Position Summary: The Senior Digital Forensics Examiner, officially titled Investigative Forensic Support, will be directly involved in all parts of the digital forensics lifecycle.
Position Requisites:
- Must be a U.S. Citizen
- Current Secret clearance
Education/Experience:
- 6+ years of relevant digital forensics experience
- BS degree in a related field (Computer Science, Digital Forensics, Electrical Engineering, etc.)
Certifications:
- Digital Forensics Certification such as GIAC Certified Forensic Examiner (GCFE), GIAC Certified Forensic Analyst (GCFA), GIAC Battlefield Forensics and Acquisition, GIAC Advanced Smartphone Forensics Certification (GASF), GIAC iOS and macOS Examiner (GIME), GIAC Enterprise Incident Response (GEIR), GIAC Cloud Forensics Responder (GCFR), GIAC Network Forensic Analyst (GNFA), GIAC Reverse Engineering Malware (GREM), GIAC Certified Incident Handler (GCIH), GIAC Experienced Forensic Analyst (GX-FA), International Association of Computer Investigative Specialists (IACIS) Certified Forensic Computer Examiner (CFCE), International Society of Forensic Computer Examiners (ISFCE) Certified Computer Examiner (CCE), EnCase Certified Examiner (EnCE), Access Data Certified Examiner (ACE), EC-Council Computer Hacking Forensic Investigator (C|HFI), Cyber5W C5W Certified Digital Forensic Analyst (CCDFA)
Roles and Responsibilities
- Investigative support, acquisition, analysis, and attribution
- Digital Forensics, attribution, and tracing of assets of value
- Manual or automated generation of reports and forms
- Preparation of exhibits and presentations
- Forensic collection of information from remote sources or physical devices in a way that is suitable for presentation in a court of law
- Provide Digital Forensic Examiner support on-scene for search warrants, over the phone, virtual platform, and in laboratory setting.
- Analysis and development of strategies and/or tools for handling obfuscation techniques or technologies facilitating illicit activity.
- Database forensics, analysis, and modeling
- Identifying and obtaining evidence of illicit or illegal activity
- Provide tool support, either over phone, through live case support emails, or help desk support platforms/SharePoint.
- Identification and attribution of entity relationships, assets, or methodology
- Coordination and collaboration with investigative partners
- Specialized analytics of specific domains of interest identified by customer (examples might include domains such as virtual currency, artificial intelligence, dark web or other emerging technologies, specific criminal organizations, region-based actors, or other specialized domains relevant to criminal investigations or
- national security)
- Providing written and/or oral legal testimony to courts or administrative authorities
- Technology transfer, prototyping, development, and piloting of technologies, products, code, or research to support items.
- Analysis, optimization, or automation of work processes
- Ingestion and processing of data from unstructured, semi-structured, and/or structured formats into a government-specified format/structure as advised
- Conversion between formats of data and movement across storage media and networks
- Automating data collection, processing, and analysis where possible to handle large volumes of data
- Analysis, mapping, translation, or extraction of syntactic and/or semantic features from data
- Visualization, graphics, report generation, or presentation of data and insights, statistics, and trends developed from data
- Development and/or application of machine learning, statistical, or other algorithms to filter, process, categorize, summarize, or identify relevant data
- Collaborating with analysts at customer site nd partner law enforcement agencies on shared data, systems, services and tools
- Developing and/or customizing tools to ingest, filter, format, analyze, and otherwise manipulate data
- Secure storage, governance, and management of data
- Setup and management of network security and interfaces for access to data and related tools
- Proofreading, correction, and quality control of processed or unprocessed data
- Analysis, optimization, or automation of work processes
- Assist and consult in management of Investigative Software and tools as needed.
- Develop investigative guides, training, wikis, and user guides.
- Knowledge management and transfer
- Provide support through SharePoint, Excel, PowerApps and other workflow, ticketing and reporting tools.
- Project planning, implementation, and reporting
- Review Investigative Support submission and make initial recommendations regarding appropriate tools and vendors to engage with support request
- Interview support requestors to obtain additional information regarding the requests.
- Provide guidance to customer employees on appropriate analytical systems and
- techniques.
- Assist in managing investigative support workload of staff
- Logging of all new requests into tracking systems and project management software. Maintain database of support tickets to ensure customer service
- Discussions with field office leadership regarding issues, prioritization, and timelines of investigative support requests
- Preview incoming records for organization and completeness
- Acquire shared location of data for transfer of records and facilitate data transfer.
- Update metrics database with pertinent information acquired including closing project.
- Tracking progress on all ongoing cases coordinating with assigned investigator or project lead
- Submission and maintenance of software requests
- Preparing weekly/monthly/quarterly/yearly metric reports to management and staff
- Coordination with IT Specialist/Lead/Group Manager to ensure ongoing project metrics are being captured appropriately to create reports for management.
- Responsible for the ingestion, processing and analysis of varied financial data acquired during investigations. Leverage either existing Government toolsets or provide proprietary tools.
- Identify opportunities for process automation or tool development.
- Consult and assist with the development of Investigation Analysis Capabilities.
- Preparation of exhibits and presentations
- Forensic collection of information from remote sources or physical devices in a way that is suitable for presentation in a court of law.
- Coordination and collaboration with investigative partners
- Providing written and/or oral legal testimony to courts or administrative authorities Training, documentation, and user support to government personnel or contractors