Forensic Examiner

Salary Range: 100000 to 200000 (Currency: USD) (Pay period: per-year-salary)

Required:

• Must be a US Citizen
• Must have SECRET clearance w/ active polygraph (Top Secret with SCI eligibility preferred)
• Multiple Levels of Years accepted

o    Level 04 requires a minimum twelve (12) years of experience

o    Level 03 requires a minimum eight (08) years of experience

o    Level 02 requires a minimum five (05) years of experience

o    Level 01 requires a minimum two (02) years of experience

• A minimum of twelve (12) years of hands-on digital forensics experience
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field
• In lieu of a Bachelor's degree, an additional four (04) years of hand-on experience in a digital forensics role can be substituted for a degree for a total of twelve (12) years of experience.
• Verifiable completion of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3’s 40-hour Forensic Trial Training course) within the last three (03) years is required if assigned to certain job tasks
• Possession of at least one of the following active certifications (or an equivalent certification approved by the COR) is required:
• DC3 Cyber Training Academy Digital Forensic Examiner (DFE)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Forensic Examiner (GCFE)
• EnCase Certified Examiner (EnCE)
• Digital Media Collector (DMC)
• Digital Forensic Examiner (DFE)
• Cyber Crime Investigator (CCI)
• Computer Hacking Forensic Investigator (CHFI)
• International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE)
• International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE)
• International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE )
• Certified Forensic Computer Examiner (CFCE)
• Cellebrite Certified Mobile Examiner (CCME)
• Oxygen Forensic® Certified Examiner (OFCE)
• EnCase Certified Examiner (EnCE)
• X- Ways Professional in Evidence Recovery Techniques (X-PERT)
• Magnet Certified Forensic Examiner (MCFE)
• Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
• Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
• Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction. • Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
• Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports.
• May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices.
• May participate in technical peer review of forensic reports and incorporate review comments.
• May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• May provide technical input to training, mentorship, process-improvement, and lessons-learned activities.