Digital Forensics SME

Description of Task to be Performed:

You will provide advanced digital forensics expertise to federal law-enforcement investigations, cybercrime cases, and operational missions. You’ll apply deep technical knowledge, investigative acumen, and sound operational judgment to drive complex forensic capabilities that strengthen national security.

In this role, you will operate as a senior member of a multidisciplinary investigative and cyber-operations team, collaborating closely with forensic developers, cryptocurrency analysts, and mission engineers to shape technical decisions and elevate the team’s forensic capability

You will deliver high-level analysis across specialized forensic applications, conduct functional systems analysis, design advanced capabilities and workflows, and prepare technical reports that support critical investigative needs. You’ll guide investigators through difficult digital-evidence challenges, introduce new forensic methods, and help shape the technical direction of major cases requiring novel forensic capabilities.

You may independently lead forensic efforts, advise investigators, and contribute seasoned operational judgment to mission decisions. This position is ideal for a senior digital-forensics practitioner who thrives at the intersection of forensic science, cyber operations, and mission-focused innovation

Work location: Work is mostly remote, with occasional visits to customer and/or corporate locations in DC/Northern Virginia. Applicants who do not currently reside within commuting distance to these locations should describe how they would satisfy any onsite requirements. Remote status is subject to change at the customer’s direction, but is expected to continue.

Responsibilities

• Ensure strict adherence to chain-of-custody, evidentiary handling protocols, and court-admissible forensic standards.
• Provide deep technical analysis supporting major-case investigations.
• Develop and deploy advanced forensic workflows to improve investigative effectiveness and mission readiness.
• Lead the development of new forensic capabilities addressing emerging threats, digital exploitation methods, and evolving adversary tradecraft.
• Research, evaluate, and integrate advanced forensic technologies, tools, and methodologies into operational environments.
• Prepare detailed forensic reports, visualizations, presentations, and investigative documents suitable for legal and intelligence proceedings.
• Train and mentor investigators, analysts, and mission partners on forensic methodology, digital-evidence handling, and investigative best practices.
• Develop, deliver, and lead formal training events for government and cross-agency partners.
• Contribute to forensic readiness, capability maturation, and mission-focused innovation efforts.

Required Qualifications:

• At least 5 years of relevant digital-forensic experience supporting federal investigations, incident response, evidentiary workflows, and cross-agency operations with extensive knowledge of field concepts, practices, and procedures.
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, or related field.
• Hands-on expertise with mobile device forensics and computer forensics.
• Demonstrated experience conducting memory forensics, disk forensics, or malware triage.
• High proficiency with forensic platforms such as EnCase, AXIOM, X-Ways, Cellebrite, or related enterprise tools.
• Clear communication skills, both verbal and written.
• Strong attention to detail
• Candidates must meet eligibility requirements for a TS/SCI clearance. DHS Entry on Duty (EOD) suitability is required to begin support. Following EOD approval, candidates will be processed for, and must successfully obtain SCI.

Preferred Qualifications:

• At least one digital-forensic certification, such as:
• Certified Forensic Computer Examiner (CFCE)
• GIAC Certified Forensic Examiner (GCFE)
• EnCase Certified Examiner (EnCE)
• Additional forensic certifications (CFCE, GCFE, EnCE, CCME, GASF, GCFA).
• Expertise in digital-evidence handling, exploitation techniques, or advanced investigative workflows.
• Experience with automation or scripting (Python, PowerShell) for forensic workflow enhancements.
• Experience integrating forensic tools or developing new investigative capabilities.
• Active DHS EOD suitability
• Active DHS Secret or above clearance