Digital Forensic Examiner, Mid

Your growth matters to us - explore our career development opportunities.

Connect with others in our people-first culture and enhance our collective ingenuity.

Learn how we’ll support you as you pursue a balanced, fulfilling life.

Discover what to expect during your journey as a candidate with us.

You are a digital forensic examiner that knows how to determine when a nefarious actor has breached a system and what tools, tactics, and procedures they used. You understand the ever-evolving environment of cybersecurity and how new malware will affect different systems. You have a keen desire to learn and adapt to dynamic changes. Analytical thinking, attention to detail, and puzzle solving are among the many facets you possess.

As a skilled forensic investigator, you can trace the trail of an intruder and know where and when artifacts are left on the system.

Now imagine yourself in a place where you are no longer constrained by the "push-button" and "wipe-and-remediate" culture of incident response. A place where you will be afforded the time, resources, and toolsets to dive deep and explore the most advanced malware exemplars you have ever seen. A place where your technical skill is highly regarded, and you are readily given the education and training resources to expand your knowledge exponentially.

Most importantly, it is a place where real impact is seen, and many more untold accomplishments are made quietly in the shadows.

As a Digital Forensic Examiner on our team, you will no longer have to imagine a place like this – it will become your reality. We have an immediate opportunity for a digital forensics and malware analyst like you. You will be conducting examinations and analysis of emerging threats and previously unknown malicious exploits. You will have access to industry-leading tools and optimized technical environments.

All while working alongside colleagues and clients united in their efforts to ensure our nation's security. Are you ready to make a difference and accelerate your technical development?

Join us. The world can’t wait.

• 5+ years of experience with systems engineering and computing platforms, including Windows, OSX, and Linux
• 5+ years of experience with forensic analysis techniques, including traditional disk image analysis, memory analysis, and malware analysis
• 5+ years of experience with commercial off the shelf forensic products, including Open Text Forensic, SANS SIFT, X-Ways, or Exterro Forensic Toolkit (FTK)
• 2+ years of experience using open-source memory forensics software, including Volatility or MemProcFS
• Experience with Virtual Machines and using VMware to build various test harnesses of mixed virtual machine types, including Windows and Linux variants
• Experience analyzing hosts compromised by malicious code and determining the chronology of events leading up to infection
• Ability to travel up to 25% of the time
• TS/SCI clearance with a polygraph
• Bachelor’s degree

• Experience with computer networking and network traffic analysis
• Experience writing scripts in Python
• Ability to work in an environment of rapidly changing requirements in support of the client mission
• Ability to work individually and collaboratively within a team and proactively engage new tasking
• Ability to analyze software deficiencies and give risk assessment of anomalies not resolved
• Ability to document or present forensic findings during a formal review before peers or clients
• Ability to work with vague requirements, perform technical demonstrations, and investigate innovative technologies
• ACE, EnCE, GCFE, CCI, GREM, CHFI, GCFA, or CCFP Certification

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition…