Senior Forensic Developer

Job description

**Be Challenged and Make a Difference** In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. **Description of Task to be Performed:** In this role, you will design and build the specialized forensic software that powers federal cybercrime and digital‑evidence investigations. You’ll merge your deep understanding of digital‑forensics tradecraft with advanced software‑engineering skill to create tools that investigators rely on to uncover critical artifacts, reconstruct events, and validate evidence. You will work at the core of a technical engineering team, collaborating with forensic SMEs, crypto engineers, and software developers to design and deliver capabilities the entire mission relies on for digital‑evidence analysis and cyber‑investigative success. You will architect and implement forensic capabilities that operate at the lowest levels of an operating system including parsing file systems, analyzing volatile memory, dissecting binary data, and automating complex investigative workflows. Your work will directly enable investigators to analyze devices, interpret digital evidence, and uncover malicious activity with greater speed and accuracy. As a Senior Forensic Developer, you will serve as a technical authority for forensic capability development, ensuring that the tools you build meet strict evidentiary standards and integrate seamlessly into mission platforms. You’ll collaborate closely with forensic analysts, cyber operators, and mission partners to transform investigative needs into reliable, validated, court‑ready software solutions. This role is ideal for a seasoned engineer who thrives at the intersection of software development, digital forensics, and mission‑driven innovation, and who wants their code to directly support national‑security and law‑enforcement operations. **Work location: Work is mostly remote, with occasional visits to customer and/or corporate locations in DC/Northern Virginia. Applicants who do not currently reside within commuting distance to these locations should describe how they would satisfy any onsite requirements. Remote status is subject to change at the customer’s direction, but is expected to continue.** **Responsibilities** - Develop advanced forensic applications supporting artifact extraction, file‑system parsing, memory analysis, and mobile‑device parsing. - Engineer automation frameworks to enhance investigative efficiency and evidentiary processing. - Perform reverse engineering and binary analysis to support forensic tool development. - Ensure all tools meet evidentiary standards and validation requirements. - Integrate forensic tooling into enterprise systems and investigative platforms. - Produce technical documentation, design artifacts, and validation reports. - Support investigators and forensic analysts with custom capability development. ### Required Qualifications: - At least 5 years of software development experience focused on digital forensics or investigative tooling. - Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or related field. - Experience developing enterprise‑grade forensic applications meeting evidentiary requirements. - Strong knowledge of one or more of OS internals, reverse engineering, binary analysis, and scripting/automation. - Familiarity with forensic platforms such as EnCase, AXIOM, X‑Ways, and Cellebrite. - Clear communication skills, both verbal and written. - Strong attention to detail - **Candidates must meet eligibility requirements for a Secret clearance.** DHS Entry on Duty (EOD) suitability is required to begin support. Following EOD approval, candidates will be processed for, and must successfully obtain a Secret clearance. ### Preferred Qualifications: - Master’s preferred - Forensic certifications (GCFE, GASF, CFCE, EnCE) beneficial. - Experience with IDA Pro, Ghidra, radare2, or similar tools. - Experience developing plugins or forensic‑tool extensions. - Thrives developing in fast moving, agile environments. - Active DHS EOD suitability