Digital Forensics Analyst

Forensic Focus Limited; Alexandria, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Forensic Focus Limited seeks a seasoned digital forensics analyst to conduct examinations across Windows, Linux, and macOS, perform disk duplication and mobile acquisitions, and analyze malware. You will perform cloud investigations in M365, Azure, and AWS and lead threat hunting with EDR, SIEM, and full packet capture.

This government-contractor role offers hands-on evidence examination and investigative threat-hunting growth across diverse platforms.

Qualifications

• Minimum five years of digital forensics experience across endpoint, mobile, and cloud platforms.
• Preferred certifications include SANS GIAC GCFA, GCFE, GCIH, and GREM, as well as EnCase qualifications.
• Candidates must be eligible for or hold a Public Trust clearance.

Responsibilities

• Conduct digital forensic examinations across Windows, Linux, and macOS environments.
• Perform disk duplication and mobile device acquisition.
• Carry out malware analysis.
• Lead cloud-based investigations using M365, Azure, and AWS.
• Threat hunting with EDR, SIEM, and full packet capture technologies.

Skills

Digital forensics

Endpoint forensics

Mobile forensics

Cloud forensics

Threat hunting

Malware analysis

Education

SANS GIAC GCFA

SANS GIAC GCFE

SANS GIAC GCIH

SANS GIAC GREM

EnCase certifications

Job description

The Role

The analyst conducts digital forensic examinations across Windows, Linux, and macOS environments, performs disk duplication and mobile device acquisition, and carries out malware analysis. Day-to-day work also includes cloud-based investigations using M365, Azure, and AWS, and threat hunting with EDR, SIEM, and full packet capture technologies.

Skills & Experience

• A minimum of five years of digital forensics experience is required, covering endpoint, mobile, and cloud platforms.
• Preferred certifications include SANS GIAC credentials such as GCFA, GCFE, GCIH, and GREM, as well as EnCase qualifications.
• Candidates must be eligible for or hold a Public Trust clearance.

Who It Suits

This role suits a seasoned forensics professional comfortable operating across diverse operating systems and cloud environments. It is well suited to someone who enjoys both hands-on evidence examination and investigative threat-hunting work, and who is looking to grow within a government-contractor setting.