Digital Forensics Analyst

Society of Defense Financial Management; Fresno (CA); Hybrid; USD 75,000 - 125,000; Full time

Job summary

Breadcrumb Cybersecurity seeks a full-time Digital Forensics Analyst for our Fresno, CA team. This on-site role focuses on the collection, preservation, examination, and analysis of digital evidence across endpoints, servers, cloud, and mobile devices.

You will perform imaging, artifact analysis, timelines, log reviews, file-system analysis, data recovery, and activity examination, while maintaining chain-of-custody and preparing detailed reports for legal matters.

Qualifications

• Experience conducting digital forensic examinations from collection to analysis.
• Strong understanding of Windows forensic artifacts, file systems, and timelines.
• Experience analyzing endpoints, servers, cloud platforms, and mobile devices.
• Ability to identify, correlate, and interpret forensic artifacts across data sources.
• Strong analytical skills, attention to detail, and ability to develop conclusions from technical evidence.
• Ability to document investigative findings clearly for technical and non-technical audiences.
• Understanding of evidence handling and chain-of-custody procedures.
• Experience with forensic tools such as EnCase, FTK, X-Ways, Cellebrite, Magnet AXIOM, Volatility or similar.
• Bachelor’s degree in a relevant field or equivalent practical experience.
• Certifications such as GCFE, GCFA, EnCE, CFCE, CCE beneficial.

Responsibilities

• Perform forensic imaging, artifact analysis, timeline development, log review.
• File system analysis and data recovery.
• Examine user and system activity.
• Prepare clear investigative reports and maintain chain-of-custody.
• Support matters involving legal counsel and litigation.
• Present findings based on available evidence.
• Maintain forensic lab systems and tools; follow procedures.
• Contribute to methodology and process improvements.
• Stay current with digital forensic techniques.

Skills

Digital forensics

Windows artifacts

Endpoint analysis

Data recovery

Timeline development

Documentation

Evidence handling

Forensic tools

Analytical skills

Attention to detail

Education

Bachelor's degree in CS/Cybersecurity/Digital Forensics

Tools

EnCase

FTK

X-Ways

Cellebrite

Magnet AXIOM

Volatility

Job description

Company Description

Breadcrumb Cybersecurity is a national cybersecurity firm founded in 2015, with in-house digital forensic labs and 24/7 security operations. We support organizations across healthcare, defense, manufacturing, education, financial services, and other regulated industries.

Our work includes Digital Forensics, SOC/MDR, cybersecurity assessments, compliance and CMMC advisory, vCISO services, and expert witness support. Breadcrumb is headquartered in California with operations across multiple U.S. states.

Role Description

Compensation: $75,000–$125,000 per year (DOE)

Breadcrumb is seeking a full-time Digital Forensics Analyst to join our Fresno, CA team. This is an on-site position focused on the collection, preservation, examination, and analysis of digital evidence.

The analyst will work with evidence from endpoints, servers, cloud platforms, mobile devices, and other digital sources. Day-to-day responsibilities include forensic imaging, artifact analysis, timeline development, log review, file system analysis, data recovery, and examination of user and system activity.

The role also includes preparing clear investigative reports, maintaining chain-of-custody and case documentation, supporting matters involving legal counsel and litigation, and presenting technically sound findings based on the available evidence.

Analysts are expected to maintain forensic lab systems and tools, follow established evidence-handling procedures, contribute to investigative methodology and process improvement, and stay current with developments in digital forensic techniques and tooling.

Qualifications

• Experience conducting digital forensic examinations, including evidence collection, preservation, imaging, processing, and analysis.
• Strong understanding of Windows forensic artifacts, file systems, user activity, authentication records, and system timelines.
• Experience analyzing endpoints, servers, cloud platforms, mobile devices, or other digital evidence sources.
• Ability to identify, correlate, and interpret forensic artifacts across multiple data sources.
• Strong analytical skills, attention to detail, and ability to develop supportable conclusions from technical evidence.
• Ability to document investigative findings clearly and explain technical conclusions to both technical and non-technical audiences.
• Understanding of evidence handling, chain-of-custody, and defensible forensic documentation.
• Experience with forensic tools such as EnCase, FTK, X-Ways, Cellebrite, Magnet AXIOM, Volatility, or similar platforms is beneficial.
• Bachelor’s degree in Computer Science, Cybersecurity, Digital Forensics, or a related field, or equivalent practical experience, is preferred.
• Relevant certifications such as GCFE, GCFA, EnCE, CFCE, CCE, or comparable digital forensic certifications are beneficial.