Digital Forensics Analyst – Incident Response Expert

Koniag Government Services; Washington (District of Columbia); Hybrid; USD 95,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

Paid time off

Parental leave

Life insurance

Disability insurance

Tuition reimbursement

Commuter benefits

Job summary

Koniag Operations Services, LLC (KOS) is seeking an experienced Digital Forensics Analyst to support cybersecurity operations for a federal client. The role requires active clearance or ability to obtain one, with primary work at a Washington, DC client site and approved remote locations.

The successful candidate will conduct digital forensics, incident response, e-discovery, malware analysis, and cloud forensics across Windows, Linux, cloud, and enterprise platforms, ensuring chain of custody

Qualifications

• Minimum 5 years of hands-on digital forensics, IR, or related federal IT contracting experience.
• Experience conducting forensics on Windows and Linux systems, memory forensics, log analysis, and timeline reconstruction.
• Experience with cloud forensics across M365, Azure, AWS, and on-prem environments.

Responsibilities

• Lead digital forensic examinations of diverse media and platforms (disks, mobile, servers, VMs, cloud).
• Perform evidence acquisition with write-blocking and hashing to maintain chain of custody.
• Analyze artifacts from logs, registries, browser data, and network traces to support investigations.
• Conduct memory forensics and malware analysis; correlate findings with IOCs and timelines.
• Support e-discovery, litigation holds, and incident response activities.
• Prepare legally defensible forensic reports and maintain case files.

Skills

Analytical thinking

Critical thinking

Education

Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, IT or related field

Tools

Magnet AXIOM

EnCase

FTK

Cellebrite UFED

Volatility

Autopsy

X-Ways Forensics

Python

PowerShell

Bash

Job description

Koniag Operations Services, LLC (KOS) is seeking an experienced Digital Forensics Analyst to support cybersecurity operations for a federal client. The role requires active clearance or ability to obtain one, with primary work at a Washington, DC client site and approved remote locations.

The successful candidate will conduct digital forensics, incident response, e-discovery, malware analysis, and cloud forensics across Windows, Linux, cloud, and enterprise platforms, ensuring chain of custody