Technical Lead – Digital Forensics & Intrusions

Leidos•Linthicum Heights, MD

About The Position

Looking for an opportunity to make an impact? At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. If this sounds like the kind of environment where you can thrive, keep reading! The Opportunity Are you ready to shape the future of global security? The Intelligence Sector at Leidos currently has an opening for a Technical Lead – Digital Forensics & Intrusions to work in our Linthicum, MD location. This is an exciting opportunity to utilize your forensic and technical expertise in support of a U.S. Government partner conducting advanced digital investigations. In this mission, we provide comprehensive digital forensic examination, network analysis, malware analysis, and evidence management services supporting investigative and operational objectives. You will lead forensic teams operating in high-security environments and ensure defensible, legally sound technical outputs. This role directly contributes to national-level investigative and cyber defense missions. Join a team where your "greatest work" isn't just a slogan—it’s our daily standard. Contract Status: Proposal Phase/Contingent Upon Award. Security Clearance: U.S. Citizenship with an Active or Current DoD TS/SCI required. We are not able to sponsor the clearance requirement.

Requirements

Bachelor's degree and 7 or more years of experience. Additional years of experience may be considered in lieu of degree.
5+ years leading forensic or intrusion analysis teams
7+ years performing digital/multimedia forensic examinations
Experience working with Windows, macOS/UNIX, and Linux operating systems
Experience conducting forensic network analysis
Experience analyzing endpoint data, packet captures (PCAP), and related data sources
Experience using industry-standard forensic tools
Strong understanding of chain-of-custody and evidentiary standards.
U.S. Citizenship with an Active or Current DoD TS/SCI required. We are not able to sponsor the clearance requirement.

Nice To Haves

Master’s degree in Digital Forensics, Cybersecurity, or related field
Certifications such as GCFA, GCFE, EnCE, CFCE, or equivalent
Experience in ISO 17025 or accredited lab environments
Experience providing expert testimony support
FTK
EnCase

Responsibilities

The Technical Lead conducts and oversees comprehensive digital forensic and intrusion analysis operations using diverse technical methodologies and tools.
This includes performing digital and multimedia forensic examinations, network forensic analysis, malware reverse engineering, and endpoint analysis to support investigative requirements.
Responsibilities include identifying emerging technical threats, maintaining defensible chain-of-custody documentation, and ensuring compliance with applicable federal laws and accreditation standards.
The individual manages complex forensic projects from intake through reporting, developing task plans, supervising technical staff, and maintaining quality assurance standards.
They establish and maintain forensic methodologies for evidence collection, analysis, documentation, and expert reporting.
This role involves engaging stakeholders to gather investigative requirements, providing expert technical recommendations, and preparing technical reports suitable for legal proceedings.
They also ensure operational readiness through mentoring, tool validation, and continuous process improvement.