Forensic Examiner - levels - CLEARED

This is a federal contract position for a Forensic Examiner at multiple experience levels. The role involves conducting forensic examinations of digital and multimedia evidence using commercial and open-source forensic tools, with responsibilities ranging from evidence analysis and chain-of-custody documentation to expert witness support and quality assurance activities.

• Conduct forensic examinations of digital and multimedia evidence including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, and memory snapshots
• Use commercial and open-source forensic tools such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
• Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti‑forensic detection, and user-activity reconstruction
• Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements
• Prepare complete, technically accurate, and professionally formatted Forensic Analysis Reports
• May validate forensic tools, develop or maintain approved scripts using version-control practices, participate in technical peer review of forensic reports, and support expert‑witness preparation and testimony

• United States citizenship and an active TS/SCI security clearance with polygraph
• Minimum years of hands‑on digital forensics experience depending on level:
  Level 04 requires 12 years, Level 03 requires 8 years, Level 02 requires 5 years, Level 01 requires 2 years
• Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field (or an additional four years of hands‑on digital forensics experience in lieu of degree)
• At least one active certification such as GCFA, GCFE, EnCE, CHFI, CFCE, or equivalent approved certification
• Proficiency with Linux, BASH, Perl, and Python
• Verifiable completion of formal training course on expert witness testimony, rules of evidence, and courtroom procedure within the last three years if assigned to certain job tasks

• Top Secret with SCI eligibility (beyond the required SECRET clearance with active polygraph)
• Experience with Java and ETL tools
• Familiarity with Cassandra and IAM Level 3 certification
• Agile methodology experience