Cyber Investigations & Digital Forensics Subject Matter Expert (SME) with State Client

About the Role

We are seeking a Cyber Investigations & Digital Forensics Subject Matter Expert (SME) to support cybersecurity training, knowledge transfer, and investigative capability development for government oversight and investigative teams. The SME will design and deliver cyber investigative training, develop investigative playbooks and standard operating procedures (SOPs), provide mentoring, and support digital evidence analysis practices.

Responsibilities

• Develop and deliver cybersecurity and digital forensics training programs for investigators and oversight professionals.
• Provide instruction on digital evidence handling, chain of custody, forensic analysis, insider threat investigations, cloud/mobile investigations, log analysis, and technology misuse investigations.
• Create investigative playbooks, SOPs, templates, reference guides, and job aids aligned with industry standards.
• Conduct hands-on exercises, tabletop scenarios, mentoring sessions, and coaching engagements.
• Support development of cyber investigation maturity assessments and workforce development recommendations.
• Facilitate knowledge-sharing sessions and contribute to communities of practice focused on cyber investigations.
• Develop reports, training materials, and documentation supporting investigative capability improvement.

Requirements

• 5+ years of experience supporting cybersecurity, digital forensics, cyber investigations, audits, inspections, compliance reviews, or related government investigative activities.
• Experience delivering cybersecurity or digital forensics training to government, law enforcement, audit, or oversight organizations.
• Strong knowledge of:
  • Digital evidence identification, preservation, and analysis
  • Chain-of-custody procedures
  • Log and artifact analysis
  • Insider threat investigations
  • Cloud and mobile device investigations
  • Computer-assisted investigative techniques
  • OSINT and investigative analytics
• Experience with cybersecurity frameworks such as NIST Cybersecurity Framework (CSF) and NIST SP 800-53.
• Ability to translate complex cybersecurity concepts into practical training for non-technical investigators.

Preferred Qualifications

• Experience supporting Federal, State, or Local Government Inspector General (OIG), audit, investigative, or compliance organizations.
• Knowledge of Government Auditing Standards (GAO Yellow Book), internal audit standards, or administrative investigation practices.
• Experience with AI/ML applications in cybersecurity investigations and governance.
• Relevant certifications such as CISSP, CISM, GIAC, GCFA, GCFE, EnCE, or similar.

Security Requirements

• Ability to complete required government background screening, including FDLE Level II screening if required.
• Ability to handle sensitive information, including PII, HIPAA, FERPA, and CJIS-related data.

Work Location

Remote within the United States. Periodic travel may be required based on project needs.