Digital Forensics Analyst

Breadcrumb Cybersecurity; Fresno (CA); On-site; USD 75,000 - 125,000; Full time

Job summary

Breadcrumb Cybersecurity is seeking a full-time Digital Forensics Analyst to join our Fresno, CA team. This on-site role focuses on the collection, preservation, examination, and analysis of digital evidence from endpoints, servers, cloud platforms, and mobile devices.

Responsibilities include forensic imaging, artifact analysis, timeline development, log review, file system analysis, data recovery, and examining user and system activity.

Responsibilities

• Forensic imaging and artifact analysis on diverse data sources.
• Timeline development and log review for investigations.
• File system analysis and data recovery from endpoints and servers.
• Document investigative findings clearly for technical and non-technical audiences.
• Maintain chain-of-custody and case documentation; support legal matters.

Job description

Breadcrumb Cybersecurity is a national cybersecurity firm founded in 2015, with in-house digital forensic labs and 24/7 security operations. We support organizations across healthcare, defense, manufacturing, education, financial services, and other regulated industries.

Our work includes Digital Forensics, SOC/MDR, cybersecurity assessments, compliance and CMMC advisory, vCISO services, and expert witness support. Breadcrumb is headquartered in California with operations across multiple U.S. states.

Role Description

Compensation: $75,000–$125,000 per year (DOE)

Breadcrumb is seeking a full-time Digital Forensics Analyst to join our Fresno, CA team. This is an on-site position focused on the collection, preservation, examination, and analysis of digital evidence.

The analyst will work with evidence from endpoints, servers, cloud platforms, mobile devices, and other digital sources. Day-to-day responsibilities include forensic imaging, artifact analysis, timeline development, log review, file system analysis, data recovery, and examination of user and system activity.

The role also includes preparing clear investigative reports, maintaining chain-of-custody and case documentation, supporting matters involving legal counsel and litigation, and presenting technically sound findings based on the available evidence.

Analysts are expected to maintain forensic lab systems and tools, follow established evidence-handling procedures, contribute to investigative methodology and process improvement, and stay current with developments in digital forensic techniques and tooling.

Qualifications

• Experience conducting digital forensic examinations, including evidence collection, preservation, imaging, processing, and analysis.
• Strong understanding of Windows forensic artifacts, file systems, user activity, authentication records, and system timelines.
• Experience analyzing endpoints, servers, cloud platforms, mobile devices, or other digital evidence sources.
• Ability to identify, correlate, and interpret forensic artifacts across multiple data sources.
• Strong analytical skills, attention to detail, and ability to develop supportable conclusions from technical evidence.
• Ability to document investigative findings clearly and explain technical conclusions to both technical and non-technical audiences.
• Understanding of evidence handling, chain-of-custody, and defensible forensic documentation.
• Experience with forensic tools such as EnCase, FTK, X-Ways, Cellebrite, Magnet AXIOM, Volatility, or similar platforms is beneficial.
• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field, or equivalent practical experience, is preferred.
• Relevant certifications such as GCFE, GCFA, EnCE, CFCE, CCE, or comparable digital forensic certifications are beneficial.