Senior Digital Media Forensic Analyst (Contingent)
Location: On-Site - Linthicum, MD
Clearance Requirement: TS/SCI w/ CI Polygraph
Salary Range: $139,200 - $165,000
ABOUT THE ROLE
As a Senior Digital Media Forensic Analyst supporting U.S. Army Counterintelligence and Counterterrorism investigations, you will execute the full forensic-examination lifecycle evidence acquisition, in-depth analysis, and pre-trial-quality reporting with rigorous chain-of-custody discipline. You will also research and evaluate emerging forensic technologies, deploy and lead forensic training events, and provide operational security assessments that strengthen Army CI/CT mission outcomes.
WHAT YOU'LL DO
- Perform all phases of forensic examination of digital media, on-site and off-site evidence acquisition/seizure, in-depth forensic analysis, and pre-trial-quality reporting
- Maintain chain-of-custody and adhere to Federal Rules of Evidence and ISO 27037 throughout the examination lifecycle
- Provide forensic support for incident response activities, intrusion events, and malware analysis in support of CI and CT investigations
- Conduct mobile-device forensic extraction (logical, file-system, physical) using Cellebrite UFED, Oxygen Forensic Detective, or MSAB XRY
- Execute timeline reconstruction across file-system, registry, browser, and mobile artifacts using log2timeline / Plaso
- Perform memory forensics with Volatility / Rekall to recover credentials, encryption keys, and malware persistence indicators
- Detect anti-forensic adversary tradecraft — timestomping, file-wiping, encryption attempts, steganography
- Research, design, deploy, and lead forensic training events; evaluate emerging forensic technologies and provide adoption recommendations
Please note this position is contingent upon contract award. Start Date TBD.
REQUIRED QUALIFICATIONS
- Active Top Secret/SCI security clearance with current CI Polygraph (within last 5 years)
- Due to clearance requirements U.S. Citizenship is required
- DoD Certified Digital Forensic Examiner (DFE), required at hire, non-negotiable
- Minimum 2 years of host-based forensic experience;
- Senior level relevant forensic experience: Master's Degree +8yrs or Bachelor's Degree +10yrs or Associate's Degree +12yrs or High School Diploma +14yrs
- Operational mobile-device forensics experience (Cellebrite UFED, Oxygen Forensic Detective, or MSAB XRY)
PREFERRED QUALIFICATIONS
- Digital forensics certification: CFCE, GCFE/GCFA, EnCE, or ISFCE CCE
- Malware analysis depth: GREM (GIAC Reverse Engineering Malware)
- DC3 Cyber Training Academy graduate (Windows Forensic Examinations, Forensic Intrusions in a Windows Environment)
- Anti-forensics detection expertise, with direct experience supporting Army CI/CT investigative missions
- CompTIA Security+/Network+ (DoD 8140 baseline)
ABOUT SPHINX
Sphinx is a mission-focused intelligence, counterintelligence, and cyber solutions firm founded in 2018 by professionals from the Special Operations, Intelligence, and Cyber Warfare communities. We partner with Defense, Intelligence, and Commercial clients to deliver exceptional personnel and transformative mission capabilities that advance complex, multi-domain intelligence and security missions. As a small business, Sphinx offers direct mission impact, technical leadership opportunities, and an operator-driven culture that larger companies cannot match.
WHAT SPHINX OFFERS
- Career Growth: Sphinx's Level-Up Employee Advancement and Performance (LEAP) Program provides structured career progression tied to technical certification achievement, mission performance, and leadership cultivation.
- Compensation: Market-benchmarked salary against the cleared workforce ecosystem with annual reviews calibrated to TS/SCI and CI/FSP market dynamics.
- Solution-Focused Culture: Sphinx prioritizes direct leadership access and promotes a Be-Know-Do culture where experienced professionals are empowered to propose and implement solutions that contribute directly high-consequence mission outcomes.
BENEFITS HIGHLIGHTS
We offer a competitive benefits package to include a 401K with corporate match, company paid health, vision, dental, disability, and other insurance options. Sphinx also offers a variety of incentives and opportunities to support the development and well-being of our personnel.
WHY Choose SPHINX?
Sphinx combines large business impact with small team collaboration. At Sphinx, we don't manage bureaucracy. We lead from a position of technical strength by delivering solutions that drive a measurable impact on every high-consequence mission we support.
Sphinx LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.