Job Description
Job Description The Forensic Examiner supports the laboratory's quality program by performing method validation & verification (review of forensic tools), performing instrument maintenance and testing,assisting with discovery requests, assisting with maintenance and storage of electronic examination records, and organizing forensic findings to be released to investigators, assisting with the Proficiency Test Program, assisting with the documentation and review of records in support of laboratory accreditation.
Responsibilities include: - Assisting with seizure of digital evidence from on-site search locations while minimizing possible data loss.
- Preserving and archivingdigital evidence using forensic best practices.
- Maintaining proper chainof custody of evidence and associated documentation.
- Interfacing withinvestigators and developing analysis plan to meet customer needs.
- Utilizing authorizedforensic tools to perform forensic imaging and extraction from digitalmedia.
- Maintaining operationaleffectiveness of all assigned Government hardware, software, and forensicsupport equipment.
- Writing clear reportsthat accurately present forensic findings and detailed notes to ensurethose results are repeatable.
- Testifying in court,Grand Jury, or other legal proceedings through testimony, swornaffidavits, or other legal instruments.
- Providing guidance andtraining on emerging technology and new techniques to forensic personnelas needed.
- Performing methodvalidation/verification (review of forensic tools)
- Performing instrumentmaintenance and testing
- Performing audits /review of forensic work
- Assisting with discoveryrequests
- Assisting withconsolidation of electronic records of forensic analysis for filing (CaseClosure)
- Organizing laboratoryrecords and data for delivery to laboratory customers
- Interfacing with aninvestigator and developing analysis plan to address questions ofinvestigative relevance.
- Performing forensicanalysis, to include, but not limited to:
- Recovering deleted filesand other system artifacts.
- Decrypting passwordprotected data files and devices.
- Performing forensickeyword searches and producing results.
- Performing otherlaboratory forensic functions as assigned.
- Ability to travel toinvestigation sites within the US as needed, often with limited (1-2 day)notice, and perform analysis tasks onsite within the allotted time frames.Travel is by vehicle or by air as appropriate for the location. OccasionalSaturday/Sunday travel and/or work may be required.
Requirements - At least 1 year of experience in digital forensics environment, with 2-3 years of experience preferred.
- Must be a United StatesCitizen.
- Bachelor's degree in ascience or computer-related field from an accredited University or foreignequivalent to a minimum of 24 credit hours in computer science,engineering, or mathematics.
- Laboratory-approvedindustry or government-issued certification in digital forensics analysisprior to assignment. Certification must demonstrate both depth and breadthof digital forensics knowledge applicable to multiple forensics tools andtechniques, (e.g., EnCE, GCFE, CFCE, CAWFE, ICMDE, 3CE, 3CI, CECFE, CCIA,DCITA, DMC, DFE, CCI, MAR, CAE, FBI CART, CART Examiner, MDE, MEDEX,TEX").
- Proof of certification is required and must be presented forevaluation by the Laboratory. If thecandidate has the experience and a certification that is not listed,sometimes other certs are accepted. The agency would make the call. Ex)Candidate has the years of experience but holds their CCO and CCPA. Orholds their CCE from ISFCE
- Ability to obtain andmaintain a Public Trust clearance.
- Must have a validdriver's license.
Job Tags