Digital Forensics Analyst

The Role

The analyst conducts digital forensic examinations across Windows, Linux, and macOS environments, performs disk duplication and mobile device acquisition, and carries out malware analysis. Day-to-day work also includes cloud-based investigations using M365, Azure, and AWS, and threat hunting with EDR, SIEM, and full packet capture technologies.

Skills & Experience

• A minimum of five years of digital forensics experience is required, covering endpoint, mobile, and cloud platforms.
• Preferred certifications include SANS GIAC credentials such as GCFA, GCFE, GCIH, and GREM, as well as EnCase qualifications.
• Candidates must be eligible for or hold a Public Trust clearance.

Who It Suits

This role suits a seasoned forensics professional comfortable operating across diverse operating systems and cloud environments. It is well suited to someone who enjoys both hands-on evidence examination and investigative threat-hunting work, and who is looking to grow within a government-contractor setting.