Forensic Examiner - multiple levels - CLEARED

Required:

• Must be a US Citizen
• Must have SECRET clearance w/ active polygraph (Top Secret with SCI eligibility preferred)
• Multiple Levels of Years accepted

o Level 04 requires a minimum twelve (12) years of experience

o Level 03 requires a minimum eight (08) years of experience

o Level 02 requires a minimum five (05) years of experience

o Level 01 requires a minimum two (02) years of experience

• A minimum of twelve (12) years of hands-on digital forensics experience
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field
• In lieu of a Bachelor's degree, an additional four (04) years of hand-on experience in a digital forensics role can be substituted for a degree for a total of twelve (12) years of experience.
• Verifiable completion of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3’s 40-hour Forensic Trial Training course) within the last three (03) years is required if assigned to certain job tasks
• Possession of at least one of the following active certifications (or an equivalent certification approved by the COR) is required:
  • DC3 Cyber Training Academy Digital Forensic Examiner (DFE)
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Forensic Examiner (GCFE)
  • EnCase Certified Examiner (EnCE)
  • Digital Media Collector (DMC)
  • Digital Forensic Examiner (DFE)
  • Cyber Crime Investigator (CCI)
  • Computer Hacking Forensic Investigator (CHFI)
  • International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE)
  • International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE)
  • International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE )
  • Certified Forensic Computer Examiner (CFCE)
  • Cellebrite Certified Mobile Examiner (CCME)
  • Oxygen Forensic® Certified Examiner (OFCE)
  • EnCase Certified Examiner (EnCE)
  • X- Ways Professional in Evidence Recovery Techniques (X-PERT)
  • Magnet Certified Forensic Examiner (MCFE)
  • Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
  • Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
  • Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction. • Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
  • Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
  • Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports.
  • May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices.
  • May participate in technical peer review of forensic reports and incorporate review comments.
  • May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
  • May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
  • May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
  • May provide technical input to training, mentorship, process-improvement, and lessons-learned activities.