Digital Media Forensic Analyst Expert

Key Role:

Support counterintelligence investigations by performing all phases of forensic examination of digital media, including on-site and off-site evidence acquisitions and seizures, forensic analysis, and reporting, ensuring maintenance of chain of custody and adherence to applicable rules of evidence. Support incident response activities, intrusion events, and malware analysis. Research, design, deploy, and lead training events, evaluate emerging forensic technologies, provision operational security assessments, and support Cyber forensic and Cybersecurity tasks. Combine computer science with forensic skills to recover information from computers and storage devices to recover data like documents, photos, and emails from computer hard drives and other data storage devices that have been deleted, damaged, or otherwise manipulated. Use technical skills to hunt for files and information that have been hidden, deleted or lost and help officials analyze data and evaluate its relevance.

Basic Qualifications:

  • 14 years of experience in the Intelligence field
  • 2+ years of experience with host-based and mobile device forensics
  • Experience within the past two years with current information, tools, and methodologies in the intelligence field
  • Experience with commercial forensic software suites, including EnCase, Forensic Toolkit (FTK), or X Ways Forensics and with forensic imaging techniques
  • Knowledge of Microsoft Windows, Windows artifacts, and file systems
  • Ability to work in a team environment
  • TS/SCI clearance
  • HS diploma or GED
  • DoD Certified Digital Forensic Examiner (DFE) Certification

Additional Qualifications:

  • Knowledge of US Army Intelligence Investigations
  • Knowledge of Army Regulations 381-12 and 381-20
  • Possession of excellent technical writing skills
  • Possession of excellent oral and written communication skills
  • AA or AS degree and 12 years of experience with intelligence, BA or BS degree and 10 years of experience with intelligence, or MA or MS degree and 8 years of experience with intelligence
  • Two or more of the following digital forensic certifications preferred: Certified Forensic Computer Examiner (CFCE), GIAC Certified Forensic Examiner (GCFE), or EnCase Certified Examiner


Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

We’re an EOE that empowers our people—no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic—to fearlessly drive change.

Not ready to apply? Join our talent community and sign up for job alerts.