensive digital forensics strategies. That is why we need you, an experience d Digital Forensics Cybersecurity Advisor who can provide high-quality support.\n\nAs part of our team, you'll serve as a strategic technical advisor to the Advanced Research Projects Agency for Health ( ARPA-H ) , helping conceptualize, create, and execute advanced government-funded research and develop ment programs to accelerate better health outcomes for everyone. Work with world-class scientists and engineers to support the develop ment of high-impact solutions to society's most challenging health problems. Leverage technical expertise to provide strategic assessments of new technologies in support to senior ARPA-H decision makers. Maintain responsibility for producing and presenting findings and recommendations to a team of colleagues and clients on the feasibility and potential impact of future research programs, assisting with the management of current programs, and facilitating commer cia lization of successfully develop ed technologies.\n\nYou'll serve as a Digital Forensics Cybersecurity Advisor helping clients to understand issues related to cybersecurity and investigate any incidents. Your attention to detail, flexibility, communication skills , understanding of the client's mission, and problem-solving will enable the mission's success.\n\nWhat You’ll Work On :\n\n• Work holistically across ARPA-H to support digital forensics and investigate cybersecurity incidents\n\n• Investigate physical and virtual assets to support security and integrity, and investigate across Windows, MacOS, and iOS Operating Systems\n\n• Conduct investigations using Micro sof t Defender, CrowdStrike, and common digital forensics tools\n\n• Work within Micro sof t Azure and Amazon Web Services ( AWS ) to assess risk posture of technical projects\n\n• Identify and evaluate risks asso cia ted with ongoing technical projects and programs, and propose solutions to mitigate risks\n\n• Build strong relationships and collaborate within broad, multidisciplinary teams, and clearly communicate complex cybersecurity concepts to varied audiences\n\nJoin us. The world can't wait.\n\nYou Have:\n\n• 5+ years of experience managing evidence collection, preservation, and chain of custody, and conducting digital forensic investigations\n\n• 5+ years of experience in the develop ment of standard operating procedures and playbooks for conducting digital forensic investigations\n\n• Experience performing forensic imaging and analysis of physical virtual devices\n\n• Experience coordinating with legal, privacy, and incident response teams during an investigation\n\n• Bachelor's degree in Computer Science, Cybersecurity, Data Architecture, Data Science, or Digital Forensics\n\nNice If You Have:\n\n• 7+ years of experience managing evidence collection, preservation, and chain of custody, and conducting digital forensic investigations\n\n• 7+ years of experience in the develop ment of standard operating procedures and playbooks for conducting digital forensic investigations\n\n• Experience with U.S. government or R & D health organizations\n\n• Ability to collaborate and work effectively with cross-functional teams\n\n• Ability to work both independently and collaboratively\n\n• Ability to multi-task and prioritize responsibilities\n\n• Ability to manage multiple short- and long-term projects effectively\n\n• Possession of excellent written and verbal communication skills\n\n• Master's degree in a relevant field\n\nCompensation\n\nAt Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.\n\nSalary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.\n\nIdentity Statement\n\nAs part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.\n\nCandidate AI Usage Policy\n\nAI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided .\n\nWork Model\n\nOur people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.\n\n•\nRemote : If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.\n\n•\nHybrid : If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.\n\n•\nOnsite : If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.\n\nCommitment to Non-Discrimination\n\nAll qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law."
 },
 {
  "job_id": "teUtUSwCSRFy3LCMAAAAAA==",
  "title": "Digital Forensics and Cryptocurrency Investigations Specialist",
  "employer": "Deloitte",
  "country": "us",
  "description": "Our Deloitte Regulatory, Risk & Forensic team helps client leaders translate multifaceted risk and an evolving regulatory environment into defensible actions that strengthen, protect, and transform their organization. Join our team and use advanced data, AI, and emerging technologies with industry insights to help clients bring clarity from complexity and accelerate their path to value creation.\n\nWork You'll DoAs a Project - Senior Consultant, Forensics and Investigations, on the project, you will:\n\n• Apply knowledge of procedures and techniques used in cryptocurrency investigations\n\n• Conduct cryptocurrency analysis supporting Federal investigations and prosecutions by using criminal investigative tools such as chain analysis, TRM, and Elementus\n\n• Apply knowledge to the enforcement of Title 18, Title 31, and other applicable statutes of the Federal Criminal Code, and the seizure and forfeiture of illegally derived property\n\n• Conduct research and analysis using open source information, national and international databases, and corporate record filings to match investigative findings and summarize data into a finished professional product\n\nThe successful candidate would possess these skills:\n\n• Ability to work independently and collaborate as part of a team\n\n• Effective written and verbal communication skills\n\n• Meticulous attention to detail and quality of work product\n\n• Ability to build and sustain professional relationships\n\n• Ability to lead projects or workstreams\n\n• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment\n\n• Strong interpersonal skills and professional demeanor\n\n• Ability to meet deadlines\n\n• Ability to provide clear guidance to others\n\nThe Team\n\nDeloitte's Government & Public Services (GPS) practice - our people, ideas, technology and outcomes - is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.\n\nOur Forensic, Discovery, & Financial Crime offering provides services to support anti-money laundering, discovery, business disputes and investigations. Protect brands from financial crime and other corporate misconduct, as well as enable government organizations with tradecraft & technology to combat emerging and evolving threats.\n\nThe Project Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project-focused professionals.\n\nQualifications\n\nRequired:\n\n• Bachelor's degree\n\n• 1+ year of experience utilizing blockchain intelligence or transaction monitoring tools\n\n• 1+ year of experience supporting cryptocurrency investigations or fraud\n\n• 4+ years of fraud, cyber fraud, or financial investigations experience\n\n• Must be able to obtain and maintain the required High Risk Public Truth clearance for this role\n\n• Ability to perform job responsibilities within a work model that requires professionals to co-locate in person 5 days per week in Washington, DC.\n\n• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future\n\nPreferred:\n\n• Experience with blockchain intelligence and data tools including Chainalysis, TRM Labs or, Elliptic\n\nFor individuals assigned and/or hired to work in Washington, DC, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Washington, DC and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.A reasonable estimate of the current range is$97,700 to $162,800.\n\nYou may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.\n\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law."
 },
 {
  "job_id": "fi50Qk4osvoqpS2qAAAAAA==",
  "title": "Digital Forensics & Incident Response Managing Consultant",
  "employer": "Irongate Cybersecurity",
  "country": "us",
  "description": "We are seeking a highly skilled and motivated Managing Consultant to join our Digital Forensics and Incident Response (DFIR) team. This role is ideal for an experienced analyst ready to take on greater leadership responsibilities while continuing to perform hands-on technical work. As a bridge between senior analysts and leadership, the Managing Consultant will lead investigations, mentor junior team members, and contribute to the strategic growth of the DFIR practice.\n\nKey Responsibilities:\n• Lead digital forensics and incident response investigations from start to finish.\n• Participate in or lead scoping calls to define project scope and objectives.\n• Provide clear, timely verbal and written updates to clients and legal counsel.\n• Conduct in-depth forensic analysis using both commercial and open-source tools.\n• Review and validate forensic notes, artifacts, and workbook documentation.\n• Mentor and support the development of less experienced analysts.\n• Perform peer reviews of forensic reports and technical findings.\n• Ensure accurate and timely timekeeping and documentation practices.\n\nQualifications:\n\nRequired Experience:\n• Minimum 5+ years of experience in Digital Forensics and Incident Response.\n• Demonstrated ability to manage investigations and communicate effectively with clients.\n\nTechnical Skills:\n• Proficiency with commercial forensic tools: FTK, EnCase, X-Ways.\n• Experience with open-source tools: KAPE, Eric Zimmerman's Tools, Velociraptor, Brimor Labs, Live Collection.\n• Strong understanding of forensic methodologies, incident response workflows, and threat actor tactics.\n\nCertifications (Preferred):\n• CCE – Certified Computer Examiner\n• CFCE – Certified Forensic Computer Examiner\n• GCFA – GIAC Certified Forensic Analyst\n• GCFE – GIAC Certified Forensic Examiner\n• GNFA – GIAC Network Forensic Analyst\n• GCTI – GIAC Cyber Threat Intelligence\n\nKey Attributes:\n• Strong analytical and problem-solving skills.\n• Excellent written and verbal communication.\n• Team-oriented with a passion for mentoring and knowledge sharing.\n• Adaptable and able to thrive in a fast-paced, dynamic environment.\n\nIronGate Cybersecurity is an Equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristics protected by law.\n\nCompany DescriptionIronGate Cybersecurity is at the forefront of defending companies from cyber threats. As a trusted leader in cybersecurity solutions, our Professional Services Team leverages cutting-edge technology and deep industry expertise to provide comprehensive security assessments, incident response, and digital forensic analysis. Join us in our mission to protect our clients from the ever-evolving landscape of cyber threats."
 },
 {
  "job_id": "-NQfmIhC4HVUDpHkAAAAAA==",
  "title": "Digital Forensics Cybersecurity Advisor",
  "employer": "Booz Allen Hamilton, Inc.",
  "country": "us",
  "description": "Digital Forensics Cybersecurity Advisor\nThe Opportunity:\n\nTo achieve an organization's mission, leaders need strong team members who can support digital forensics. Whether investigating an incident or proposing a solution to mitigate risk, our clients need an advisor who can help advise clients on comprehensive digital forensics strategies. That is why we need you, an experienced Digital Forensics Cybersecurity Advisor who can provide high-quality support.\n\nAs part of our team, you'll serve as a strategic technical advisor to the Advanced Research Projects Agency for Health (ARPA-H), helping conceptualize, create, and execute advanced government-funded research and development programs to accelerate better health outcomes for everyone. Work with world-class scientists and engineers to support the development of high-impact solutions to society's most challenging health problems. Leverage technical expertise to provide strategic assessments of new technologies in support to senior ARPA-H decision makers. Maintain responsibility for producing and presenting findings and recommendations to a team of colleagues and clients on the feasibility and potential impact of future research programs, assisting with the management of current programs, and facilitating commercialization of successfully developed technologies.\n\nYou'll serve as a Digital Forensics Cybersecurity Advisor helping clients to understand issues related to cybersecurity and investigate any incidents. Your attention to detail, flexibility, communication skills, understanding of the client's mission, and problem-solving will enable the mission's success.\n\nWhat You'll Work On:\n• Work holistically across ARPA-H to support digital forensics and investigate cybersecurity incidents\n• Investigate physical and virtual assets to support security and integrity, and investigate across Windows, MacOS, and iOS Operating Systems\n• Conduct investigations using Microsoft Defender, CrowdStrike, and common digital forensics tools\n• Work within Microsoft Azure and Amazon Web Services (AWS) to assess risk posture of technical projects\n• Identify and evaluate risks associated with ongoing technical projects and programs, and propose solutions to mitigate risks\n• Build strong relationships and collaborate within broad, multidisciplinary teams, and clearly communicate complex cybersecurity concepts to varied audiences\n\nYou Have:\n• 5+ years of experience managing evidence collection, preservation, and chain of custody, and conducting digital forensic investigations\n• 5+ years of experience in the development of standard operating procedures and playbooks for conducting digital forensic investigations\n• Experience performing forensic imaging and analysis of physical virtual devices\n• Experience coordinating with legal, privacy, and incident response teams during an investigation\n• Bachelor's degree in Computer Science, Cybersecurity, Data Architecture, Data Science, or Digital Forensics\n\nNice If You Have:\n• 7+ years of experience managing evidence collection, preservation, and chain of custody, and conducting digital forensic investigations\n• 7+ years of experience in the development of standard operating procedures and playbooks for conducting digital forensic investigations\n• Experience with U.S. government or R&D health organizations\n• Ability to collaborate and work effectively with cross-functional teams\n• Ability to work both independently and collaboratively\n• Ability to multi-task and prioritize responsibilities\n• Ability to manage multiple short- and long-term projects effectively\n• Possession of excellent written and verbal communication skills\n• Master's degree in a relevant field\n\nCompensation\n\nAt Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.\n\nSalary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.\n\nIdentity Statement\n\nAs part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.\n\nCandidate AI Usage Policy\n\nAI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.\n\nWork Model\nOur people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.\n• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.\n• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.\n• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role."
 },
 {
  "job_id": "v-VgwoDJm4QUjMUzAAAAAA==",
  "title": "Associate Principal/Cybersecurity & Incident Response (Forensic Services practice)",
  "employer": "Charles River Associates",
  "country": "us",
  "description": "About Charles River Associates\n\nCRA is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations. Our two main services – economic and management consulting – are delivered by practice groups that focus on specific areas of expertise or industries. Click here to learn how CRA can help you launch your career.\n\nPosition Overview\n\nCRA’s Forensic Services practice supports companies’ commitment to integrity by assisting them and their counsel in independently responding to allegations of fraud, waste, abuse, misconduct, and non-compliance. We are noted for deploying cross-trained teams of forensic professionals to assist our clients in gaining deeper insights and greater value more quickly. We provide accounting and forensic services as well as cybercrime investigation services.\n\nResponsibilities\n\nAs an experienced leader in the forensic & cyber investigations space, your responsibilities as an Associate Principal may include (but are not limited to):\n\n• Leading security and privacy investigations for CRA clients, in preparation of, and in response to, data security matters, which may include ongoing breach detection, threat analysis, incident response and malware analysis;\n• Performing forensic analysis of digital information using standard computer forensics and evidence handling techniques and computer forensics tools;\n• Serving as primary point of contact for clients with regard to all incident response activities including malicious code, unauthorized access, and inappropriate usage;\n• Supervising project team execution by leading quality assurance efforts and overseeing work product;\n• Improving the ability of the incident response team to react to incidents by evaluating and implementing new tools and processes;\n• Maintaining effective relationships with local, state and federal law enforcement agencies to assist in criminal matters;\n• Creating, leading, and maintaining leveraged team environment that is positioned for continued success and expansion by actively recruiting and retaining employees, and managing team morale;\n• Participating in and leading business development efforts by building relationships with current and potential clients, drafting and presenting proposals, participating in pitches, and demonstrating firm capabilities to potential clients;\n• Providing technical assessment/audit and guidance to clients on the adequacy of cyber security controls in accordance with cybersecurity frameworks that are included in one or more of the following - NIST CSF 2.0, HIPAA, ISO 27001 and 27002, SOC2, NERC-CIP,\n• Assist with team recruiting and training efforts as needed;\n• Working at the direction of counsel on investigations.\n\nDesired Qualifications\n\n• A Bachelor’s or Master’s degree in a related field is preferred but can be waived with sufficient experience;\n• 7-10+ years’ experience in cyber intrusion investigation, digital forensics or incident response analysis;\n• Ability to effectively lead teams, prioritize multiple projects and meet timely deadlines;\n• Experience in a hands-on technical role functioning as an testifying expert, incident responder, network forensic analyst or malware analyst;\n• Experience leading data analytics engagements and managing the execution of technology-based best practices;\n• Working knowledge of computer hardware components, operating systems, file systems, computer networks, e-mail systems, mobile devices, IT security or incident response;\n• Deep knowledge of networking (TCP/IP, design, traffic flow, protocols, sessions), operating systems (Windows / *nix) and web technologies;\n• Willing and able to travel for client projects.\n\nTo Apply\n\nTo be considered for a position in the United States, we require the following:\n\n• Resume – please include current address, personal email and telephone number;\n• Cover letter – please describe your interest in CRA and how this role matches your goals.\n\nIf you are interested in applying for one of our international locations, please visit our Careers site to view and apply for available jobs.\n\nCareer Growth And Benefits\n\n• CRA’s robust skills development programs, including a commitment to offering 100 hours of training annually through formal and informal programs, encourage you to thrive as an individual and team member. Beginning with research and analysis skill building, training continues with technical training, presentation skills, internal seminars, and career mentoring and performance coaching from an assigned senior colleague. Additional leadership and collaboration opportunities exist through internal firm development activities.\n• We offer a comprehensive total rewards program including a superior benefits package, wellness programming to support physical, mental, emotional and financial well-being, and in-house immigration support for foreign nationals and international business travelers.\n\nWork Location Flexibility\n\nCRA creates a work environment that enables our colleagues to benefit from being together in the office to best deliver on our promise of career growth, mentorship and inclusivity. At the same time, we recognize that individuals realize a range of benefits when working from home periodically. We currently ask that individuals spend 3 to 4 days a week on average working in the office (which may include traveling to another CRA office or to a client's location), with specific days determined in coordination with your practice or team. At certain times of the year (e.g. holiday periods), additional remote work options are offered to those whose work commitments permit it, although our offices remain open for those who choose or need to be there.\n\nOur Commitment to Diversity\n\nCharles River Associates is an equal opportunity employer (EOE/AAE). As part of our focus on equity and inclusion, we work to ensure a fair and consistent hiring process. We celebrate diversity and we are committed to an inclusive work environment.\n\nSalary And Other Compensation\n\nA good-faith estimate of the annual base salary range for this position is $140,000 - $170,000. Stating pay within this range may vary based on factors such as education level, experience, skills, geographic location, market conditions, and other qualifications of the successful candidate. This position may be eligible for additional bonus incentive compensation.\n\nCRA offers a comprehensive benefits package, subject to eligibility requirements, which may include: medical, dental, and vision insurance; 401(k) retirement plan with employer match; life and disability insurance; paid time off (vacation, sick leave, holidays); paid parental leave; wellness programs and employee assistance resources; and commuter benefits."
 },
 {
  "job_id": "JLRLnQeP3gr2o1GNAAAAAA==",
  "title": "Forensics Consultant",
  "employer": "Anchorage Consultants LLC",
  "country": "us",
  "description": "Company Description\n\nTime to make your next move your best move!\n\nJob Description\n\nThe Forensics Consultant is part of a team located at the Washington, DC office. This person will be responsible for delivering technology related client services in the areas of forensic data collections, data extraction, data processing, as well as digital and forensic analysis. This person must be located in the Washington, DC area and be available to visit the office and travel to on-site collections when needed.\n\nCore Functions:\n• Use data mining tools to search, sort, and organize large amounts of electronic information\n• Deploy off-the-shelf and proprietary data collection, analysis, and reporting tools\n• Responsible for receiving, documenting, storing, transferring, and returning evidence for forensic analysis and production\n• Maintains inventory control procedures for all evidence and oversees the release, destruction and subsequent paperwork of same\n• Create and provide reports relating to evidence handling as requested\n• Contribute to the development and maintenance of applications used for data management and storage\n• Work as part of a team to provide technical solutions to automate processes and functions to improve data storage and retrieval processes\n• Work within the boundaries of an overall practice methodology and blueprint\n• Develop ad-hoc data reports and analyses\n• Maintain appropriate documentation to include events such as chain of custody\n• Report to work on a regular basis within time and attendance policies\n• Provides data and quality control for all DC lab projects\n• Under the supervision and direction of senior staff: Collect and analyze electronic data from a variety of electronic media, including desktops, laptops, cell phones, tablets, etc\n• Additional Responsibilities:· Attend team and company meetings on a weekly, monthly, quarterly, and annual basis\n• Provide back-up processing and hosting support when business needs require\n• May be assigned Lab Coordination Responsibilities including:\n• -ensure forensic software is up to date-document policies and procedures-update hardware and inventory assets·\n\n- Submit time in accordance with preset deadlines\n\n- May be asked to perform other duties not listed in this job description as required by business needs.\n\nQualifications:·\n• Bachelor’s Degree or experience commensurate with level\n• A minimum of 7 years of experience collecting and analyzing forensic data; professional services experience strongly preferred\n• Strong understanding and application of forensic tools such as EnCase, FTK, NUIX\n• Proven ability to collect and analyze data from various media including: desktops, laptops, tablets, cell phones, social media, etc.\n• Proven ability to maintain appropriate documentation such as Chain of Custody (CoC)\n• Certification in 1 or more tools preferred (EnCE, FTK, GCFE)\n• Willingness to travel and meet position needs outside of regular business hours\n\nWorking Location & Conditions:\n• Hybrid, with the ability to travel (local and non-local) when business needs require\n• Home office, should be a quiet and professional space that can be used for virtual meetings (that include video as needed) and maintain client confidentiality.\n\nQualifications\n\nQualifications:·\n• Bachelor’s Degree or experience commensurate with level\n• A minimum of 7 years of experience collecting and analyzing forensic data; professional services experience strongly preferred\n• Strong understanding and application of forensic tools such as EnCase, FTK, NUIX\n• Proven ability to collect and analyze data from various media including: desktops, laptops, tablets, cell phones, social media, etc.\n• Proven ability to maintain appropriate documentation such as Chain of Custody (CoC)\n• Certification in 1 or more tools preferred (EnCE, FTK, GCFE)\n• Willingness to travel and meet position needs outside of regular business hours\n\nWorking Location & Conditions:\n• Hybrid, with the ability to travel (local and non-local) when business needs require\n• Home office, should be a quiet and professional space that can be used for virtual meetings (that include video as needed) and maintain client confidentiality.\n\nAdditional Information\n\nSalary range: $130,000 - $145,000\n\nBenefits:\n• 401(k)\n• Dental insurance\n• Health insurance\n• Paid time off\n• Vision insurance"
 },
 {
  "job_id": "CXwGe3fB0oTfm2klAAAAAA==",
  "title": "Forensic Analyst I",
  "employer": "ITC Federal, Inc.",
  "country": "us",
  "description": "Overview\n\nJOB TITLE: Forensic Analyst I\n\nAGENCY SUPPORTED: U.S. Department of Justice (DOJ) - MEGA 6 Automated Litigation Support\n\nPOSITION TYPE: Full-Time, Contingent Upon Award\n\nLOCATION: Remote\n\nCLEARANCE: Public Trust - Candidates do not need to be cleared at the time of application but must be able to obtain and maintain a Public Trust clearance prior to starting.\n\nBENEFITS: Health, Dental and Vision, 401(k), Tuition Reimbursement, Flexible Spending Account (FSA), 11 Paid Federal Holidays, 3 weeks' Paid Time Off\n\nITC Federal, LLC (ITC) connects technology advancements in automation and AI, customer experience, and financial services to solve government mission challenges, enabling smoother operational efficiency and bolstering national security. We leverage the latest technology innovations and proven approaches to better serve the mission and support the DHS, DOJ, and DoW workforce, customers, and programs, regardless of scale or complexity. ITC is located in Fairfax, VA and offers an outstanding compensation and benefits plan and a challenging and rewarding professional work environment.\n\nWe are seeking an experienced Forensic Analyst I to support ITC Federal's work for the U.S. Department of Justice (DOJ) under the anticipated MEGA 6 automated litigation support (ALS) program. This is a fully remote position supporting DOJ's complex litigation mission.\n\nImportant: This opening is being established in connection with the MEGA 6 contract vehicle award itself. ITC Federal must still be awarded individual task orders under the vehicle before employees can be onboarded. Accordingly, this position is full-time and contingent upon both contract award and the award of the applicable task order.\n\nPOSITION OVERVIEW:\n\nOperates at a mid-level, applying industry accepted digital forensic principles in acquiring, collecting, preserving, and processing structured and unstructured data per established industry best practices and laboratory procedures and protocols.\n\nPROGRAM CONTEXT:\n\nThis position supports the U.S. Department of Justice (DOJ) under the anticipated MEGA 6 procurement. MEGA 6 is expected to continue DOJ's multiple-award contract vehicle for automated litigation support (ALS) services, following the structure of the MEGA 5 contract. These contracts are designed to provide DOJ offices, boards, divisions, and other federal agencies with information technology, professional services, and litigation support tools to manage complex legal proceedings efficiently.\n\nResponsibilities\n\nRESPONSIBILITIES:\n\n• Responsible for working digital forensics examinations through the data acquisition, examination, presentation and disposition phases.\n\n• Provides identification and seizure support, forensic data acquisition/imaging; forensically-sound and non-forensic collection/capture of electronically stored information (ESI) from some file structures and sources (i.e., Windows, MAC-based desktop/laptop computer systems, files share servers and cloud-based storage; mobile devices and tablets (Android, iOS, Windows, and Blackberry operating systems), and related digital storage media.\n\n• Uses knowledge and experience of a limited variety of computer and mobile technologies and forensic theories to conduct partial forensic examinations that includes processing of allocated space, scripted recovery of deleted files, and conducting Internet history analyses with the goal of developing forensically sound evidence.\n\n• Responsible for performing medium-scale digital forensic examinations to include collection of file shares in a live client-server environment utilizing validated forensic software.\n\n• Recovers data and correlates information, prepares clear and comprehensive notes and reports of findings, and provides oral and written communications to legal staff concerning results of examinations to include legal declarations for investigations and litigations.\n\n• Utilizes industry accepted forensic and non-forensic tools such as EnCase, FTK, Harvester, Cellebrite UFED, and NUIX.\n\n• Researches and maintains proficiency in tools, techniques, and trends.\n\n• As an experienced digital forensics examiner, serves as a source of technical counsel and advice for junior analysts and technicians and possesses the ability to lead forensic investigations in the field.\n\n• Reviews and approves reports, notes, and case files of junior technicians.\n\n• Collaborates with other forensic analysts and technicians, law enforcement officers, and legal experts to recommend methods and procedures for recovery, preservation, and presentation of computer evidence.\n\n• Provides technical guidance and assistance to legal staff while ensuring that proper precautions are taken in the preservation and prevention of spoliation of electronic evidence.\n\n• Complies with standards, policies, and procedures established for the forensics laboratory including accreditation requirements, supplements, criteria, and interpretations as it applies to digital evidence.\n\nQualifications\n\nREQUIRED:\n\n• Ability to obtain and maintain a U.S. Government Public Trust clearance prior to start (candidates are not required to be cleared at the time of application).\n\n• Authorized to work in the United States.\n\n• Ability to work effectively in a fully remote environment.\n\n• Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field and 4 to 7 years current digital forensics collection and processing experience is required; The Contracting Officer may consider 5 years of current industry related Digital Forensics experience as a substitute for degree.\n\n• Must possess and maintain at least 1 of the following certifications: CompTIA™ A+, CompTIA™ Network+, CompTIA™ Server+ certification; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE) , or similar non-vendor specific certification; or EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification (CCME), or similar vendor specific certification.\n\n• Must possess experience in forensics collections and processing across Windows and Mac operating systems and related hardware and software architectures (e.g., computers, mobile devices, file share servers).\n\n• Must have demonstrated mid-level experience in the use of forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc. and be able to articulate, in detail, the processes being conducted by these forensic tools.\n\n• Must have knowledge of LAN/WAN/MAN network environments.\n\n• Must have demonstrated experience in dead box, live, and hybrid data acquisition methodologies.\n\n• Must have demonstrated experience in the automated reconstruction of a RAID array.\n\n• Must have experience processing medium data volumes.\n\n• Must have demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation.\n\n• Must have demonstrated experience preparing affidavits and declarations.\n\n• Must have demonstrated ability to multitask and manage several projects at any given time.\n\n• Moderate travel required.\n\nWORK ENVIRONMENT AND PHYSICAL DEMANDS:\n\n• This is a fully remote position; work is performed from a home office.\n\n• Must be located in or near the Washington, DC area and available for short-notice on-site meetings.\n\n• Work is primarily sedentary, performed while using a computer for extended periods of time.\n\nITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law."
 },
 {
  "job_id": "vSa2gb3aAu7rFaBfAAAAAA==",
  "title": "Digital Forensics Examiner — Travel-Ready, Client Impact",
  "employer": "Senseient",
  "country": "us",
  "description": "Senseient is seeking a motivated digital forensics technologist for a full-time position in Fairfax, Virginia. The ideal candidate will possess 1 to 5 years of experience and a Bachelor's degree in Digital Forensics or a related field.\n\nThe role includes acquiring electronic evidence and interacting with clients while ensuring meticulous evidence handling. Senseient offers comprehensive health insurance, a 401K retirement plan, paid vacations, and federal holidays."
 },
 {
  "job_id": "kkb0Q11S8Zahp9ItAAAAAA==",
  "title": "Digital Forensics & Incident Response Director",
  "employer": "Irongate Cybersecurity",
  "country": "us",
  "description": "We are seeking a seasoned and strategic DFIR Director to join our Digital Forensics and Incident Response (DFIR) practice. This leadership role is responsible for overseeing complex incident response engagements, ensuring high-quality deliverables, and mentoring a team of skilled analysts. The ideal candidate possesses in-depth technical expertise, effective client communication skills, and a proven track record of managing DFIR projects.\n\nAbout IronGate Cybersecurity:\n\nIronGate Cybersecurity is a leader in providing innovative cybersecurity solutions, protecting organizations from sophisticated cyber threats. With a team of dedicated professionals, we offer comprehensive security assessments, incident response services, and proactive cyber resilience strategies. We are on a quest to defend our clients against the dynamic cyber threat landscape and are looking for motivated individuals to join our journey.\n\nKey Responsibilities:\n\nProject Oversight & Client Engagement\n• Lead and manage assigned DFIR cases from initiation to closure.\n• Oversee quality assurance and risk management across multiple workstreams.\n• Conduct peer reviews of forensic analysis and reporting.\n• Consolidate and manage project deliverables and updates.\n• Serve as the primary point of contact for clients, legal counsel, and cyber insurance carriers.\n• Schedule and lead client-facing calls and status meetings.\n• Monitor and manage project budgets and timelines.\n• Review and approve initial forensic reports.\n\nTechnical Forensics & Analysis\n• Perform hands-on digital forensics and incident response tasks as needed.\n• Utilize both commercial and open-source tools for forensic collection and analysis.\n\nTeam Leadership & Performance Management\n• Provide mentorship, guidance, and performance feedback to assigned team members.\n• Support professional development and training initiatives.\n\nScoping & Engagement Planning\n• Lead or participate in scoping calls to define project objectives, scope, and resource needs.\n\nOperational Excellence\n• Ensure accurate and timely timekeeping and documentation practices.\n\nQualifications:\n\nRequired Experience:\n• Minimum 6+ years of experience in Digital Forensics and Incident Response.\n• At least 1 year of experience in a leadership or mentorship role within a DFIR team.\n• Proven experience managing client relationships and leading technical teams.\n\nTechnical Skills:\n• Proficiency with commercial forensic tools: FTK, EnCase, X-Ways.\n• Experience with open-source tools: KAPE, Eric Zimmerman's Tools, Velociraptor, Brimor Labs, Live Collection.\n• Strong understanding of forensic methodologies, incident response lifecycle, and threat actor behaviors.\n\nCertifications (Preferred):\n• CCE – Certified Computer Examiner\n• CFCE – Certified Forensic Computer Examiner\n• GCFA – GIAC Certified Forensic Analyst\n• GCFE – GIAC Certified Forensic Examiner\n• GNFA – GIAC Network Forensic Analyst\n• GCTI – GIAC Cyber Threat Intelligence\n\nKey Attributes:\n• Strong leadership and communication skills.\n• Ability to manage multiple priorities in a fast-paced environment.\n• High attention to detail and commitment to quality.\n• Client-focused with a consultative approach.\n\nIronGate Cybersecurity is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment based on individual merit, skills, and performance, without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristics protected by law.\n\nCompany DescriptionIronGate Cybersecurity is at the forefront of defending companies from cyber threats. As a trusted leader in cybersecurity solutions, our Professional Services Team leverages cutting-edge technology and deep industry expertise to provide comprehensive security assessments, incident response, and digital forensic analysis. Join us in our mission to protect our clients from the ever-evolving landscape of cyber threats."
 },
 {
  "job_id": "pGgJ-buHHrc30SNDAAAAAA==",
  "title": "Forensic Investigator I",
  "employer": "Mandiant Consulting",
  "country": "us",
  "description": "Conduct forensic examinations of digital devices including computers, mobile phones, and servers. Analyze artifacts to reconstruct events, identify malicious activity, and produce written forensic reports."
 }
]