Digital Forensics Lab - Senior Digital Forensic Analyst

The Senior Digital Forensic Analyst (SDFA) plays a critical role in the delivery of CACI\’s Digital Forensic Laboratory services. This position demands a high level of technical expertise, analytical thinking, attention to detail, and strong organisational skills.

The SDFA will lead a team of Digital Forensic staff, overseeing the delivery of Digital Forensic Proficiency Testing and/or Investigation services in accordance with service level agreements (SLAs), accreditation standards, and internal quality protocols. The role contributes significantly to the development of laboratory capabilities, continuous improvement initiatives, and the implementation of best practices within an accredited digital forensic environment.

In addition, the SDFA will support the Laboratory Management Team in the delivery of services and Quality Management System (QMS) requirements, and provide management cover during periods of absence or leave.

PRINCIPAL RESPONSIBILITIES

Team Leadership & Operational Oversight

• Lead and manage a team of Digital Forensic Analysts, ensuring effective delivery of forensic services and adherence to Service Level Agreements (SLAs).
• Provide management cover for key roles during periods of absence, ensuring seamless operational continuity.

Technical Delivery & Compliance

• Oversee and conduct digital forensic investigations and proficiency testing activities, ensuring compliance with ISO/IEC 17025, ISO/IEC 17043, the Forensic Science Regulator\’s Code of Practice, and ILAC G19.
• Act as a point of escalation for complex casework and technical challenges, providing expert guidance and resolution.

Quality Management & Accreditation

• Support the implementation and maintenance of the laboratory\’s Quality Management System (QMS), including internal audits, corrective actions, and root cause analysis.
• Provide operational support to the Quality Manager in maintaining accreditation and driving continuous improvement.
• Represent the laboratory in external audits, client meetings, and professional forums.

Technical Infrastructure & Systems Support

• Collaborate with the Technical Manager to ensure forensic tools, techniques, and workflows remain current, validated, and effective.
• Assist the Local IT Administrator with system maintenance, user access control, and secure data handling procedures.

Reporting & Documentation

• Prepare and review forensic reports, ensuring clarity, accuracy, and evidential integrity in line with legal and regulatory expectations.

Training & Development

• Deliver training, mentoring, and performance feedback to team members to support professional development and maintain high standards of practice.

Strategic Development & Innovation

• Contribute to the development of DFL services and capabilities through environmental horizon scanning, research and development into emerging digital forensic methods, tools, risks, and opportunities.
• Attend conferences and training to maintain DFL\’s position as a leader in digital forensic services and to stay abreast of industry developments.

The above list is not exhaustive and other duties commensurate with the grade and general nature of the post may be required. In addition, there may be some variation and/or development of the above duties and responsibilities without changing the general nature of the post.

QUALIFICATIONS AND EXPERIENCE

• Degree in Digital Forensics, Computer Science, Cybersecurity, or a related discipline, or significant experience of working within an accredited digital forensic laboratory or policing environment.
• Minimum of 5 years\’ experience in digital forensic investigations or laboratory operations.
• Proven leadership experience within a forensic or technical environment.
• Strong understanding of forensic principles, tools and legal frameworks.
• Knowledge and experience of common operating systems, file systems, applications and networking technologies.
• Experience of conducting digital forensic processes, using a range of forensic hardware and software tools, applications and techniques.
• Experience in preparing reports and is able to present their findings in a clear and professional manner.
• Knowledge and understanding of established principles and best practices, ISO/IEC 17043, ISO/IEC 17025, Forensic Science Regulator Code of Practice, ILAC G19 and other related guidance documents applicable to Digital Forensics.
• Full current UK / European driving licence (incl. business insurance). Willingness and ability to travel for business purposes.
• Ability and willingness to work flexibly where required to meet departmental and organisational need and demand.
• Ability to multitask and manage several projects at any given time.

• Good communication skills

ROLE DEMANDS

Leadership & Accountability

Ability to lead teams, make informed decisions, and take ownership of service delivery.

Technical Excellence

High-level forensic expertise and commitment to maintaining best-in-class standards.

Quality Focus

Strong understanding of quality systems, accreditation requirements, and continuous improvement.

Adaptability

Capable of stepping into management roles and handling diverse responsibilities during periods of absence.

Collaboration

Works effectively across departments and with external stakeholders.

Resilience

Maintains professionalism and composure in high-pressure or sensitive situations.

Applicants should be aware that this role may involve the viewing of images containing the sexual abuse of children and other images of an extremely offensive and distressing nature. The post holder must be willing to undergo regular Psychological Assessments.

Normal demands associated within an office environment; ability to work on computer for long periods and communicate with individuals by phone, email and face to face.

Requirement for occasional travel to perform digital forensic work at scene / locations outside the Digital Forensics laboratory, involving some overnight stays.

Ability to cope working under pressure and time constraints in this uniquely challenging environment.

Agility and coordination in handling equipment and evidence as required. May be required to lift a variety of computer item and sit/stand for extended periods of time.