Forensics Examiner (Several Levels)

Job Description:

Parsons is looking for an amazingly talented Digital Forensic Examiner (Several Levels) to join our team! In this role, you will conduct forensic examinations of digital and multimedia evidence, analyze artifacts and user activity, maintain evidence integrity, and prepare technically accurate forensic reports in support of investigative and legal proceedings.

• →Conduct forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
• →Use commercial and open-source forensic tools, including EnCase, FTK, X-Ways, and approved government tools, to analyze digital devices.
• →Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
• →Conduct initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
• →Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• →Prepare complete, technically accurate, and professionally formatted Forensic Analysis Reports.
• →Validate forensic tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
• →Participate in technical peer reviews of forensic reports and incorporate review comments.
• →Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• →Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• →Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• →Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

• Active Secret clearance; Top Secret clearance with SCI eligibility is preferred.
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. Four years of hands-on digital-forensics experience may be substituted for the degree.

• Hands-on digital-forensics experience appropriate to the assigned level:
• Forensic Examiner 1: Minimum of two years.
• Forensic Examiner 2: Minimum of five years
• Forensic Examiner 3: Minimum of eight years
• Forensic Examiner 4: Minimum of 12 years.

• Ability to conduct forensic examinations, interpret digital artifacts, analyze user activity, and document findings.
• Experience maintaining chain-of-custody records and handling evidence in accordance with laboratory procedures and security requirements.
• Ability to prepare accurate, complete, and professionally formatted forensic reports.
• Ability to use forensic tools and perform forensic image, extraction, hashing, timestamp, artifact, and anti-forensic analysis.
• Strong attention to detail, analytical ability, technical judgment, and written communication skills.
• Ability to work independently and collaborate effectively with investigators, attorneys, technical reviewers, government personnel, and multidisciplinary teams.

• At least one active certification, or an equivalent certification approved by the COR, including

• DC3 Cyber Training Academy Digital Forensic Examine
• GIAC Certified Forensic Analyst
• GIAC Certified Forensic Examiner
• EnCase Certified Examiner
• Digital Media Collector
• Digital Forensic Examiner
• Cyber Crime Investigator
• Computer Hacking Forensic Investigator
• IACIS Certified Forensic Computer Examiner
• IACIS Certified Mobile Device Examiner
• IACIS Certified Advanced Windows Forensics Examiner
• Cellebrite Certified Mobile Examiner
• Oxygen Forensic Certified Examiner
• X-Ways Professional in Evidence Recovery Techniques
• Magnet Certified Forensic Examiner

• Formal training dedicated to expert-witness testimony, rules of evidence, and courtroom procedure, such as DC3’s 40-hour Forensic Trial Training course, completed within the last three years when required for assigned duties.
• Experience with EnCase, FTK, X-Ways, Cellebrite, Oxygen Forensics, Magnet Forensics, or comparable forensic platforms.
• Experience validating forensic tools, verifying tool outputs, developing scripts, and using version-control practices.
• Experience supporting peer review, expert-witness preparation, affidavits, warrants, depositions, moot court sessions, or courtroom testimony.
• Experience supporting quality-assurance programs, SOP implementation, accreditation activities, competency testing, audits, and laboratory metrics.
• Experience with malware analysis, memory forensics, network forensics, mobile-device examinations, virtual assets, system logs, and anti-forensic techniques.
  

Security Clearance Requirement:

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.