Digital Forensics Analyst

Anotiva; Fayetteville (NC); On-site; USD 110,000 - 150,000; Full time

Job summary

Anotiva is seeking a Digital Forensics Analyst in Fayetteville, NC to support a mission-critical program with deep expertise in forensics, incident response, and application security testing.

The role requires independence across investigations, reverse engineering, and network analysis in a security-focused environment with an active DoD TS/SCI clearance. Sponsorship is not available.

Qualifications

• Active DoD Top Secret/SCI clearance is required.
• 6+ years of experience in Digital Forensics or Incident Response.
• Experience with Static Analysis Security Testing (SAST).
• Experience with Dynamic Analysis Security Testing (DAST).
• Strong network analysis skills.
• Reverse engineering experience (e.g., IDA Pro, Ghidra, Radare, Binary Ninja).

Responsibilities

• Conduct digital forensic investigations and incident response activities.
• Perform static and dynamic security testing on applications and systems.
• Analyze network traffic and artifacts to identify indicators of compromise.
• Reverse engineer binaries and malware using industry-standard tools.
• Administer and maintain Linux (and Windows where applicable) systems to support forensic workflows.
• Support mobile device forensic extractions as needed.
• Identify opportunities to automate recurring security and forensic workflows and collaborate with cross-functional teams.

Skills

Digital forensics

Incident response

SAST

DAST

Network analysis

Reverse engineering

Tools

IDA Pro

Ghidra

Radare

Binary Ninja

Cellebrite

Magnet Axiom

GrayKey

Job description

Anotiva | Fayetteville, NC | 1 Full-Time Position | Clearance Required Projected Start Date: September 2026

About the Role

Anotiva is seeking a Digital Forensics Analyst to support a mission-critical program requiring deep technical expertise in digital forensics, incident response, and application security testing. This role is suited for a seasoned analyst who can operate independently across forensic investigations, reverse engineering, and network analysis in a high-stakes, security-conscious environment.

Required Qualifications

• Active DoD Top Secret/SCI (TS/SCI) clearance
• 6+ years of experience in Digital Forensics or Incident Response
• Experience with Static Analysis Security Testing (SAST)
• Experience with Dynamic Analysis Security Testing (DAST)
• Strong network analysis skills
• Reverse engineering experience (e.g., IDA Pro, Ghidra, Radare, Binary Ninja)

Desirable Qualifications

• Windows administration experience (highly desirable)
• Experience automating security workflows (highly desirable)
• Mobile forensics extraction experience (e.g., Cellebrite, Magnet Axiom, GrayKey)
• Interactive Application Security Testing (IAST) experience
• Practical experience with LLMs, RAG, CAG, and MCP (Model Context Protocol) usage
• Familiarity with the special operations community

What You'll Do

• Conduct digital forensic investigations and incident response activities in support of mission requirements
• Perform static and dynamic security testing (SAST/DAST) on applications and systems
• Analyze network traffic and artifacts to identify indicators of compromise and support investigations
• Reverse engineer binaries and malware using industry-standard tools
• Administer and maintain Linux (and where applicable, Windows) systems in support of forensic and analytic workflows
• Support mobile device forensic extractions as needed
• Identify opportunities to automate recurring security and forensic workflowsPartner with cross-functional teams to integrate emerging technologies (LLM/RAG/MCP) where applicable

Clearance Requirement

This position requires an active DoD TS/SCI clearance. Candidates must be able to provide proof of clearance status upon request; sponsorship for clearance is not available for this role.

Anotiva is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, or other protected characteristics.