Post a Job
Post a role →
HOME Cybersecurity & Info Security Digital Forensic Extraction Lead
  • Sprymethods
  • Linthicum, MD
  • Full-Time
  • 6 days ago
  • $200,000–$225,000
Sprymethods VERIFIED EMPLOYER

Digital Forensic Extraction Lead.

Cybersecurity & Info Security Full-Time
♡ Save to shortlist
??% CV Match
Sign in to upload a CV and see how you match

Digital Forensic Extraction Lead: our view in 3 lines...

  • The Role:This role leads forensic imaging and data extraction work in a cyber forensics laboratory.
  • The Person:The person will lead forensic imaging and extraction operations, manage laboratory workflows and staff, maintain chain-of-custody documentation, and oversee testing and validation of forensic imaging tools and write-blockers.
  • Requirements:The ideal candidate has TS/SCI clearance eligibility, an active DFE, GCFE, EnCase Certified Examiner or equivalent certification, and seven years of digital forensics experience.

About the role

Spry Methods is seeking a Forensic Acquisition and Extraction Lead to direct all forensic imaging and data extraction activities in the Cyber Forensics Laboratory (CFL). This position manages the Imaging and Extraction section and gives its staff technical oversight. It is responsible for evidence acquisition from hard drives, mobile devices, and IoT devices, and for running laboratory workflows and maintaining chain-of-custody documentation.

What Your Day-To-Day Looks Like (Position Responsibilities):

  • Lead forensic imaging, evidence acquisition, and data extraction operations. 

  • Provide direct management and technical oversight of Imaging and Extraction section personnel. 

  • Oversee laboratory workflows supporting evidence acquisition, imaging, and extraction. 

  • Maintain accurate chain-of-custody documentation and evidence accountability. 

  • Ensure imaging and extraction tasks are completed in accordance with the PWS. 

  • Oversee testing and validation of forensic imaging tools and write-blockers. 

  • Monitor the quality and efficiency of team performance. 

  • Serve as the primary Government technical point of contact for imaging and extraction activities. 

  • Proactively identify and communicate technical, programmatic, and resource limitations. 

What You Need to Succeed (Minimum Requirements):

  • TS/SCI clearance eligible. 

  • Active DFE, GCFE, EnCase Certified Examiner (EnCE), or equivalent certification approved by the COR. 

  • At least seven years of hands-on digital forensics experience, including at least five years focused on evidence acquisition, forensic imaging, and data extraction from media such as hard drives, mobile devices, and IoT devices. 

  • At least three years of leadership or supervisory experience within the last five years managing a digital forensics team, laboratory workflows, and chain-of-custody documentation. 

  • Demonstrated experience within the last three years testing and validating forensic imaging tools and write-blockers. 

Published October 7, 2026
Location Linthicum, MD
Category Cybersecurity & Info Security  
Job Type Full-Time  

Read our Cookie Policy