Conduct end-to-end digital forensic examinations in support of IRS Criminal Investigation (CI) and the Cyber Crime Unit (CCU).
Perform forensic acquisition, preservation, processing, and analysis across computers, mobile devices, removable media, cloud artifacts, and cryptocurrency-related evidence.
Maintain strict chain-of-custody; document methodologies/results; produce court-ready reports.
Collaborate with Special Agents/Analysts to scope examinations, define questions, and translate findings into investigative leads.
Support CCU and field offices; coordinate with HQ stakeholders and interagency partners as directed.

Requirements

U.S. citizen able to obtain/maintain at least a NACI background; willingness to undergo higher Public Trust (L5/L6) or national security vetting as required.
3–5+ years conducting digital forensic examinations, including evidence handling, imaging, analysis, and reporting.
Proficiency with one or more forensic suites (e.g., EnCase, FTK, X-Ways, Magnet AXIOM), mobile/cloud tools (e.g., Cellebrite), and memory/malware triage (e.g., Volatility).
Strong technical writing and briefing skills; ability to translate low-level artifacts into law-enforcement-ready narratives.
Familiarity with SharePoint and Smartsheet for documentation and task tracking.

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

digital forensic examinationsforensic acquisitionevidence handlingimaginganalysisreportingmemory triagemalware triagetechnical writingbriefing

Soft Skills

collaborationcommunicationdocumentationproblem-solvingattention to detail

Certifications

NACI backgroundPublic Trust (L5/L6)