Senior Digital Forensic Analyst

Peraton is currently seeking a Senior Digital Forensic Analyst for its U.S. Department of State Computer Investigations and Forensics Division (DS/CTI/CIF).

Location: Arlington VA

This team conducts digital evidence recovery and analysis in support of Diplomatic Security Service (DSS) criminal cyber and administrative investigations. The Digital Forensics Laboratory receives processes and analyzes digital evidence using a wide variety of advanced technologies decryption schemes and forensic tools in support of the DSS mission.

Position Description:

The Senior Digital Forensic Analyst will:

• Serve as a Seniorlevel Digital Forensic Analyst to support the CIF program with the ability and skillset to provide indepth digital forensic analysis of mobile devices electronic storage devices cloud server and personal computer systems.
• Conduct forensic examinations of digital evidence through the application of recognized scientific best practices for the recognition collection analysis and interpretation of digital evidence for criminal and civil law or regulatory purposes.
• Leverage existing skillsets to perform indepth forensic analysis of various operating systems including Android Apple iOS/MAC Microsoft Windows and Linux based operating systems.
• Leverage existing skillsets to perform indepth forensic analysis of file systems including APFS NTFS ExFAT HFS/ EXT2/3/4 and FAT/FAT32.
• Leverage existing skillsets to perform indepth forensic analysis of system and thirdparty application databases.
• As a toolagnostic examiner maintain proficiency in the use of industrystandard forensic hardware and software tools such as Magnet Axiom Cellebrite Inseyets PA/UFED Oxygen Forensic Detective EnCase XWays Nuix and with mobile advanced extraction tools such as Graykey and Cellebrite Premium
• Maintain nonvendor and vendor specific certifications related to job duties.
• Provide onscene support during the of search warrants with the identification collection packaging handling and chainofcustody procedures of digital evidence.
• Provide onscene expertise and triaging guidance of mobile device and running computer systems regarding; encryption RAM captures signalblocking biometrics pinlocks and field acquisition considerations.
• Produce comprehensive notes reports and illustrative exhibits for federal state and local judicial proceedings; provide expert witness testimony to explain examination interpretations and conclusions from forensic examinations to a lay audience.
• Collaborate with program government and contractor leadership forensic analysts law enforcement officers prosecutors and other stakeholders to ensure that CIF maintains forensically sound procedures and best practices in the imaging analysis and presentation of digital evidence.
• Stay abreast of new developments and trends in digital forensics cybersecurity forensic law mobile devices social media tools mobile applications and encryption technologies.

#DSCM

Minimum Requirements:

• Bachelors degree and a minimum of 8 years experience. An additional 4 years of experience may be substituted in lieu of degree.
• Relevant experience as a digital forensic examiner in performing both mobile and nonmobile analysis in a digital forensic laboratory.
• Must possess: one of the following approved forensic certifications:
  • SANS (GCFE or GASF)
  • IACIS (CFCE or ICMDE)
  • NCFI (BCERT or MDE)
  • Cellebrite (CCME or CCOCCPA)
  • OpenText (EnCE)
• At least one additional certification from the list above or one from the following is preferred:
  • Cellebrite (CASA CCOCCPA)
  • Oxygen Forensic Detective (OFC)
  • Magnet Forensics (MCFE)
  • XWays (XPERT)
• Demonstrate indepth knowledge if forensic analysis of mobile device hardware thirdparty applications Apple iOS and Androidbased operating systems; Apple Macintosh Linux and Microsoft Windows operating systems Windows Registry Android Debug Bridge (ADB); Apple iTunes and iCloud; various computer file systems.
• Experience in providing onscene triaging processing handling and packaging of electronic/digital evidence (chain of custody) during search and seizure warrants.
• Demonstrate knowledge and experience in using various forensic software tools such as Magnet Axiom Cellebrite Inseyets PA Oxygen Forensic Detective Nuix Xways EnCase and with mobile advanced extraction tools such as GrayKey and Cellebrite Premium.
• Experience writing detailed notes and reports that translate complex technical information to nontechnical audiences.
• Critical creative and sound decisionmaking skills and the situational awareness to know when to involve program leadership for guidance.
• The ability to travel for onscene seizures of digital evidence training and/or testimony.
• The ability to work with individuals at all levels within and outside the organization and to deal tactfully courteously and professionally with CIF endcustomers.
• U.S. citizenship required.
• An active interim Secret clearance prior to being able to start.
  • The ability to obtain a final TopSecret security clearance.

Peraton is a nextgeneration national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the worlds leading mission capability integrator and transformative enterprise IT provider we deliver trusted highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land sea space air and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day our employees do the cant be done by solving the most daunting challenges facing our customers. Visit peraton to learn how were keeping people around the world safe and secure.