Apply on Employer Site

Viperion Tech, LLC · 3 weeks ago

Digital Forensics Examiner (Level III)

Springfield, VA

Full-time

Onsite

Senior Level

7+ years exp

Viperion Tech, LLC is seeking a Digital Forensics Examiner to support CI Cyber Threat and Technical Analyst requirements. The role involves producing digital forensics reports, conducting forensic examinations, and collaborating with intelligence community partners to enhance forensics examinations.

AnalyticsConsultingSecurity

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Produce 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements

Perform Digital Media Acquisition and Digital Forensic Review of various platforms to include Windows, Linux, and Mac OS based systems using a variety of digital forensic tools

Investigate suspected instances of computer, mobile device, and network penetrations

Ingest media into an archive, copy media images, and employ advanced media forensics tools during a forensic examination (ENCASE and Windows Forensic Toolkit are two of the many tools used for media forensics)

Investigate computer viruses and malicious code and prepare, write, and present reports and briefings

Provide weekly status updates when conducting forensics

Provide a written report at the conclusion of each forensics examination. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance): Case File Number, Computer Name, User Name, File Names, etc…, Background, Investigation Details, Status/Disposition, Recommendations, Intelligence Information Report (if deemed necessary by government lead)

Personnel will support CI Incident Assessments to determine possible foreign intelligence entity involvement with an NGA computer system. In the process of supporting an Incident Assessment, reports must be produced and updated weekly. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance):

Perform in-depth forensics examinations of computers, mobile devices, networks and other electronic and digital devices

Possess experience conducting computer forensics analysis within the Department of Defense and/or Intelligence Community

Attend periodic CI and law enforcement community cyber investigations awareness briefings

Brief CI cyber products and CI cyber service results to senior NGA leadership

Collaborate with internal and external Intelligence Community partners to share and gather technical threat information to enhance forensics examinations

Integrate information from forensics examinations and compile results into reports as required

Prepare and present forensic findings in the form of briefings and/or reports, to government leads and managers as required

Participate in Intelligence Community and Department of Defense technical exchange and collaboration meetings as required

Produce detailed CI cyber forensics reports as required

Provide support to all CI mission functions as required

Participate in IC Community and NGA technical meetings and working groups to address issues related to computer security and vulnerabilities

Investigate suspected instances of computer, mobile device, and network penetrations

Effectively utilize all applications and common analytic software tools (i.e., Word, Excel, PowerPoint, Analyst Notebook)

Coordinate CI Cyber activities originating from Enterprise Incident Response Events

Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission

Qualification

Digital ForensicsForensic ToolsIncident AssessmentCyber Threat AnalysisDigital Forensic CertificationDoD IA CertificationTechnical ReportingTeam CoachingCommunication SkillsCollaboration Skills

Required

Shall possess a minimum of 7 years forensic experience in CI or law enforcement investigations

Gain and maintain a digital forensic examiner certification within six months of assignment. Qualifying certification sources include government, military, and industry

Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification

Must have a TS/SCI with the ability to pass a CI Poly

Preferred

Be a credentialed graduate of an accredited federal CI, federal law enforcement, DoD CI, or DoD Law Enforcement training academy (ex. FBI Academy)

Possess a Bachelor's degree in a Science, Technology, Engineering or Mathematics discipline

Possess and demonstrate knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and cyber threats posed to NGA, DoD, and IC partners

Possess a DoD Cyber Crimes Investigator certification

Experience with the latest forensic technologies such as Access Data Forensic Toolkit (FTK)

Possess a digital forensic examiner certification. Qualifying certification sources include government, military, and industry

Possess ability to coach teammates to achieve objectives

Possess ability to monitor and track progress towards achievable measures