Description of Task to be Performed:
You will provide advanced digital forensics expertise to federal law‑enforcement investigations, cybercrime cases, and operational missions. You’ll apply deep technical knowledge, investigative acumen, and sound operational judgment to drive complex forensic capabilities that strengthen national security.
In this role, you will operate as a senior member of a multidisciplinary investigative and cyber‑operations team, collaborating closely with forensic developers, cryptocurrency analysts, and mission engineers to shape technical decisions and elevate the team’s forensic capability
You will deliver high‑level analysis across specialized forensic applications, conduct functional systems analysis, design advanced capabilities and workflows, and prepare technical reports that support critical investigative needs. You’ll guide investigators through difficult digital‑evidence challenges, introduce new forensic methods, and help shape the technical direction of major cases requiring novel forensic capabilities.
You may independently lead forensic efforts, advise investigators, and contribute seasoned operational judgment to mission decisions. This position is ideal for a senior digital‑forensics practitioner who thrives at the intersection of forensic science, cyber operations, and mission‑focused innovation
Work location: Work is mostly remote, with occasional visits to customer and/or corporate locations in DC/Northern Virginia. Applicants who do not currently reside within commuting distance to these locations should describe how they would satisfy any onsite requirements. Remote status is subject to change at the customer’s direction, but is expected to continue.
Responsibilities
- Ensure strict adherence to chain‑of‑custody, evidentiary handling protocols, and court‑admissible forensic standards.
- Provide deep technical analysis supporting major‑case investigations.
- Develop and deploy advanced forensic workflows to improve investigative effectiveness and mission readiness.
- Lead the development of new forensic capabilities addressing emerging threats, digital exploitation methods, and evolving adversary tradecraft.
- Research, evaluate, and integrate advanced forensic technologies, tools, and methodologies into operational environments.
- Prepare detailed forensic reports, visualizations, presentations, and investigative documents suitable for legal and intelligence proceedings.
- Train and mentor investigators, analysts, and mission partners on forensic methodology, digital‑evidence handling, and investigative best practices.
- Develop, deliver, and lead formal training events for government and cross‑agency partners.
- Contribute to forensic readiness, capability maturation, and mission‑focused innovation efforts.
Required Qualifications:
- At least 5 years of relevant digital‑forensic experience supporting federal investigations, incident response, evidentiary workflows, and cross‑agency operations with extensive knowledge of field concepts, practices, and procedures.
- Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, or related field.
- Hands‑on expertise with mobile device forensics and computer forensics.
- Demonstrated experience conducting memory forensics, disk forensics, or malware triage.
- High proficiency with forensic platforms such as EnCase, AXIOM, X‑Ways, Cellebrite, or related enterprise tools.
- Clear communication skills, both verbal and written.
- Strong attention to detail
- Candidates must meet eligibility requirements for a TS/SCI clearance. DHS Entry on Duty (EOD) suitability is required to begin support. Following EOD approval, candidates will be processed for, and must successfully obtain SCI.
Preferred Qualifications:
- At least one digital‑forensic certification, such as:
- Certified Forensic Computer Examiner (CFCE)
- GIAC Certified Forensic Examiner (GCFE)
- EnCase Certified Examiner (EnCE)
- Additional forensic certifications (CFCE, GCFE, EnCE, CCME, GASF, GCFA).
- Expertise in digital‑evidence handling, exploitation techniques, or advanced investigative workflows.
- Experience with automation or scripting (Python, PowerShell) for forensic workflow enhancements.
- Experience integrating forensic tools or developing new investigative capabilities.
- Active DHS EOD suitability
- Active DHS Secret or above clearance
- Generous cost sharing for medical insurance for the employee and dependents
- 100% company paid dental insurance for employees and dependents
- 100% company paid long-term and short-term disability insurance
- 100% company paid vision insurance for employees and dependents
- 401k plan with generous match and 100% immediate vesting
- Competitive Pay
- Generous paid leave and holiday package
- Tuition and training reimbursement
- Life and AD&D Insurance
Skills Required
- At least 5 years of relevant digital‑forensic experience supporting federal investigations, incident response, evidentiary workflows, and cross‑agency operations
- Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, or related field
- Hands‑on expertise with mobile device forensics and computer forensics
- Demonstrated experience conducting memory forensics, disk forensics, or malware triage
- High proficiency with forensic platforms such as EnCase, AXIOM, X‑Ways, Cellebrite, or related enterprise tools
- Clear verbal and written communication skills
- Strong attention to detail
- Must meet eligibility requirements for TS/SCI clearance and DHS Entry On Duty (EOD) suitability; must successfully obtain SCI after processing
- Digital‑forensic certification(s) such as CFCE, GCFE, EnCE, CCME, GASF, or GCFA
- Expertise in digital‑evidence handling, exploitation techniques, or advanced investigative workflows
- Experience with automation or scripting (Python, PowerShell) for forensic workflow enhancements
- Experience integrating forensic tools or developing new investigative capabilities
- Active DHS EOD suitability
- Active DHS Secret or higher clearance
What We Do
AnaVation is a trusted partner that delivers high-value, cost-effective solutions to solve our customers’ most complex technical and analytical problems. AnaVation believes that the future of securing, collecting, processing, and analyzing cyber data will require the development of advanced ANAlytical technologies derived via the innoVATION of current and future technologies. AnaVation believes in the “Idea of the Possible” — that it is possible for our experts, partnering with our customers in the right environment, to create innovative technical solutions that expand our customers’ capabilities. We want to do two things for our customers. We want to resolve existing challenges and we want to prepare them for the future. Our technical expertise and innovative engineering culture enable us to do those things.
