REQUIRED:
- Ability to obtain and maintain a U.S. Government Public Trust clearance prior to start (candidates are not required to be cleared at the time of application).
- Authorized to work in the United States.
- Ability to work effectively in a fully remote environment.
- Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field; preferred a Master’s degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field and 7 to 10 years’ current digital forensics collection and processing experience is required.
- The Contracting Officer may consider 10 years of current industry related Digital Forensics experience as a substitute for degree.
- Must possess and maintain at least 2 of the following certifications: CompTIA™ A+; CompTIA™ Network+, CompTIA™ Server+ Certification; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE), or similar non-vendor specific certification; or EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification (CCME), or similar vendor specific certifications.
- Must possess extensive enterprise level experience conducting digital forensics collections and processing across a variety of operating systems and hardware and software architectures (e.g., computers, mobile devices, file share, email, and database servers, and cloud-based storage).
- Must have demonstrated senior-level experience in the use of industry standard forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc. and be able to articulate the processes being conducted by these forensic tools.
- Must have demonstrated working knowledge of LAN/WAN/MAN network environments.
- Must have demonstrated experience in dead box, live and hybrid data acquisition methodologies.
- Must have demonstrated experience in the forensic, forensically sound, and non-forensic collection and processing of a wide variety of enterprise e-mail and database systems such as Exchange, Lotus, SQL, Oracle, etc., archiving systems, and backup systems.
- Must have demonstrated experience in the manual reconstruction of a RAID array.
- Must have demonstrated working experience in the processing of large data volumes.
- Must have demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation.
- Must have demonstrated experience testifying and taking testimony in a civil, criminal, regulatory or administrative proceeding.
- Must have demonstrated strong project management skills with the ability to multitask and manage several projects at one time.
- Moderate travel is required.
WORK ENVIRONMENT AND PHYSICAL DEMANDS:
- This is a fully remote position; work is performed from a home office.
- Must be located in or near the Washington, DC area and available for short-notice on-site meetings.
- Work is primarily sedentary, performed while using a computer for extended periods of time.
ITC Federal is an equal opportunity employer and will not discriminate against any application for employment on the basis of age, race, color, gender, national origin, religion, creed, disability, veteran status, marital status, sexual orientation, genetic information, military status, disability, or sex including pregnancy and childbirth or related medical condition or on any other basis prohibited by law.
Originally posted on Himalayas
