Digital Forensic Examiner

Forensic Focus; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Booz Allen Hamilton in Washington, DC is seeking a Digital Forensic Examiner to manage DFIR cases on-site. You will collect and analyse forensic images, malware samples, and logs to detect intrusions and exfiltration, then document findings for clients and internal reviews.

The ideal candidate has DFIR experience with Windows/Mac/Linux, scripting in PowerShell or Python, and familiarity with EnCase, FTK, Axiom, Splunk or ELK. Possible growth toward senior examiner roles.

Qualifications

• Experience with Windows, Mac or Linux systems.
• Experience with scripting languages such as PowerShell or Python.
• Experience with forensic tools EnCase, FTK, Axiom, Splunk or ELK; certifications are advantageous.

Responsibilities

• Manage digital forensic and incident response cases.
• Collect and analyse forensic images, malware samples and logs.
• Detect unauthorised access or data exfiltration.
• Document findings for internal review and client communication.

Skills

Windows

Mac

Linux

PowerShell

Python

DFIR scripting

Education

GCFE

GCFA

EnCE

CISSP

Tools

EnCase

FTK

Axiom

Splunk

ELK

Job description

# Digital Forensic Examiner*Booz Allen Hamilton***Washington, DC**Onsite · Mid · Full-time### The RoleThis position involves managing digital forensic and incident response cases, collecting and analysing forensic images, malware samples, and logs to detect unauthorised access or data exfiltration, and documenting findings for both internal review and client communication.### Skills & ExperienceCandidates should have experience with Windows, Mac, or Linux systems, scripting languages like PowerShell or Python, and forensic tools such as EnCase, FTK, Axiom, Splunk, or ELK. Certifications like GCFE, GCFA, EnCE, or CISSP are advantageous.### Who It SuitsIdeal for forensic analysts with some prior DFIR experience seeking to develop case management skills, work independently on complex investigations, and progress toward senior forensic examiner responsibilities.