Digital Forensic Examiner

About the role

MANTECH seeks a motivated, career and customer-oriented CI Digital Forensics Examiner to join our team in Springfield, VA. You will support critical Counterintelligence (CI) mission functions by conducting comprehensive digital media acquisitions, forensic examinations, and cyber incident assessments. In this role, you will collaborate with Intelligence Community and law enforcement partners to investigate cyber threats, analyze network penetrations, and deliver actionable forensic intelligence that protects national security systems.

Responsibilities

• Perform digital media acquisition, imaging, and forensic analysis across Windows, Linux, and macOS platforms using industry-standard tools to investigate suspected cyber penetrations and malicious code.
• Conduct in-depth forensic examinations of computers, mobile devices, networks, and digital media in support of CI incident assessments and foreign intelligence entity inquiries.
• Author detailed forensic examination reports, weekly status updates, and Intelligence Information Reports documenting case backgrounds, technical findings, and investigative recommendations.
• Prepare and deliver executive briefings on CI cyber products, technical findings, and investigation results to senior leadership, government leads, and operational stakeholders.
• Coordinate enterprise incident response events and serve as a technical CI liaison between internal offices (such as Insider Threat and CSOC) and external Intelligence Community (IC) partners.
• Participate in DoD and IC working groups, technical exchanges, and cyber threat awareness briefings to share actionable technical threat intelligence.

Minimum Qualifications

• High School Diploma/GED and 7+ years of hands-on digital forensics experience in counterintelligence (CI) or law enforcement investigations.
• Demonstrated experience conducting computer forensics analysis within the Department of Defense (DoD) or Intelligence Community (IC).
• Demonstrated experience with advanced digital forensic tools and suites, including EnCase and Forensic Toolkit (FTK).
• Ability to obtain and maintain a qualifying Digital Forensic Examiner certification from an accredited government, military, or industry source within six months of assignment.
• Ability to obtain and maintain certification complying with DoD 8570.01-M Information Assurance Technical (IAT) Level II requirements within one year of assignment.
• Proficiency and experience in utilizing common analytical software and office productivity tools, including Microsoft Office (Word, Excel, PowerPoint) and Analyst's Notebook.

Preferred Qualifications

• Bachelor’s degree in a Science, Technology, Engineering, or Mathematics (STEM) discipline.
• Credentialed graduate of an accredited Federal CI, Federal Law Enforcement, DoD CI, or DoD Law Enforcement training academy (e.g., FBI Academy, DCITA).
• Possession of an active DoD Cyber Crimes Investigator certification or existing Digital Forensic Examiner certification.
• Comprehensive knowledge of foreign adversary intelligence services, terrorist organizations, and cyber threats posed to DoD and IC partner networks.

Clearance Requirements

Must possess an active TS/SCI with the ability to obtain/maintain a Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
• Frequently communicates with co-workers, management, and customers, which may involve delivering presentations, and must be able to exchange accurate information in these situations.