Cloud Forensics Analyst - BEC Investigations (Onsite)

Forensic Focus; McLean (VA); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Booz Allen Hamilton in McLean, VA is seeking a Cloud Analyst to investigate Business Email Compromise incidents by collecting and analyzing logs from cloud platforms such as Microsoft 365, correlating evidence across sources, building timelines, and presenting findings to clients under time-sensitive conditions.

The role emphasizes independent work on cloud/email investigations and clear communication of technical findings to non-technical stakeholders.

Formación

• Experience with forensic artifacts and PowerShell-based BEC tools.
• Log analysis across Microsoft 365, Exchange, and Google Workspace.
• Familiarity with cloud forensics on AWS, Azure, and GCP; email header analysis is a plus.
• Certifications such as GCFE, GCFA, or CISSP are advantageous.

Responsabilidades

• Investigate Business Email Compromise incidents by collecting and analyzing cloud logs, correlating evidence, and building timelines.
• Present findings to clients verbally and in written reports, often under time-sensitive conditions.

Conocimientos

Cloud forensics

Log analysis

PowerShell

M365 forensics

Email header analysis

Forensic artifacts

Herramientas

EnCase

FTK Axiom

Splunk

Descripción del empleo

Booz Allen Hamilton in McLean, VA is seeking a Cloud Analyst to investigate Business Email Compromise incidents by collecting and analyzing logs from cloud platforms such as Microsoft 365, correlating evidence across sources, building timelines, and presenting findings to clients under time-sensitive conditions.

The role emphasizes independent work on cloud/email investigations and clear communication of technical findings to non-technical stakeholders.