Digital Forensics SME

Job Description

Job Description

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. 

Description of Task to be Performed:    

You will provide advanced digital forensics expertise to federal law‑enforcement investigations, cybercrime cases, and operational missions. You’ll apply deep technical knowledge, investigative acumen, and sound operational judgment to drive complex forensic capabilities that strengthen national security.

In this role, you will operate as a senior member of a multidisciplinary investigative and cyber‑operations team, collaborating closely with forensic developers, cryptocurrency analysts, and mission engineers to shape technical decisions and elevate the team’s forensic capability

You will deliver high‑level analysis across specialized forensic applications, conduct functional systems analysis, design advanced capabilities and workflows, and prepare technical reports that support critical investigative needs. You’ll guide investigators through difficult digital‑evidence challenges, introduce new forensic methods, and help shape the technical direction of major cases requiring novel forensic capabilities.

You may independently lead forensic efforts, advise investigators, and contribute seasoned operational judgment to mission decisions. This position is ideal for a senior digital‑forensics practitioner who thrives at the intersection of forensic science, cyber operations, and mission‑focused innovation

Work location: Work is mostly remote, with occasional visits to customer and/or corporate locations in DC/Northern Virginia. Applicants who do not currently reside within commuting distance to these locations should describe how they would satisfy any onsite requirements. Remote status is subject to change at the customer’s direction, but is expected to continue. 

Responsibilities

• Ensure strict adherence to chain‑of‑custody, evidentiary handling protocols, and court‑admissible forensic standards.
• Provide deep technical analysis supporting major‑case investigations.
• Develop and deploy advanced forensic workflows to improve investigative effectiveness and mission readiness.
• Lead the development of new forensic capabilities addressing emerging threats, digital exploitation methods, and evolving adversary tradecraft.
• Research, evaluate, and integrate advanced forensic technologies, tools, and methodologies into operational environments.
• Prepare detailed forensic reports, visualizations, presentations, and investigative documents suitable for legal and intelligence proceedings.
• Train and mentor investigators, analysts, and mission partners on forensic methodology, digital‑evidence handling, and investigative best practices.
• Develop, deliver, and lead formal training events for government and cross‑agency partners.
• Contribute to forensic readiness, capability maturation, and mission‑focused innovation efforts.

Required Qualifications:

• At least 5 years of relevant digital‑forensic experience supporting federal investigations, incident response, evidentiary workflows, and cross‑agency operations with extensive knowledge of field concepts, practices, and procedures.
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, or related field.
• Hands‑on expertise with mobile device forensics and computer forensics.
• Demonstrated experience conducting memory forensics, disk forensics, or malware triage.
• High proficiency with forensic platforms such as EnCase, AXIOM, X‑Ways, Cellebrite, or related enterprise tools.
• Clear communication skills, both verbal and written.
• Strong attention to detail
• Candidates must meet eligibility requirements for a TS/SCI clearance. DHS Entry on Duty (EOD) suitability is required to begin support. Following EOD approval, candidates will be processed for, and must successfully obtain SCI.

Preferred Qualifications:

• At least one digital‑forensic certification, such as:
  • Certified Forensic Computer Examiner (CFCE)
  • GIAC Certified Forensic Examiner (GCFE)
  • EnCase Certified Examiner (EnCE)
• Additional forensic certifications (CFCE, GCFE, EnCE, CCME, GASF, GCFA).
• Expertise in digital‑evidence handling, exploitation techniques, or advanced investigative workflows.
• Experience with automation or scripting (Python, PowerShell) for forensic workflow enhancements.
• Experience integrating forensic tools or developing new investigative capabilities.
• Active DHS EOD suitability
• Active DHS Secret or above clearance

Benefits

• Generous cost sharing for medical insurance for the employee and dependents 
• 100% company paid dental insurance for employees and dependents 
• 100% company paid long-term and short-term disability insurance 
• 100% company paid vision insurance for employees and dependents 
• 401k plan with generous match and 100% immediate vesting 
• Competitive Pay 
• Generous paid leave and holiday package 
• Tuition and training reimbursement 
• Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.  

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you! 

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.