Job Requisition Number: 64548
Category: Information Systems - Security
Primary Location: Washington, DC, US
Security Clearance: NACI
Clearance Status: Must be Obtainable
Schedule: Full Time
Type of Travel: Local
Percent of Travel Required: Up to 25%
Duties and Responsibilities:
Performs comprehensive forensic examinations of computerbased digital evidence and manages information in support of agency investigations and litigations while following industry and branch established protocols and best practices. Will be responsible for planning, organizing, directing and conducting forensic analysis on a variety of electronic media in support of agency matters. Will serve as a source of technical counsel and advice for productions requiring IT forensic support across diverse types of media. Will be responsible for managing digital forensics examinations through the entire lifecycle (case planning, intake, acquisition, examination, presentation and disposition). Will be responsible for performing complex, large-scale digital forensic examinations to include collection in a live client-server environment utilizing validated remote forensic software (e.g. EnCase® Enterprise Edition, etc.). Will provide technical guidance and assistance to legal staff while ensuring that proper precautions are taken in the preservation and prevention of spoliation of electronic evidence. Will provide oral and written communications to legal staff concerning results of examinations to include legal declarations as well as testimony at trial. Will develop, craft, and articulate subpoena language and partner with legal staff to develop strategies for productions and negotiate file and media formats. Performs related work as required.
Four-year undergraduate Bachelor's degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, or a related field and 10 to 12 years related experience. Must possess extensive experience conducting digital forensic investigations across a variety of hardware and software architectures. Must have extensive experience in forensic examinations at the enterprise level within the preceding 3 years. Must possess and maintain CompTIA™ A+ certification and either the EnCase® Certified Examiner (EnCE) OR IACIS® Certified Forensic Computer Examiner (CFCE) certifications. Minimum three years experience in Digital Forensics analysis. Performs work at full performance level.
Demonstrated experience in and ability to demonstrate the interpretation, processing and translation of file and operating system artifacts across a variety of platforms. Demonstrated expert-level experience in the use of automated forensic tools (e.g. EnCase®, Forensic Toolkit®, Paraben Suite®), Xways®, BlackBag Forensic Suite, Knoppix based tools, etc.) and be able to articulate, in detail, the processes being conducted by these automated forensic tools. Demonstrated experience and be able to demonstrate the processing of large-volume forensic and ediscovery investigations. Demonstrated experience in non-static digital forensic examinations utilizing remote forensic software (e.g. EnCase® Enterprise Edition, etc.). Demonstrated experience in designing, implementing, and administering networks in a LAN/WAN/MAN environment. Demonstrated experience in the forensic analysis of a wide variety of enterprise e-mail systems (e.g. Exchange, Lotus, etc.), archiving systems, and backup systems. Demonstrated experience in the manual reconstruction of a RAID array. Demonstrated working knowledge of and ability to make application of the Federal Rules of Evidence (FRE) and Federal Rules of Civil Procedure (FRCP) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation. Demonstrated experience testifying and taking testimony in a civil, criminal, regulatory or administrative proceeding. Demonstrated experience in Object-Oriented Programming (e.g. C++, Java, EnScript®, etc.) and experience in the design and development of relational databases (e.g. Access, SQL Server, MySQL, etc.) in support of large-scale digital forensic investigations and data-analysis. Demonstrated strong project management skills with the ability to multitask and manage several projects at any given time.
Agility and coordination in handling equipment and evidence as required by laboratory protocol. May be required to lift items up to 75 pounds
The clearance level required is dependent on the type of clearance supported by our client.
CACI is an Equal Opportunity Employer M/F/D/V.
- 3 years ago - save job
CACI provides information solutions and services in support of national security missions and government transformation for Intelligence,...