DFIR Analyst: Digital Forensics & Incident Response

Forensic Focus; Washington (District of Columbia); Hybrid; USD 145,000 - 155,000; Full time

Job summary

Forensic Focus seeks a Digital Forensics and Incident Response Analyst in Washington, DC, offering hybrid work and a full-time position. The role combines hands-on analysis with formal reporting for federal security operations.

You will analyze digital evidence, conduct file system forensics, malware analysis, and disassembly, while maintaining chain of custody and delivering findings. A security clearance is mandatory to apply.

Qualifications

• Six years of general experience and three years in digital forensics.
• Experience with EnCase and Wireshark required.
• Security clearance (Secret or higher) mandatory.

Responsibilities

• Analyse digital evidence and investigate cybersecurity incidents.
• Perform file system forensics, malware analysis, and disassembly.
• Maintain chain of custody and produce technical findings reports.
• Support forensic case management and contingency planning in a federal SOC.

Skills

Digital forensics

Windows/Linux

Python scripting

Networking

SOC operations

Incident response

Tools

EnCase

Wireshark

Job description

Forensic Focus seeks a Digital Forensics and Incident Response Analyst in Washington, DC, offering hybrid work and a full-time position. The role combines hands-on analysis with formal reporting for federal security operations.

You will analyze digital evidence, conduct file system forensics, malware analysis, and disassembly, while maintaining chain of custody and delivering findings. A security clearance is mandatory to apply.