Cyber Crime Investigator

Fredericksburg, VA (may also consider Quantico, VA | Washington, DC | Reston, VA) – On-site

• Active TS/SCI security clearance (required)
• Ability to obtain a CI Polygraph after hire

At least 3-5+ years of experience providing digital forensics and/or cyber support for investigations

• Experience supporting national security, counterintelligence (CI), or counter terrorism (CT) investigations preferred
• Minimum of 5 years of experience conducting or supporting one or more of the following:
  Counterintelligence operations in cyberspace | Counterintelligence investigations in cyberspace | Digital forensics supporting CI investigations | Cyber-based CI collections
• Experience performing digital forensic analysis on:
  Personal Electronic Devices (PEDs) | Intrusion investigations | Online counterintelligence collections
• Ability to work independently with minimal supervision
• Strong analytical, organizational, and communication skills
• Must possess recognized digital forensics and/or cybersecurity certifications

• The Cyber Crime Investigator (CCI) serves as a technical subject matter expert supporting the agency's Counterintelligence Program. This role combines cyber expertise and investigative experience to support sensitive national security investigations while ensuring investigations are conducted professionally, objectively, and in accordance with legal and evidentiary standards

• Support Counterintelligence (CI) and Counter terrorism (CT) investigations.
• Conduct cyber-related research, design, deployment, and training activities.
• Evaluate emerging digital forensic technologies and investigative techniques.
• Perform operational security (OPSEC) assessments.
• Conduct digital forensic examinations, including:
  On-site and off-site evidence acquisition | Digital media seizure | Forensic analysis | Reporting and documentation
• Maintain proper chain of custody and adhere to rules of evidence.
• Support cyber incident response activities.
• Investigate network intrusions and cybersecurity incidents.
• Perform malware analysis.
• Support cyber forensic and cybersecurity operations.

• Bachelor's degree from an accredited college or university in Cybersecurity, Computer Science, Digital Forensics, Information Technology, Criminal Justice, or a related field.
• Experience with one or more of the following forensic platforms:
  EnCase | Access Data FTK | Autopsy/Sleuth Kit | SIFT Workstation | Magnet Forensics | Similar industry-standard forensic tools

• Preferred certifications include: GCFA | GCFE | EnCase Certified Examiner (EnCE) | FTK Certified Examiner | Cyber Crime Investigator (CCI) Certification (DCITA) | Comparable advanced digital forensic certifications

• Completion of Defense Cyber Investigations Training Academy (DCITA) coursework, including:
  Forensic Intrusion in a Windows Environment (FIWE) | Windows Forensic Examiner (WFE) | Computer Incident Responders Course (CIRC) | Cyber Threat Analysis (CTA) | INCH | DCITA Cyber Crime Investigator Certification
• Graduation from a Counterintelligence credentialing program is highly desired, including: CISAC | DCAC | Equivalent military service Counterintelligence Special Agent credentialing program
• Commercial certifications may be accepted with Government approval, including:
  CompTIA A+ | Network+ | Security+ | Certified Ethical Hacker (CEH) | CHFI | SANS FOR
  308 | SANS FOR
  498 | SANS FOR
  500 | SANS FOR
  504 | SANS FOR
  585 | Equivalent industry-recognized cyber training

Candidates should demonstrate that their combination of training and experience is equivalent to that of a certified Cyber Crime Investigator.

We are an equal opportunity employer, and we are an organization that values diversity. We welcome applications from all qualified candidates, including minorities and persons with disabilities.