Digital Forensics Lead (CBP)

The Role

This position leads digital forensics operations supporting a large federal border protection environment, spanning hundreds of ports of entry and associated facilities. Day to day, the work involves preserving and analyzing evidence from compromised or suspect systems, reconstructing events, and producing findings that support incident response, insider threat, and potential legal or law enforcement action.

Skills & Experience

Candidates must hold or be eligible to obtain a CBP Background Investigation, with active EOD strongly preferred. U.S. citizenship is required. Core competencies should include forensic evidence preservation, intrusion analysis, and producing findings that meet evidentiary standards capable of withstanding legal or disciplinary scrutiny.

Who It Suits

This role suits an experienced forensics professional who thrives in high-stakes, mission-critical environments and understands that analytical rigour is non-negotiable. Someone comfortable operating across a complex federal infrastructure, collaborating with incident response and threat hunt teams, and communicating findings clearly to both technical and non-technical stakeholders will excel here.