Cyber Crime Investigator
Fredericksburg, VA (may also consider Quantico, VA | Washington, DC | Reston, VA) – On-site
Clearance Requirements
- Active TS/SCI security clearance (required)
- Ability to obtain a CI Polygraph after hire
Experience Required
At least 3-5+ years of experience providing digital forensics and/or cyber support for investigations
- Experience supporting national security, counterintelligence (CI), or counterterrorism (CT) investigations preferred
- Minimum of 5 years of experience conducting or supporting one or more of the following: Counterintelligence operations in cyberspace | Counterintelligence investigations in cyberspace | Digital forensics supporting CI investigations | Cyber-based CI collections
- Experience performing digital forensic analysis on: Personal Electronic Devices (PEDs) | Intrusion investigations | Online counterintelligence collections
- Ability to work independently with minimal supervision
- Strong analytical, organizational, and communication skills
- Must possess recognized digital forensics and/or cybersecurity certifications
POSITION OVERVIEW:
- The Cyber Crime Investigator (CCI) serves as a technical subject matter expert supporting the agency's Counterintelligence Program. This role combines cyber expertise and investigative experience to support sensitive national security investigations while ensuring investigations are conducted professionally, objectively, and in accordance with legal and evidentiary standards
KEY RESPONSIBILITIES:
- Support Counterintelligence (CI) and Counterterrorism (CT) investigations.
- Conduct cyber-related research, design, deployment, and training activities.
- Evaluate emerging digital forensic technologies and investigative techniques.
- Perform operational security (OPSEC) assessments.
- Conduct digital forensic examinations, including: On-site and off-site evidence acquisition | Digital media seizure | Forensic analysis | Reporting and documentation
- Maintain proper chain of custody and adhere to rules of evidence.
- Support cyber incident response activities.
- Investigate network intrusions and cybersecurity incidents.
- Perform malware analysis.
- Support cyber forensic and cybersecurity operations.
QUALIFICATIONS:
Education:
- Bachelor's degree from an accredited college or university in Cybersecurity, Computer Science, Digital Forensics, Information Technology, Criminal Justice, or a related field.
Digital Forensics Experience:
- Experience with one or more of the following forensic platforms: EnCase | AccessData FTK | Autopsy/Sleuth Kit | SIFT Workstation | Magnet Forensics | Similar industry-standard forensic tools
Advanced Certifications:
- Preferred certifications include: GCFA | GCFE | EnCase Certified Examiner (EnCE) | FTK Certified Examiner | Cyber Crime Investigator (CCI) Certification (DCITA) | Comparable advanced digital forensic certifications
Preferred Government Training:
- Completion of Defense Cyber Investigations Training Academy (DCITA) coursework, including: Forensic Intrusion in a Windows Environment (FIWE) | Windows Forensic Examiner (WFE) | Computer Incident Responders Course (CIRC) | Cyber Threat Analysis (CTA) | INCH | DCITA Cyber Crime Investigator Certification
- Graduation from a Counterintelligence credentialing program is highly desired, including: CISAC | DCAC | Equivalent military service Counterintelligence Special Agent credentialing program
Equivalent Commercial Training Considered
- Commercial certifications may be accepted with Government approval, including: CompTIA A+ | Network+ | Security+ | Certified Ethical Hacker (CEH) | CHFI | SANS FOR308 | SANS FOR498 | SANS FOR500 | SANS FOR504 | SANS FOR585 | Equivalent industry-recognized cyber training
Candidates should demonstrate that their combination of training and experience is equivalent to that of a certified Cyber Crime Investigator.
We are an equal opportunity employer, and we are an organization that values diversity. We welcome applications from all qualified candidates, including minorities and persons with disabilities.
req26-00428