Digital Forensic Examiner

KBR, Inc.; Washington (District of Columbia); On-site; USD 65,000 - 134,000; Full time

Job summary

An established industry player is seeking a Digital Forensic Examiner to join their dynamic cybersecurity team. This role involves conducting forensic investigations, analyzing compromised systems, and preserving digital evidence to support incident response efforts. You will leverage advanced forensic tools and methodologies to uncover cyber threats and provide actionable intelligence. Join a forward-thinking company that values innovation and offers opportunities for professional growth in the ever-evolving field of cybersecurity. If you are passionate about digital forensics and eager to make a significant impact, this is the role for you.

Qualifications

• 2+ years experience in Cybersecurity or related field.
• 8570 Compliant IAT 2 or 3 certification required.

Responsibilities

• Conduct forensic investigations on compromised systems.
• Analyze network traffic to identify Indicators of Compromise.

Skills

Forensic Investigations

Cybersecurity

Incident Response

Data Analysis

Digital Evidence Preservation

Malware Analysis

Education

High School Diploma or GED

Bachelor's Degree in Cybersecurity

Tools

EnCase

FTK

X-Ways

Volatility

Autopsy

Magnet Axiom

Cellebrite

Job description

Join to apply for the Digital Forensic Examiner role at KBR, Inc.

1 month ago Be among the first 25 applicants

Join to apply for the Digital Forensic Examiner role at KBR, Inc.

Positions Contingent on Contract Award

KBR is actively seeking skilled professionals across a variety of high-impact cybersecurity roles—from Incident Response and Cyber Hunt to Digital Forensics, Insider Threat, Continuous Monitoring, and Red/Blue Team Operations.

Job Description

The Digital Forensic Examiner is responsible for conducting forensic investigations, analyzing compromised systems, and preserving digital evidence to support cybersecurity operations and incident response. This role will leverage forensic methodologies, tools, and investigative techniques to uncover cyber threats, provide actionable intelligence, and support legal and compliance efforts in accordance with DoD and NIWC CSSP policies.

Key Responsibilities

1. Conduct forensic investigations on compromised systems, removable media, and storage devices using government-approved forensic toolsets.
2. Analyze network traffic, system logs, and endpoint data to identify Indicators of Compromise (IoCs) and attack methodologies.
3. Collect and preserve digital evidence in accordance with DoD forensic procedures and NIWC CSSP’s 5I forensic methodology to maintain chain of custody.
4. Utilize forensic tools such as EnCase, FTK, X-Ways, Volatility, Autopsy, Magnet Axiom, or Cellebrite to extract and analyze digital artifacts.
5. Perform memory, disk, and file system analysis to identify malware infections, unauthorized access, and system manipulations.
6. Investigate insider threats, policy violations, and external cyberattacks to support legal and compliance actions.
7. Recover deleted, encrypted, or corrupted data to extract forensic artifacts for intelligence reporting.
8. Generate detailed forensic reports summarizing findings, methodologies used, and recommendations for mitigation.
9. Support litigation and legal teams by preparing forensic reports for eDiscovery, court proceedings, and compliance audits.
10. Assist in incident response activities by providing forensic analysis of cyber incidents, data breaches, and insider threats.
11. Participate in Red/Blue team exercises by conducting forensic analysis of attack scenarios and detection effectiveness.
12. Develop and maintain forensic SOPs, policies, and guidelines in alignment with DoD forensic frameworks.
13. Stay updated on emerging digital forensic techniques, tools, and methodologies to improve forensic investigation capabilities.
14. Provide forensic training and mentorship to junior analysts and cybersecurity teams.

Qualifications

Education / Experience Level I: High School Diploma or GED; Experience: Two (2) years of practical experience demonstrating competency in Cybersecurity or related experience.

Clearance Requirement: Secret / Top Secret SCI

Certification Requirements: 8570 Compliant IAT 2 or 3

Salary range: $65,200 - $97,700. The salary range posted is based on the national average. The offered rate will be based on the selected candidate’s location, knowledge, skills, abilities, and/or experience, contract affordability, and in consideration of internal parity.

Education / Experience Level II: High School Diploma or GED; Experience: Three (3) years of practical experience demonstrating competency in Cybersecurity or related experience.

Clearance Requirement: Secret / Top Secret SCI

Certification Requirements: 8570 Compliant IAT 2 or 3 and meet one of the following: CND Auditor, CND Analyst, CNDSP Manager, CND Incident Responder, CND Infrastructure Support, IASAE I or II (per DoD 8140 manual)

Salary range: $74,000 - $110,900.

Education / Experience Level III: 5+ years with a Bachelor’s degree or 7+ years with HS/GED in Cybersecurity or related experience.

Clearance Requirement: Secret / Top Secret SCI

Certification Requirements: 8570 Compliant IAT 2 or 3 and meet one of the following: CND Auditor, CND Analyst, CNDSP Manager, CND Incident Responder, CND Infrastructure Support, IASAE I or II

Salary range: $89,200 - $133,800.

Additional roles and salary info omitted for brevity.