Digital Media Exploitation Examiner

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace.

The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit  to learn how we’re keeping people around the world safe and secure.

Peraton is seeking a Senior Digital Media Exploitation Examiner in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment.

The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.

The ideal candidate will conduct comprehensive exploitation and/or forensic examinations on a diverse range of digital media, including hard drives, mobile devices, and removable media. You will serve as a subject matter expert, responsible for the entire lifecycle of digital exploitation from acquisition to reporting. This role requires a meticulous and analytical mindset, and target-centric approach, coupled with the ability to convey complex technical findings to both technical and non-technical audiences.

Core Responsibilities

• Conduct forensically sound examinations of digital and mobile devices (including computers, smartphones, and tablets) to support targeting, intelligence reporting, and network development in response to operational mission partner requirements.
• Utilize industry-standard forensic tools and advanced techniques to perform data extraction, recovery, and in-depth analysis of file systems, operating systems (Windows, macOS, Linux, iOS, Android), and application data.
• Perform comprehensive analysis / targeting, including timeline generation, file signature and hash analysis, email and communication analysis, and examination of large, complex datasets.
• Identify and analyze malware and evidence of intrusion or unauthorized activity.
• Prepare detailed, clear, and concise technical reports documenting examination procedures, findings, and expert opinions for a variety of audiences, both technical and non-technical.
• Perform peer reviews of exploitation reports to ensure technical accuracy, completeness, and adherence to established standards.
• Maintain strict chain of custody for all digital evidence and associated documentation.
• Provide expert consultation to stakeholders on Tactics, Techniques, and Procedures (TTPs) for targeting, network development, reporting, digital evidence handling and forensic examinations.
• Stay abreast of the latest developments in digital exploitation technology, trends, and methodologies to ensure the use of current best practices.

Required Skills & Experience

• Proven proficiency with industry-standard forensic tool suites (e.g., EnCase, FTK, Magnet AXIOM, X-Ways…