Digital Forensics & Incident Response Specialist

Booz Allen Hamilton; Warrenton, Northern (OR, KY); Hybrid; USD 113,000 - 257,000; Full time

Job summary

Booz Allen Hamilton in Warrenton, OR seeks a Digital Forensic Examiner to support DFIR investigations by collecting and analyzing forensic images, malware, and logs, identifying IOCs, and presenting findings to counsel and clients. The role involves producing detailed technical reports and collaborating with senior staff.

The ideal candidate has Windows and Mac/Linux experience, scripting in PowerShell or Python, and strong communication skills.

Qualifications

• Experience with full lifecycle case management of large-scale and complex investigations.
• Experience working with Windows and Mac/Linux systems and scripting in PowerShell or Python.
• Experience in forensic and incident response methodology.
• Ability to take detailed notes, write reports, and communicate with counsel and senior management.
• Ability to prioritize work and operate both independently and in teams.
• Ability to correlate events to create timeline analyses.
• Ability to perform log analysis across multiple data types.
• Ability to identify malware or misuse through forensic or log analysis.
• Bachelor’s degree in Cybersecurity or related field.

Responsibilities

• Assist with scoping calls of potential new matters.
• Generate necessary paperwork and data entry for new matters.
• Manage cyber incident response investigations requiring forensic, malware, and log analysis.
• Collect and analyze forensic images and triage datasets for malware actions.
• Collect and analyze malware and logs from various types.
• Determine whether unauthorized data exfiltration occurred.
• Analyze systems to identify Indicators of Compromise (IOCs).
• Provide analysis results for senior level review, both in writing and verbally.
• Provide analysis results verbally to clients.
• Prepare detailed technical reports in an understandable manner.
• Perform other duties as assigned.

Skills

Full lifecycle case management

Windows and Mac/Linux systems

PowerShell Python scripting

Forensic and incident response method

Notes, reports, and client comms

Independent work in team environments

Timeline analysis across sources

Log analysis across types

Education

Bachelor's degree in Cybersecurity or related field

Master's degree in Cybersecurity (preferred)

Tools

EnCase

FTK

Axiom

Splunk

Elk Stack

SentinelOne

Job description

Booz Allen Hamilton in Warrenton, OR seeks a Digital Forensic Examiner to support DFIR investigations by collecting and analyzing forensic images, malware, and logs, identifying IOCs, and presenting findings to counsel and clients. The role involves producing detailed technical reports and collaborating with senior staff.

The ideal candidate has Windows and Mac/Linux experience, scripting in PowerShell or Python, and strong communication skills.