Digital Forensic Examiner with an active TS clearance and SCI eligibility and five (5) or more years of experience to support NCIS in Great Lakes, IL. Candidates must have five (5) or more years of experience using Cellebrite UFED4PC/Physical Analyzer, proficiency in FTK, and/or OSForensics and certification in DCITA DoD Digital Forensic Examiner or FBI Computer Analysis Response Team (CART). DESCRIPTION: Provide detailed forensic examinations for NCIS cases when computers or other digital media are instruments of crime, DoN computer networks are victims, or when computers or other digital media is used to store data of evidentiary or intelligence value. Additionally, serve as SME and testify in court proceedings, test new network-based investigative tools and network monitoring technologies, and provide informal on-the-job training to government staff as needed.
DUTIES AND RESPONSIBILITIES: - Conduct complex and high-profile, non-destructive evaluations of target computer systems to determine operating and file systems, stored information, user and program logs, ownership, and access methodology, as well as security features and usage
- Provide detailed forensic examinations for NCIS cases
- Document artifacts and deliverables according to standardized formats and approved templates created through collaboration with NCIS Divisions
- Follow NCIS organizational policies and procedures
- Work in a team environment to provide forensic support via active engagement with Cyber-Referent agents
- Liaison between NCIS agents in the field and NCIS analysts at NCISHQ
- Collect and preserve critical evidence from large data sets
- Conduct intrusion identification
- Write SQL queries to verify/retrieve data
- Perform log analysis in support of NCIS investigations
- Conduct forensic extraction and analysis of data and electronic evidence from seized digital media
- Analyze computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data
- Assist the NCIS Special Agent as a technical consultant, ensuring that the data is seized in compliance with computer forensic standards and in compliance with chain of custody guidelines
- Serve as a subject matter expert (SME) and testify in court proceedings regarding forensic procedures utilized to acquire evidence and the description of any evidence obtained
- Analyze and test network monitoring technologies
- Test and assess new commercial and government-developed network-based investigative tools for reviewing and improving NCIS' current collection platforms
- Evaluate and implement new technologies to support the improvement and modernization of the NCIS criminal and intelligence capabilities regarding the gathering digital evidence
- Provide emergent forensic response support to internal and external surge requirements
- Configure, install, and maintain Network Intrusion Detection systems and Network Forensic Analysis Tools on locally configured networks
REQUIRED EXPERIENCE, KNOWLEDGE, SKILLS, ABILITIES, COMPETENCIES: - Minimum of five (5) years digital forensics experience using Cellebrite UFED4PC/Physical Analyzer. Proficiency with FTK, and/or OSForensics.
- Expertise with various computer operating systems to include Windows, Linux/Unix, and Macintosh OS.
- Expertise with a variety of computer hardware to include servers, workstations, desktops, laptops, networking equipment, tablets and cellphones.
- Full understanding of proper forensic data collection procedures, chain of custody, and documentation procedures in a law enforcement environment.
- SANS FOR 500 or SANS FOR 585
- Cellebrite CCO and CCPA.
- Strong documentation skills.
- Ability to testify as an expert witness in judicial proceedings.
- Proficient in information security, information assurance, information technology, and cyber defense best practices and principles.
CERTIFICATIONS OR TRAINING REQUIRED :
- DCITA DoD Digital Forensic Examiner or FBI Computer Analysis Response Team (CART) certification.
SECURITY CLEARANCE: - This position requires the person(s) to be eligible AND adjudicated to Top Secret (TS SCI) clearance level at contract start.
EDUCATION: - Minimum of a Bachelor's degree in a Computer Science-related field or five (5) years of equivalent work experience.
The anticipated hiring range for this position is $135,00 to $145,000. Actual compensation will be determined based on factors such as skills, experience, education, certifications, internal equity, and geographic location.
SAFETY and HEALTH Longeviti, LLC, as the employer, herein notifies each employee candidate and hired employee of the enterprise-wide employee requirement to follow and adhere to all Longeviti Occupational Safety, Health, and Environmental (LOSH)-E controls, policies, procedures, standards, rules, regulations, orders, and guidelines as a condition of employment (herein referred to as safety controls) as directed by Longeviti, LLC supervision, management, and administration.
BENEFITS Longeviti offers a comprehensive and generous benefits package. The Longeviti benefits package includes medical, dental, and vision insurance for the employee and/or their families. Longeviti also includes basic life insurance which includes AD&D plus short- and long-term disability for the employee. Employees may elect to enroll in our company's 401k plan. Employees will also accrue paid time off and holidays. Additional voluntary elections include legal coverage, supplemental accident, critical illness and hospital insurance plans, and commuter benefits.
