Jr Digital Forensic Examiner

The Forensic Examiner supports the laboratory’s quality program by performing method validation & verification (review of forensic tools), performing instrument maintenance and testing, assisting with discovery requests, assisting with maintenance and storage of electronic examination records, and organizing forensic findings to be released to investigators, assisting with the Proficiency Test Program, assisting with the documentation and review of records in support of laboratory accreditation.

Responsibilities include:

• Assisting with seizure of digital evidence from on-site search locations while minimizing possible data loss.
  
• Preserving and archiving digital evidence using forensic best practices.
  
• Maintaining proper chain of custody of evidence and associated documentation.
  
• Interfacing with investigators and developing analysis plan to meet customer needs.
  
• Utilizing authorized forensic tools to perform forensic imaging and extraction from digital media.
  
• Maintaining operational effectiveness of all assigned Government hardware, software, and forensic support equipment.
  
• Writing clear reports that accurately present forensic findings and detailed notes to ensure those results are repeatable.
  
• Testifying in court, Grand Jury, or other legal proceedings through testimony, sworn affidavits, or other legal instruments.
  
• Providing guidance and training on emerging technology and new techniques to forensic personnel as needed.
  
• Performing method validation/verification (review of forensic tools)
  
• Performing instrument maintenance and testing
  
• Performing audits / review of forensic work
  
• Assisting with discovery requests
  
• Assisting with consolidation of electronic records of forensic analysis for filing (Case Closure)
  
• Organizing laboratory records and data for delivery to laboratory customers
  
• Interfacing with an investigator and developing analysis plan to address questions of investigative relevance.
  
• Performing forensic analysis, to include, but not limited to:
  
• Recovering deleted files and other system artifacts.
  
• Decrypting password protected data files and devices.
  
• Performing forensic keyword searches and producing results.
  
• Performing other laboratory forensic functions as assigned.
  
• Ability to travel to investigation sites within the US as needed, often with limited (1-2 day) notice, and perform analysis tasks onsite within the allotted time frames. Travel is by vehicle or by air as appropriate for the location. Occasional Saturday/Sunday travel and/or work may be required.
  

Requirements

• At least 1 year of experience in digital forensics environment, with 2-3 years of experience preferred.
  
• Must be a United States Citizen.
  
• Bachelor’s degree in a science or computer-related field from an accredited University or foreign equivalent to a minimum of 24 credit hours in computer science, engineering, or mathematics.
  
• Laboratory-approved industry or government-issued certification in digital forensics analysis prior to assignment. Certification must demonstrate both depth and breadth of digital forensics knowledge applicable to multiple forensics tools and techniques, (e.g., EnCE, GCFE, CFCE, CAWFE, ICMDE, 3CE, 3CI, CECFE, CCIA, DCITA, DMC, DFE, CCI, MAR, CAE, FBI CART, CART Examiner, MDE, MEDEX, TEX").
  
• Proof of certification is required and must be presented for evaluation by the Laboratory. If the candidate has the experience and a certification that is not listed, sometimes other certs are accepted. The agency would make the call. Ex) Candidate has the years of experience but holds their CCO and CCPA. Or holds their CCE from ISFCE
  
• Ability to obtain and maintain a Public Trust clearance.
  
• Must have a valid driver’s license.