Senior Digital Forensics Automation SME

Peraton is seeking a Senior Digital Forensics Automation SME to optimize and modernize digital forensics workflows in support of a federal government customer. This role sits at the intersection of forensic operations, investigative workflow design, and lab automation — with a primary focus on reducing case backlogs, improving examiner efficiency, and standardizing processes across ICAC-style investigative workflows and tool-based forensic automation platforms. The SME will work directly with digital forensic examiners, investigators, and program leadership to identify inefficiencies, design scalable solutions, and implement repeatable, validated workflows that meet legal and accreditation standards. The SME will also support digital forensic criminal trials by ensuring forensic findings, methodologies, and automated workflows are thoroughly documented and defensible in federal court proceedings.

Key Responsibilities:

• Analyze existing digital forensics workflows to identify bottlenecks, redundancies, and opportunities for automation and process improvement
• Design, build, and maintain automated forensic processing workflows that enable parallel, unattended evidence processing across multiple evidence types and platforms
• Configure and optimize digital media analysis pipelines for large-scale investigations, including automated detection, hash matching, deduplication, and triage workflows
• Support ICAC task force operations by standardizing investigative workflows for mobile forensics, cloud acquisition, peer-to-peer network investigations, and digital media triage
• Develop, document, and maintain Standard Operating Procedures (SOPs) for digital evidence handling, processing, triage, and reporting — aligned with DOJ guidelines, ICAC program requirements, and evidence admissibility standards
• Track and report on lab throughput, capacity utilization, and efficiency metrics; produce performance reports for program leadership
• Evaluate new forensic tools and automation platforms for compatibility with existing workflows; serve as the primary liaison with vendors for updates, feature requests, and technical support
• Develop and deliver training to forensic examiners and investigators on automated workflows, tool usage, and SOP adherence
• Mentor junior examiners on best practices for tool-based workflows and process standardization
• Ensure all workflows meet lab accreditation requirements (e.g., ASCLD, ISO 17025) and support legal defensibility of forensic findings
• Support digital forensic criminal trials by preparing documentation of forensic methodologies, workflow processes, and findings suitable for court presentation; coordinate with legal teams and serve as a technical resource during proceedings

Required Qualifications:

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D. A degree in Computer Science, Digital Forensics, Criminal Justice, Information Technology, or a related field is highly desired. However, an additional four years of experience can be considered in lieu of a BS/BA degree. 
• 5+ years of hands-on digital forensics experience, including direct experience with ICAC, child exploitation, or similar law enforcement investigative workflows
• Demonstrated experience designing or improving forensic lab workflows and automation pipelines
• Proficiency with forensic processing automation platforms and digital media analysis tools
• Broad experience across industry-standard forensic tools for computer, mobile, and cloud evidence acquisition and analysis
• Strong understanding of digital evidence handling, chain-of-custody requirements, and forensic best practices
• Experience developing SOPs, training materials, or process documentation in a forensic or law enforcement environment
• Active Secret clearance required at time of hire

Required Active Certification (at least one):  EnCE, CFCE, CCE, MCFE, or equivalent digital forensics certification

Desired Qualifications:

• Familiarity with Lean, Six Sigma, or other process improvement methodologies as applied to forensic lab or investigative operations
• Knowledge of national hash databases and AI-driven media detection capabilities used in digital media investigations
• Experience with rapid device triage tools and workflows for preliminary evidence assessment
• Prior experience in a training, mentorship, or team lead capacity within a digital forensics unit
• Familiarity with DOJ, ICAC program office, or federal law enforcement operational standards
• Experience presenting workflow recommendations or performance metrics to senior leadership or government stakeholders