812305 Forensics Engineer $235,000.00

Forensic Focus; Herndon (VA); On-site; USD 200,000 - 270,000; Full time

Job summary

B4Corp in Herndon, VA is seeking a senior Forensics Engineer to respond to cybersecurity incidents, perform memory acquisition and disk imaging, and gather forensic data across enterprise and cloud systems.

You will reconstruct attack timelines, identify indicators of compromise, conduct threat hunting, and deliver detailed forensic reports to guide remediation and recovery efforts. The role requires DoD 8570 IAT Level II compliance, advanced communication skills, and relevant certifications.

Qualifications

• Over a decade of cybersecurity experience including host and network forensics.
• Proficiency with incident response tools and forensics suites (Axiom, X-Ways, FTK, EnCase, Volatility, KAPE).
• DoD 8570 IAT Level II compliance required; strong communication skills; SANS or CySA certification preferred.

Responsibilities

• Respond to active cybersecurity incidents and perform memory acquisition and disk imaging.
• Collect forensically sound data across enterprise and cloud environments and reconstruct attack timelines.
• Identify indicators of compromise, conduct threat hunting, and produce detailed forensic reports for remediation.

Skills

Host forensics

Network forensics

Threat hunting

Forensic reporting

Communication skills

Education

DoD 8570 IAT Level II compliance

SANS or CySA certification

Tools

Axiom

X-Ways

FTK

EnCase

Volatility

KAPE

Job description

# 812305 Forensics Engineer $235,000.00*B4Corp***Herndon, VA**Onsite · Senior · Full-time### The RoleThis position responds to active cybersecurity incidents, performing memory acquisition, disk imaging, and forensic data collection across enterprise and cloud systems. The analyst reconstructs attack timelines, identifies indicators of compromise, conducts threat hunting, and produces detailed forensic reports to guide remediation and recovery efforts.### Skills & ExperienceRequires over a decade of cybersecurity experience including host and network forensics, with proficiency in tools such as Axiom, X-Ways, FTK, EnCase, Volatility, and KAPE, plus EDR/XDR platforms. Candidates need DoD 8570 IAT Level II compliance, strong communication skills, and ideally SANS or CySA certification.### Who It SuitsSuited to experienced forensic and incident response professionals holding active TS/SCI clearance with polygraph, comfortable working within government and defense environments, who enjoy deep technical investigation combined with stakeholder communication and mentoring.