Digital Forensics Analyst – Incident Response Triage

Arete Advisors LLC; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical/Dental benefits

Life/Disability Insurance

401(k)

Job summary

Arete Advisors LLC is seeking a Forensics Analyst I to support senior analysts on active cases, performing triage-level data analysis and deep forensic investigations. The role involves working with Windows, macOS, Linux, and network appliance data, developing timelines, attack maps, and informed threat intelligence.

You will collaborate with SOC, threat intel, and incident response teams to produce detailed updates, align with client needs, and help restore business operations during incidents.

Qualifications

• Associate degree or Bachelor’s degree in a related field with experience in incident response or forensics.
• Certified in Security+, Network+, or SANS GCED/GCFE/GCFA etc. as listed in requirements.

Responsibilities

• Perform digital forensic analysis on Windows, macOS and Linux systems, plus networking appliances.
• Document findings and develop timelines and attack maps.
• Identify data sources and gaps across attack lifecycle.
• Leverage SOC data and EDRs to identify IOCs, TTPs, and adversary actions.
• Deliver clear forensic updates and tailor delivery to audience.
• Track findings and contribute to threat intelligence and case notes.
• Prepare reports detailing intrusion timing, mechanisms, and data exfiltration indicators.

Skills

Digital forensics

Windows/macOS/Linux forensics

Log analysis

Memory forensics

Forensic tooling

Education

Associate degree

Bachelor’s degree in Information Security/Computer Science/Digital Forensics/Cyber Security

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Wireshark

Job description

Arete Advisors LLC is seeking a Forensics Analyst I to support senior analysts on active cases, performing triage-level data analysis and deep forensic investigations. The role involves working with Windows, macOS, Linux, and network appliance data, developing timelines, attack maps, and informed threat intelligence.

You will collaborate with SOC, threat intel, and incident response teams to produce detailed updates, align with client needs, and help restore business operations during incidents.