Digital Forensics & Incident Response Examiner

Phase2 Technology; Washington (District of Columbia); On-site; USD 113,000 - 257,000; Full time

Job summary

Booz Allen Hamilton is seeking a Digital Forensic Examiner to support DFIR investigations, collecting, analyzing, and presenting evidence for computer-based cases. You will handle medium to large investigations, work independently with guidance, and mentor junior staff.

The role requires experience with Windows and Mac/Linux, scripting with PowerShell or Python, and familiarity with forensic methodologies. You will draft detailed reports and communicate findings to counsel and client leadership.

Qualifications

• Experience with full lifecycle case management of large-scale investigations.
• Experience with Windows and Mac/Linux systems and scripting (PowerShell or Python).
• Experience in forensic and incident response methodologies.
• Ability to write reports and communicate with counsel and client leadership.
• Ability to work independently in highly collaborative team environments.
• Ability to correlate events from multiple sources to create a timeline analysis.
• Bachelor's degree required.

Responsibilities

• Assist with scoping calls of potential new matters.
• Generate necessary paperwork and data entry for new matters.
• Manage cyber incident response investigations requiring forensic, malware, and log analysis.
• Collect and analyze forensic images and triage datasets to identify malware and actions taken.
• Collect and analyze malware and logs from various types.
• Determine whether unauthorized accessor data ex-filtration occurred.
• Analyze systems to identify Indicators of Compromise (IOCs).
• Provide analysis results for senior level review, both written and verbal.
• Provide analysis results verbally to clients.
• Prepare detailed technical reports in an understandable manner.
• Perform other duties as assigned.

Skills

Case management

Windows scripting

PowerShell

Python

Forensic methods

Communication

Independent work

Timeline analysis

Log analysis

Detail oriented

Education

Bachelor's degree

Master's degree in Cybersecurity

Cybersecurity certifications (CCE/EnCE/GCIA)

Tools

EnCase

FTK

Axiom

Splunk

ELK Stack

Job description

Booz Allen Hamilton is seeking a Digital Forensic Examiner to support DFIR investigations, collecting, analyzing, and presenting evidence for computer-based cases. You will handle medium to large investigations, work independently with guidance, and mentor junior staff.

The role requires experience with Windows and Mac/Linux, scripting with PowerShell or Python, and familiarity with forensic methodologies. You will draft detailed reports and communicate findings to counsel and client leadership.