Junior Digital Forensics Analyst

Job Locations US-VA-Arlington
Requisition ID
2024-150701
Position Category
Cyber Security
Clearance
Top Secret

Responsibilities

We are currently seeking to hire a Junior Digital Forensic Analyst to become a part of Peratons' Department of State Diplomatic Security Cyber Mission (DSCM) program

 

Location: Arlington, VA. Flexible for occasional telework – must be local to work location.

 

The U.S. Department of State, Computer Investigations and Forensics Division (DS/CTI/CIF) conducts digital evidence recovery and analysis in support of Diplomatic Security Service (DSS) criminal, cyber, and administrative investigations.  The Digital Forensics Laboratory receives, processes, and analyzes digital evidence using a wide variety of advanced technologies, decryption schemes, and forensic tools in support of the DSS mission. 

 

In this role, you will:

  • Leverage your expertise in digital forensics to perform in-depth examinations while assuring forensic soundness of recovered digital evidence is maintained to meet court admissibility standards of the Department of Justice.
  • Support the CIF program in providing digital forensic analysis across various types of cases involving both mobile devices and computer systems.
  • Analyst will have a primary focus on mobile device analysis as an apprentice prior to transitioning to a full hybrid forensic analyst capable of examining both mobile and non-mobile devices.
  • Conduct forensic examinations of digital evidence using recognized scientific best practices for the identification, collection, analysis, and interpretation of digital evidence for criminal and civil law or regulatory purposes.
  • Leverage skillset to perform in-depth forensic analysis of various operating systems including Android, Apple iOS/MAC, Microsoft Windows, and Linux based operating systems.
  • Leverage skillset to perform in-depth forensic analysis of file systems including APFS, NTFS, ExFAT, HFS/+, EXT2/3/4, and FAT/FAT32.
  • Leverage skillsets to perform in-depth forensic analysis of system and third-party application databases.
  • As a tool-agnostic examiner, maintain proficiency in the use of industry-standard forensic hardware and software tools such as Magnet Axiom, Cellebrite Inseyets, PA/UFED, Oxygen Forensic Detective, EnCase, X-Ways, Nuix and with mobile advanced extraction tools such as Graykey and Cellebrite Premium.
  • Maintain non-vendor and vendor specific certifications related to job duties.
  • Provide onā€scene support during the execution of search warrants with the identification, collection, packaging, handling, and chain-of-custody procedures of digital evidence.
  • Provide on-scene expertise and triaging guidance of mobile device and running computer systems regarding; encryption, RAM captures, signal-blocking, biometrics, pin-locks, and field acquisition considerations.

#DSCM

Qualifications

Required: 

 

  • Bachelor’s degree and a minimum of 2 years experience as a digital forensic examiner in performing mobile device forensic analysis in a digital forensic laboratory. An additional four years of experience may be substituted in lieu of degree.
  • At a minimim, ONE of the following approved forensic certifications:
    • SANS (GCFE, or GASF)
    • IACIS (CFCE, or CMFE)
    • NCFI (BCERT, or MDE)
    • Cellebrite (CCME)
    • OpenText EnCase (EnCE)
    • Cellebrite (CCO&CCPA)
    • X-Ways (X-PERT)
    • Oxygen Forensic Detective (OFC)
    • Magnet Forensics (MCFE)
  • Demonstrated knowledge of best practices for the identification, collection, analysis, and interpretation of digital evidence for criminal and civil law or regulatory purposes.
  • Technical understanding of mobile device hardware, third-party applications, Apple iOS and Android-based operating systems; Apple Macintosh, Linux and Microsoft Windows operating systems, Windows Registry, Android Debug Bridge (ADB); Apple iTunes and iCloud; various computer file systems.
  • Demonstrated knowledge in providing on-scene triaging, processing, handling, and packaging of electronic/digital evidence (chain of custody) during search and seizure warrants.
  • Proficiency in using at least two forensic software tools such as Magnet Axiom, Cellebrite Inseyets formerly Cellebrite PA, Cellebrite UFED, Oxygen Forensic Detective, Nuix Investigator, X-ways, EnCase or mobile advanced extraction tools.
  • Proficiency in writing detailed notes and reports that translate complex technical information to non-technical audiences.
  • Possess critical, creative, and sound decision-making skills, and the situational awareness to know when to involve program leadership for guidance.
  • Ability to travel for on-scene seizures of digital evidence, training, and/or testimony.
  • Ability to work with individuals at all levels within and outside the organization and to deal tactfully, courteously, and professionally with CIF end-customers.
  • U.S. citizenship.
  • Ability to obtain an interim Secret clearance before start. 
    • The ability to obtain a final Top-Secret security clearance. 

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$66,000 - $106,000. This represents the typical salary range for this position based on experience and other factors.

Options

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed