Digital Forensics Engineer Expert

Overview

Arcfield is a leading provider of full lifecycle, mission-focused systems engineering and integration capabilities to the U.S. government and its allies. The company has more than 60 years of proven experience providing advanced engineering and analysis, IT and C5ISR capabilities to support our nation’s most critical national security missions. Headquartered in Chantilly, VA and with 16 offices around the world, Arcfield employs approximately 1,200 engineers, analysts, IT specialists, and other professionals who put our customers’ missions first, helping them solve their most complex challenges through innovations in modeling, simulation and analysis, digital transformation and C5ISR. Visit arcfield.com for more details.

Responsibilities

The Digital Forensic Analyst will support analysis of integration/utilization of various communications technologies used to support operations. The customer seeks a Digital Forensics Analyst with Mac, Linux/Unix, and Windows intelligence analyst-centric experience and skills. The analyst will support the customer's overall threat analysis efforts by performing technical assessments on mobile and desktop operating system solutions, and associated hardware and software as they relate to communication systems.

 

The candidate will be expected to conduct forensic assessments across a full spectrum of computer and network devices, Windows/Linux hosts, mobile devices, virtual machines, and software and hardware, to determine potential weaknesses and vulnerabilities that may affect the confidentiality, integrity, and availability of corporate protected and sensitive information systems and data.

• Requires skills in protocol packet-level analysis and developing comprehensive technical reports that provide recommendations of countermeasures as based on the identified techniques, tactics, procedures, and behavior patterns used by adversaries.
• Expected to perform vulnerability assessment and penetration testing of internal, perimeter, external and wireless network devices and web applications.
• Conducts digital media investigations and operations. Examines the hard drives of computers, storage devices, cell phones, PDAs, or any electronic device.
• Performs forensic analysis of digital information.
• Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination.
• Uses forensically sound procedures to identify network computer intrusion evidence and identifies perpetrators.
• Employs forensic tools and techniques to support investigation.
• Observes proper control procedures, documents procedures and findings in a manner suitable for end Sponsor presentation and prepares comprehensive written notes and reports.

As a Digital Forensic Analyst, a candidate may often find themselves attending meetings at various other sites.  Occasional, short-term, TDYs may also be available or required.  Personnel will be required to travel between Chantilly, McLean, and other sites as necessary for performance of duties. Personnel will be sitting in Chantilly.

 

All personnel coming into the organization undergo an additional security review that can take anywhere from 7 business days to 30 days or more.

Qualifications

• Must possess and be able to maintain a TS/SCI clearance with polygraph
• Minimum of bachelor’s degree in computer science, engineering, or a related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience
• 10+years of forensic examination and of Mac, Linux/Unix, and Windows operating systems
• Experience with the Mac, Linux/Unix and Windows Operating Systems
• Experience with Apple iOS, Windows, and Android
• Applicant must have a proven ability to perform complete digital forensic analysis from acquisition to report with minimal assistance.
• Minimum 5 years' experience examining the following media types: cell phones, hard drives, thumb drives, flash media, compact disks,
• Applicant must have proven ability to create detailed technical reports and communicate highly technical information to a wide range of non-technical individuals.
• Experience with any of the standard commercial forensic tools including FTK, Encase, Autopsy, and WireShark.
• Familiarity with penetration test tools and methodologies.
• Programming experience with Java, C, C++, Perl, Python.
• Working familiarity with computer networks, information security systems, and associated technologies.
• Ability to use tools to reverse engineer Mac, Linux/Unix, and Windows operating systems.
• One of more of the following Certifi