Forensic Analyst II
RemoteUnited States
Job Summary
Manage digital forensics examinations through the entire lifecycle, including case planning, intake, acquisition, analysis, and expert witness testimony. Operate at a senior level to acquire, collect, and preserve structured and unstructured data from diverse sources such as desktops, servers, mobile devices, and cloud storage. Conduct full forensic examinations utilizing tools like EnCase, FTK, Cellebrite, and NUIX, while reviewing and approving reports from junior analysts. Provide technical counsel to legal staff and lead forensic investigations, ensuring compliance with federal standards and the Federal Rules of Evidence. Requires a Public Trust clearance, a Master's degree or equivalent experience, and the ability to work remotely with moderate travel to the Washington, DC area.
Required Qualifications
- Ability to obtain and maintain a U.S. Government Public Trust clearance prior to start
- Authorized to work in the United States
- Ability to work effectively in a fully remote environment
- Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field
- 7 to 10 years' current digital forensics collection and processing experience
- At least 2 of the following certifications: CompTIA A+, CompTIA Network+, CompTIA Server+ Certification; or IACIS Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE), or similar non-vendor specific certification; or EnCase Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification, or similar vendor specific certifications
- Extensive enterprise level experience conducting digital forensics collections and processing across a variety of operating systems and hardware and software architectures
- Demonstrated senior-level experience in the use of industry standard forensic tools such as EnCase Forensic and Enterprise Editions, Forensic Toolkit, NUIX Investigator, Cellebrite UFED, etc.
- Demonstrated working knowledge of LAN/WAN/MAN network environments
- Demonstrated experience in dead box, live and hybrid data acquisition methodologies
- Demonstrated experience in the forensic, forensically sound, and non-forensic collection and processing of a wide variety of enterprise e-mail and database systems such as Exchange, Lotus, SQL, Oracle, etc., archiving systems, and backup systems
- Demonstrated experience in the manual reconstruction of a RAID array
- Demonstrated working experience in the processing of large data volumes
- Demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence
- Demonstrated experience testifying and taking testimony in a civil, criminal, regulatory or administrative proceeding
- Demonstrated strong project management skills with the ability to multitask and manage several projects at one time
- Moderate travel
Desired Qualifications
- Master's degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.