Digital Forensics & Incident Response Analyst

Booz Allen Hamilton; Warrenton (OR); On-site; USD 113,000 - 257,000; Full time

Job summary

Booz Allen Hamilton seeks a Digital Forensic Examiner to support digital forensics and incident response investigations. You will collect, analyze, and present evidence, develop solutions to moderate-complex problems, and work with a lead team to guide junior staff.

You will handle case management, analyze malware and logs, produce reports for counsel and clients, and communicate findings clearly in written and verbal form.

Qualifications

• Experience with full lifecycle case management of large-scale and complex investigations.
• Experience working with Microsoft Windows and non-Windows systems such as Mac or Linux and scripting or programming such as PowerShell or Python.
• Experience in forensic and incident response methodology.
• Ability to take detailed notes, write reports, and effectively communicate with counsel, client leadership, and high-level management.
• Ability to prioritize work assignments and work independently in highly collaborative team environments.
• Ability to correlate events from multiple sources to create a timeline analysis.
• Ability to perform log analysis of multiple types.
• Ability to identify misuse, malware, or unauthorized activity through forensic or log analysis.

Responsibilities

• Assist with scoping calls of potential new matters.
• Generate necessary paperwork and data entry for new matters.
• Manage cyber incident response investigations requiring forensic, malware, and log analysis.
• Collect and analyze forensic images and triage datasets to identify the presence of malware and the actions taken.
• Collect and analyze malware and logs from various types.
• Determine whether unauthorized accessor data ex-filtration occurred.
• Analyze systems to identify Indicators of Compromise (IOCs).
• Provide analysis results for senior level review, both written and verbal communications.
• Provide analysis results verbally to clients.
• Prepare detailed technical reports in an understandable manner.
• Perform other duties as assigned.

Skills

Full lifecycle investigations

Windows & macOS/Linux

PowerShell or Python

Forensic & IR methodologies

Technical reporting

Timeline analysis

Log analysis

Education

Bachelor’s degree

Tools

EnCase

FTK

Axiom

Splunk

Elk Stack

Job description

Booz Allen Hamilton seeks a Digital Forensic Examiner to support digital forensics and incident response investigations. You will collect, analyze, and present evidence, develop solutions to moderate-complex problems, and work with a lead team to guide junior staff.

You will handle case management, analyze malware and logs, produce reports for counsel and clients, and communicate findings clearly in written and verbal form.