Forensic Trial Training course, DC3 Cyber Training Academy Digital Forensic Examiner (DFE), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), EnCase Certified Examiner (EnCE), Digital Media Collector (DMC), Digital Forensic Examiner (DFE), Cyber Crime Investigator (CCI), Computer Hacking Forensic Investigator (CHFI), International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE), International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE), International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE ), Certified Forensic Computer Examiner (CFCE), Cellebrite Certified Mobile Examiner (CCME), Oxygen Forensic® Certified Examiner (OFCE), EnCase Certified Examiner (EnCE), X- Ways Professional in Evidence Recovery Techniques (X-PERT), Magnet Certified Forensic Examiner (MCFE)
Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position.
Required:
- Must be a US Citizen
- Must have SECRET clearance w/ active polygraph (Top Secret with SCI eligibility preferred)
- Multiple Levels of Years accepted
o Level 04 requires a minimum twelve (12) years of experience
o Level 03 requires a minimum eight (08) years of experience
o Level 02 requires a minimum five (05) years of experience
o Level 01 requires a minimum two (02) years of experience
- A minimum of twelve (12) years of hands-on digital forensics experience
- Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field
- In lieu of a Bachelor's degree, an additional four (04) years of hand-on experience in a digital forensics role can be substituted for a degree for a total of twelve (12) years of experience.
- Verifiable completion of a formal training course dedicated to expert witness testimony, rules of evidence, and courtroom procedure (e.g., DC3’s 40-hour Forensic Trial Training course) within the last three (03) years is required if assigned to certain job tasks
- Possession of at least one of the following active certifications (or an equivalent certification approved by the COR) is required:
- DC3 Cyber Training Academy Digital Forensic Examiner (DFE)
- GIAC Certified Forensic Analyst (GCFA)
- GIAC Certified Forensic Examiner (GCFE)
- EnCase Certified Examiner (EnCE)
- Digital Media Collector (DMC)
- Digital Forensic Examiner (DFE)
- Cyber Crime Investigator (CCI)
- Computer Hacking Forensic Investigator (CHFI)
- International Association of Computer Investigative Specialists (IACIS)'s Certified Forensics Computer Examiner (CFCE)
- International Association of Computer Investigative Specialists (IACIS) Certified Mobile Device Examiner (ICMDE)
- International Association of Computer Investigative Specialists (IACIS)'s Certified Advanced Windows Forensics Examiner (CAWFE )
- Certified Forensic Computer Examiner (CFCE)
- Cellebrite Certified Mobile Examiner (CCME)
- Oxygen Forensic® Certified Examiner (OFCE)
- EnCase Certified Examiner (EnCE)
- X- Ways Professional in Evidence Recovery Techniques (X-PERT)
- Magnet Certified Forensic Examiner (MCFE)
- Conducts forensic examinations of digital and multimedia evidence, including forensic images, computers, mobile devices, virtual assets, malware, system logs, network traffic, memory snapshots, and other submitted data.
- Uses commercial and open-source forensic tools, such as EnCase, FTK, X-Ways, and approved Government tools to analyze digital devices
- Performs evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction. • Conducts initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
- Maintains accurate chain-of-custody documentation and ensures evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
- Prepares complete, technically accurate, and professionally formatted Forensic Analysis Reports.
- May validate forensic tools and document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices.
- May participate in technical peer review of forensic reports and incorporate review comments.
- May support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
- May support quality assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
- May support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
- May provide technical input to training, mentorship, process-improvement, and lessons-learned activities.
The benefits package:
• Affordable healthcare options with 80% employer paid premium PLUS a company-funded HSA
• Comprehensive Dental insurance
• Vision with 80% employer paid premium
• Employer paid Life insurance 100%
• Employer paid Short-term and Long-term disability 100%
• Annual training, continued education, and professional memberships reimbursement
• Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation
• Annual reimbursement for technology i.e. phones, computers, printers, etc.
• 401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment)
The environment and perks:
• Professional development investment and paid time off for training
• Contract and work locations in Maryland, Virginia, Colorado, Texas, Utah, Florida and Hawaii.
• Team building events throughout the year such as Destination Family Events, Holiday Party, Monthly Get-Togethers
• Leadership Team engagement and mentorship
• Performance Recognition Program
• Complimentary branded apparel
Don't see a job opening that's the perfect fit? Apply to our General Position to join our talent pool for consideration for future opportunities.
Know someone else who may be a good fit? Refer them through the CTI External Referral Program and you could receive a one-time referral bonus of up to $10,000! Email cti-staffing@cti-md.com for more information.
Constellation Technologies is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Job applicants can submit questions about CTI’s equal employment opportunity policy to cti-hr@cti-md.com.
