Digital Forensics & IR Examiner (Mid)

Phase2 Technology; Washington (District of Columbia); On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Digital Forensics and Incident Response Examiner to lead DFIR matters and analyze digital evidence for investigations. The role involves independent work with guidance, and potential mentoring of junior staff.

Candidates should have experience managing large investigations, scripting skills, and strong reporting abilities, with a focus on indicators of compromise and client communications.

Qualifications

• Experience with full life-cycle case management of large scale investigations and direct report management of personnel on cases.
• Experience with scripting or programming such as PowerShell or Python.
• Experience in forensic and incident response methodology.
• Ability to write detailed reports and communicate with counsel and clients.
• Ability to prioritize work and work independently in a collaborative environment.

Responsibilities

• Assist and Lead scoping calls of potential new matters
• Generate necessary paperwork and data entry for new matters
• Manage cyber incident response investigations requiring forensic, malware, and log analysis
• Collect and analyze forensic images and triage datasets to identify malware and actions taken
• Analyze malware and logs from various sources
• Determine whether unauthorized access or data exfiltration occurred
• Identify Indicators of Compromise (IOCs)
• Provide analysis results for senior level review in writing and orally
• Present analysis results to clients
• Prepare detailed technical reports
• Perform other duties as assigned

Skills

Case management

Forensics tools

PowerShell/Python

Leadership

Note-taking/reports

Education

HS diploma or GED

Bachelor’s in cyber security preferred

Tools

EnCase

FTK

Axiom

Splunk

ELK Stack

Job description

Booz Allen Hamilton is seeking a Digital Forensics and Incident Response Examiner to lead DFIR matters and analyze digital evidence for investigations. The role involves independent work with guidance, and potential mentoring of junior staff.

Candidates should have experience managing large investigations, scripting skills, and strong reporting abilities, with a focus on indicators of compromise and client communications.