Digital Forensics Examiner​/Analyst

Overview

JOB TITLE: Digital Forensic Examiner – Major Crimes

LOCATION: Linthicum Heights, MD

DURATION: 6m contract to hire

RATE RANGE: $80/hr

TOP 3

SKILLS:


SANS or IACIS Certification(s)
Criminal Forensics experience with iPhone, Android, Windows Devices
Understanding and ability to analyze data and where the information is derived from

Digital Forensic Examiner – Major Crimes

Work Environment:
Cleared federal facility

Clearance Required:

Active Secret clearance

We are seeking a Digital Forensic Examiner to support the Major Crimes Section at a cleared federal facility. This role focuses on analyzing electronic media in support of sensitive, ongoing criminal investigations and operations. The examiner will identify, preserve, analyze, and attribute digital evidence used in criminal prosecution or trial proceedings. The Major Crimes section consists of approximately 18 examiners, all performing similar work without specialization by device type or investigation type.

• Perform forensic analysis of digital media including computers, storage devices, mobile phones, and other electronic devices
• Identify and recover digital artifacts and attribute findings to specific individuals for criminal prosecution or trial
• Conduct digital evidence preservation, forensic imaging, data recovery, deleted file recovery, email extraction, database examination, and electronic discovery
• Use forensic tools and techniques to analyze encrypted, hidden, fragmented, or corrupted data
• Maintain strict adherence to evidence custody and chain-of-custody procedures
• Document forensic methodologies, findings, and conclusions in detailed technical reports suitable for courtroom presentation
• Prepare written notes, summaries, and reports to support investigations and legal proceedings
• Support criminal investigations within the Major Crimes section
• Provide expert witness testimony in federal or military court as required

Successful candidates must demonstrate the ability to clearly attribute digital artifacts to individuals for criminal prosecution. Strong technical knowledge alone is not sufficient; attribution methodology and written communication are critical success factors.

• Bachelor’s degree and 8 or more years of relevant experience, or
• Master’s degree and 6 or more years of relevant experience
• Degree must be in Computer Science, Cybersecurity, Information Technology, Information Systems, Data Science, Mathematics, or Software Engineering

• In lieu of a qualifying bachelor’s degree, 4 additional years of relevant experience or training is required along with an approved forensic certification

• One or more of the following forensic certifications is required:
• Digital Media Collector (DMC)
• Digital Forensic Examiner (DFE)
• Cyber Crime Investigator (CCI)
• Computer Hacking Forensic Investigator (CHFI)
• IACIS certifications including Certified Computer Examiner (CCE) or Certified Forensic Computer Examiner (CFCE)
• GIAC Certified Forensic Examiner (GCFE)
• GIAC Certified Forensic Analyst (GCFA)
• Mobile forensic certifications such as Cellebrite Certified Mobile Examiner (CCME), XRY, or Oxygen Forensic Certified Examiner (OFCE)
• Computer forensic tool certifications such as EnCase Certified Examiner (EnCE), X-Ways X-PERT, or Magnet Certified Forensic Examiner (MCFE)
• Data recovery or advanced data acquisition related certifications

• Minimum 4 years of hands-on digital forensic analysis experience
• Experience supporting criminal investigations
• Demonstrated expertise in criminal forensic attribution, not solely data extraction
• Strong forensic report writing skills suitable for prosecution and courtroom use
• Experience with forensic tools such as EnCase, FTK, X-Ways, Magnet Axiom, Forensic Explorer, Cellebrite, and similar platforms
• Formalized training in computer science, digital forensics, or related disciplines

• Law enforcement or criminal forensics background
• Recent IACIS certification preferred
• Criminal forensics education or prior law enforcement digital forensics experience
• Prior experience providing expert witness testimony

Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate or annual salary only, unless otherwise stated. In addition to base compensation, full-time roles are eligible for Medical, Dental, Vision, Commuter and 401K benefits with company matching.