CACI is seeking a Forensic Analyst II to work in a full-service ISO accredited digital forensics laboratory supporting law enforcement investigations and litigations. You will assist supported customers with the collection, preservation, processing, and analysis of electronic data from desktop and laptop computers, mobile devices, physical and virtual servers, and Cloud storage locations.
More About the Role
Functions in a lead capacity assuming responsibilities as a technical specialist. Duties include:
Case assignment, case management, scene management, and other similar duties of a first line supervisor.Operates at a senior-level, applying industry accepted digital forensic principles in acquiring, collecting, preserving, and processing structured and unstructured data per established industry best practices and laboratory procedures and protocols.Responsible for managing digital forensics examinations through the entire lifecycle (case planning, intake, acquisition, examination, analysis, extraction, presentation, disposition, and expert witness testimony).Provides identification and seizure support, forensic data acquisition/imaging; forensically sound and non-forensic collection/capture of electronically stored information (ESI) from innumerable file structures and sources (i.e., Windows, MAC, Linux, and Unix-based desktop/laptop computer systems, servers to include Exchange, Database, Files Shares, and cloud-based email and storage; mobile devices and tablets (all operating systems), drones, and related digital storage media.Uses vast knowledge and experience of a wide variety of advanced computer and mobile technologies and forensic theories to conduct full forensic examinations/analyses to include processing of allocated and unallocated space and file slack, data carving, and conducting timeline, Internet history, and registry analyses with the goal of developing forensically sound evidence.Responsible for performing large-scale digital forensic examinations to include collection in a live client-server environment utilizing validated remote forensic software.Recovers data and correlates information, prepares clear and comprehensive notes and reports of findings, and provides oral and written communications to legal staff concerning results of examinations to include legal declarations as well as expert witness testimony at trial for investigations and litigations. Utilizes industry accepted forensic and non-forensic tools such as EnCase, FTK, Harvester, Cellebrite UFED, and NUIX.Researches and maintains proficiency in tools, techniques, and trends. As a digital forensics expert, serves as a source of technical counsel and advice for forensic collection/processing activities.Acts as a source of reference for junior analysts and technicians and possesses the ability to lead forensic investigations in the field. Reviews and approves reports, notes, and case files of junior analysts and technicians.Collaborates with other forensic analysts and technicians, law enforcement officers, and legal experts to identify methods and procedures for recovery, preservation, and presentation of computer evidence.Provides technical guidance and assistance to legal staff while ensuring that proper precautions are taken in the preservation and prevention of spoliation of electronic evidence.Complies with standards, policies, and procedures established for the forensics laboratory including accreditation requirements, supplements, criteria, and interpretations as it applies to digital evidence.May supervise a team of digital forensic analysts.You’ll Bring These Qualifications
Undergraduate degree in Digital Forensic Science, Computer Science/Engineering, Computer Information Systems, Mathematics, Criminal Justice, or a related field and 7 to 10 years current digital forensics collection and processing experience.Must possess and maintain at least 2 of the following certifications: CompTIA™ A+, CompTIA™ Network+, CompTIA™ Server+ certification; or IACIS® Certified Forensic Computer Examiner (CFCE), ISFCE Certified Computer Examiner (CCE) , or similar non-vendor specific certification; or EnCase® Certified Examiner (EnCE), AccessData Certified Examiner (ACE), Cellebrite Certified Mobile Examiner (CCME) Certification (CCME), or similar vendor specific certification.Must possess extensive enterprise level experience conducting digital forensics collections and processing across a variety of operating systems and hardware and software architectures (e.g., computers, mobile devices, file share, email, and database servers, and cloud-based storage). Must have demonstrated senior-level experience in the use of industry standard forensic tools such as EnCase® Forensic and Enterprise Editions, Forensic Toolkit®, NUIX Investigator, Cellebrite UFED, etc. and be able to articulate the processes being conducted by these forensic tools.Must have demonstrated experience in dead box, live, and hybrid data acquisition methodologies and have demonstrated experience in the automated reconstruction of a RAID array.Must have experience processing medium data volumes and have demonstrated working knowledge of and ability to apply the Federal Rules of Evidence (FRE) as they apply to electronic evidence as well as demonstrated experience in applying these rules to the framework of an investigation or litigation. Moderate travel required.These Qualifications Would Be Nice to Have:
Court Testimony Law Enforcement BackgroundWhat We Can Offer You:
We’ve been named a Best Place to Work by the Washington Post.Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.We offer competitive benefits and learning and development opportunities.We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.For over 60 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.
______________________________________________________________________________
What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI takes pride in fostering a diverse and accessible culture where every individual feels supported to chart their own path. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Your potential is limitless. So is ours.
Learn more about CACI here.
______________________________________________________________________________
Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.
The proposed salary range for this position is:
$85,800 - $180,200CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected characteristic.