Forensic Examiner - multiple levels - CLEARED
TS/SCI clearance required · polygraph namedU.S. citizenship required
Posted 2026-10-26 · Verified live 2026-11-09
See how your real experience scores against this role. Checked against your facts, and you see the full resume first. You approve everything.
Get matched — create your account Sign in to applyAbout this role
Forensic Trial Training course, DC3 Cyber Training Academy Digital Forensic Examiner (DFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), EnCase Certified Examiner (EnCE), Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE), International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE), International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE ), Certified Forensic Computer Examiner (CFCE), Cellebrite Certified Mobile Examiner (CCME), Oxygen Forensic® Certified Examiner (OFCE), EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)
Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position.
Required:
- Must be a US Citizen
- Must have SECRET clearance w/ active polygraph (Top Secret with SCI eligibility preferred)
- Multiple Levels of Years accepted
- A minimum of twelve (12) years of hands-on digital forensics experience
- Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field
- In lieu of a Bachelor's degree, an additional four (04) years of hand-on experience in a digital forensics role can be substituted for a degree for a total of twelve (12) years of experience.
- Verifiable completion of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3’s 40-hour Forensic Trial Training course) within the last three (03) years is required if assigned to certain job tasks
- Possession of at least one of the following active certifications (or an equivalent certification approved by the COR) is required:
- DC3 Cyber Training Academy Digital Forensic Examiner (DFE)
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Certified Forensic Examiner (GCFE)
- EnCase Certified Examiner (EnCE)
- Digital Media Collector (DMC)
- Digital Forensic Examiner (DFE)
- Cyber Crime Investigator (CCI)
- Computer Hacking Forensic Investigator (CHFI)
- International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE)
- International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE)
- International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE )
- Certified Forensic Computer Examiner (CFCE)
- Cellebrite Certified Mobile Examiner (CCME)
- Oxygen Forensic® Certified Examiner (OFCE)
- EnCase Certified Examiner (EnCE)
- X- Ways Professional in Evidence Recovery Techniques (X-PERT)
- Magnet Certified Forensic Examiner (MCFE)
- Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
- Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
- Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction. • Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
- Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
- Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports.
- May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices.
- May participate in technical peer review of forensic reports and incorporate review comments.
- May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
- May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
- May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
- May provide technical input to training, mentorship, process-improvement, and lessons-learned activities.
o Level 04 requires a minimum twelve (12) years of experience
o Level 03 requires a minimum eight (08) years of experience
o Level 02 requires a minimum five (05) years of experience
o Level 01 requires a minimum two (02) years of experience
One of thousands of fresh listings refreshed nightly, built for cleared & defense careers.
Browse all jobs