Note: The job is a remote job and is open to candidates in USA. ITC Federal connects technology advancements in automation, artificial intelligence, customer experience, and financial services to solve government mission challenges. The company is seeking a Forensic Analyst I to support the U.S. Department of Justice's automated litigation support program by conducting digital forensic examinations, collecting and preserving electronic evidence, preparing reports, and advising legal staff and forensic personnel.
Responsibilities
- Responsible for working digital forensics examinations through the data acquisition, examination, presentation and disposition phases
- Provides identification and seizure support, forensic data acquisition/imaging; forensically-sound and non-forensic collection/capture of electronically stored information (ESI) from some file structures and sources (i.e., Windows, MAC-based desktop/laptop computer systems, files share servers and cloud-based storage; mobile devices and tablets (Android, iOS, Windows, and Blackberry operating systems), and related digital storage media
- Uses knowledge and experience of a limited variety of computer and mobile technologies and forensic theories to conduct partial forensic examinations that includes processing of allocated space, scripted recovery of deleted files, and conducting Internet history analyses with the goal of developing forensically sound evidence
- Responsible for performing medium-scale digital forensic examinations to include collection of file shares in a live client-server environment utilizing validated forensic software
- Recovers data and correlates information, prepares clear and comprehensive notes and reports of findings, and provides oral and written communications to legal staff concerning results of examinations to include legal declarations for investigations and litigations
- Utilizes industry accepted forensic and non-forensic tools such as EnCase, FTK, Harvester, Cellebrite UFED, and NUIX
- Researches and maintains proficiency in tools, techniques, and trends
- As an experienced digital forensics examiner, serves as a source of technical counsel and advice for junior analysts and technicians and possesses the ability to lead forensic investigations in the field
- Reviews and approves reports, notes, and case files of junior technicians
- Collaborates with other forensic analysts and technicians, law enforcement officers, and legal experts to recommend methods and procedures for recovery, preservation, and presentation of computer evidence
- Provides technical guidance and assistance to legal staff while ensuring that proper precautions are taken in the preservation and prevention of spoliation of electronic evidence
- Complies with standards, policies, and procedures established for the forensics laboratory including accreditation requirements, supplements, criteria, and interpretations as it applies to digital evidence
Skills
- Ability to obtain and maintain a U.S. Government Public Trust clearance prior to start (candidates are not required to be cleared at the time of application)
- Authorized to work in the United States
- Ability to work effectively in a fully remote environment
- Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field and 4 to 7 years current digital forensics collection and processing experience is required; The Contracting Officer may consider 5 years of current industry related Digital Forensics experience as a substitute for degree
- Must possess and maintain at least 1 of the following certifications: CompTIA™ A+, CompTIA™ Network+, CompTIA™ Server+ certification; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE) , or similar non-vendor specific certification; or EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification (CCME), or similar vendor specific certification
- Must possess experience in forensics collections and processing across Windows and Mac operating systems and related hardware and software architectures (e.g., computers, mobile devices, file share servers)
- Must have demonstrated mid-level experience in the use of forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc. and be able to articulate, in detail, the processes being conducted by these forensic tools
- Must have knowledge of LAN/WAN/MAN network environments
- Must have demonstrated experience in dead box, live, and hybrid data acquisition methodologies
- Must have demonstrated experience in the automated reconstruction of a RAID array
- Must have experience processing medium data volumes
- Must have demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation
- Must have demonstrated experience preparing affidavits and declarations
- Must have demonstrated ability to multitask and manage several projects at any given time
- Moderate travel required
- This is a fully remote position; work is performed from a home office
- Must be located in or near the Washington, DC area and available for short-notice on-site meetings
- Work is primarily sedentary, performed while using a computer for extended periods of time
Benefits
- Health, Dental and Vision
- 401(k)
- Tuition Reimbursement
- Flexible Spending Account (FSA)
- 11 Paid Federal Holidays
- 3 weeks’ Paid Time Off
- Fully remote position; work is performed from a home office
Company Overview