Forensic Analyst

Forensic Analyst

Requirements

• Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field
• 4 to 7 years current digital forensics collection and processing experience
• Must possess and maintain at least 1 of the following certifications: CompTIA™ A+, CompTIA™ Network+, CompTIA™ Server+ certification; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE), or similar non-vendor specific certification; or EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification (CCME), or similar vendor specific certification.
• Must possess experience in forensics collections and processing across Windows and Mac operating systems and related hardware and software architectures
• Must have demonstrated mid-level experience in the use of industry standard forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc. and be able to articulate the processes being conducted by these forensic tools.
• Must have knowledge of LAN/WAN/MAN network environments.
• Must have demonstrated experience in dead box, live, and hybrid data acquisition methodologies.
• Must have demonstrated experience in the automated reconstruction of a RAID array.
• Must have experience processing medium data volumes.
• Must have demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation.
• Must have demonstrated experience preparing affidavits and declarations.
• Must have demonstrated ability to multitask and manage several projects at any given time.

Responsibilities

• Responsible for working digital forensics examinations through the data acquisition, examination, presentation and disposition phases.
• Provide identification and seizure support, forensic data acquisition/imaging, collection/capture of electronically stored information (ESI).
• Processing of allocated space, scripted recovery of deleted files, and conducting Internet history analyses with the goal of developing forensically sound evidence.
• Responsible for performing medium-scale digital forensic examinations to include collection of file shares in a live client-server environment utilizing validated forensic software.
• Recover data and correlate information, prepare clear and comprehensive notes and reports of findings, and provide oral and written communications to legal staff.

Preferred Qualifications

• Advanced degree in Digital Forensics
• Experience in mobile device analysis
• Prior courtroom testimony
• Prior law enforcement background
• Programming skills