Digital Media Forensics Team Support (Expert)

Responsibilities

• Provide support for CI and CT investigations; research, design, deploy, and lead training events; evaluate emerging forensic technologies; provide operational security assessments and support cyber forensic and cyber security tasks.
• Combine computer science with forensic skills to recover information from computers and storage devices to recover data like documents, photos, and e-mails from computer hard drives and other data storage devices that have been deleted, damaged, or otherwise manipulated.
• Use forensic tools and investigative methods to find specific electronic data, including Internet use history, word processing documents, images, and other files. They use their technical skills to hunt for files and information that have been hidden, deleted or lost.
• The analyst may also use their expertise to protect computers from infiltration, determine how a computer was broken into, or recover lost files.
• Create detailed notes on processes undertaken and develop intelligence-based reporting.
• Provide testing and evaluation of emerging trends in digital forensics software and hardware, and assist in developing new and innovative forensic processes and procedures.

Qualifications

• Minimum of 2 years of host based forensic experience
• Must be DOD Certified Digital Forensic Examiner
• Possess all or most of the following certifications:
• Certified Forensic Computer Examiner (CFCE)
• GIAC Certified Forensic Examiner (GCFE)
• EnCase Certified Examiner

Security Clearance

• TS/SCI with CI poly eligibility
• Highly desired: Active CI polygraph