Digital Forensics Analyst

Forensic Focus; Herndon (VA); On-site; USD 90,000 - 150,000; Full time

Job summary

Forensic Focus in Herndon, VA is seeking a Senior Digital Forensics Analyst to respond to active cybersecurity incidents, acquire forensic images, analyze memory, and review host and network telemetry.

You will reconstruct attack timelines, identify indicators of compromise, hunt threats, and produce detailed forensic reports supporting remediation and recovery efforts.

Qualifications

• Experience with widely used forensic suites (Magnet AXIOM, X-Ways, FTK, EnCase, Volatility, KAPE).
• Strong knowledge of host artifacts (MFT, registry, event logs) and memory forensics.
• Experience with EDR/XDR platforms and network telemetry analysis.
• Active DoD 8570 IAT Level II certification is mandatory.

Responsibilities

• Respond to active cybersecurity incidents and acquire forensic images.
• Analyze volatile memory and review host and network telemetry.
• Reconstruct attack timelines and identify indicators of compromise.
• Hunt for persistent threats and produce detailed forensic reports for remediation and recovery.
• Interface with clients during investigations as needed.

Skills

Magnet AXIOM

X-Ways

FTK

EnCase

Volatility

KAPE

EDR/XDR

Memory forensics

MFT & Registry logs

Packet capture

Job description

# Digital Forensics Analyst*MANTECH***Herndon, VA**Onsite · Senior · Full-time### The RoleThis position involves responding to active cybersecurity incidents by acquiring forensic images, analyzing volatile memory, and reviewing host and network telemetry. The analyst reconstructs attack timelines, identifies indicators of compromise, hunts for persistent threats, and produces detailed forensic reports supporting remediation and recovery efforts.### Skills & ExperienceRequires experience with forensic suites such as Magnet AXIOM, X-Ways, FTK, EnCase, Volatility and KAPE, plus EDR/XDR platforms. Candidates need strong knowledge of host artifacts including MFT, registry and event logs, memory forensics, and packet capture analysis. An active DoD 8570 IAT Level II certification is mandatory.### Who It SuitsSuited to experienced cybersecurity professionals with several years in host and network forensics or advanced incident response, comfortable holding government security clearance and working directly with clients during active threat investigations.