Digital Forensics Senior Analyst at Gulfstream Savannah, GA

Gulfstream; Savannah (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

Gulfstream Aerospace Corporation in Savannah, GA is seeking a Digital Forensics Senior Analyst to conduct forensic investigations and analyze potential digital threats. The role requires a Bachelor's degree in Information Security or a related field and at least 10 years of experience in digital forensics. Candidates must possess incident response skills and expertise in using forensic tools such as Volatility and Cellebrite. This full-time position offers opportunities for on-call incidents and cross-functional teamwork.

Qualifications

• 10+ years of experience in digital forensics.
• Bachelor's degree or equivalent relevant experience.
• Experience with security certifications such as CISSP or CEH.

Responsibilities

• Conduct forensic collections for cybersecurity investigations.
• Analyze network traffic and identify potential threats.
• Lead incident response efforts in case of security breaches.

Skills

Analyzing forensic artifacts

Memory analysis using Volatility

Mobile phone artifact analysis

Password cracking with Hashcat

Forensic acquisition of digital evidence

Familiarity with eDiscovery solutions

Incident response expertise

Education

Bachelor's Degree in Information Security or related field

10 years of related experience

Tools

Volatility

Cellebrite

Magnet AXIOM

FTK

EnCase

Job description

Digital Forensics Senior Analyst – Gulfstream Aerospace Corporation – Savannah, GA.

Position Title: Digital Forensics Senior Analyst
Date: Jun 4, 2025
Location: Savannah, GA, US
Company: Gulfstream Aerospace Corporation

Unique Skills

• Experience analyzing forensic artifacts of enterprise operating systems (ex. Windows, Linux, and MacOS) to discover elements of an intrusion and identify root cause.
• Experience analyzing memory images to identify malicious patterns (using tools like Volatility, Magnet AXIOM, or similar).
• Experience analyzing mobile phone artifacts to support internal investigations (using tools like Cellebrite, Magnet AXIOM, or similar).
• Experience using Hashcat or similar to perform password cracking.
• Experience performing forensic acquisition and examination of Windows, Unix/Linux, and Macintosh-based workstations and servers.
• Conduct analysis of metadata and forensic examinations of digital media from a variety of sources including preservation, acquisition, and analysis of digital evidence with the goal of developing forensically sound evidence.
• Familiarity with forensics tools for Windows and MacOS artifacts analysis as well as iPhone investigations, such as Magnet AXIOM, KAPE (Kroll Artifact Parser and Extractor) or similar.
• Familiarity with eDiscovery aka Legal Hold solutions, such as Exterro, EnCase or similar.

Education and Experience Requirements

Bachelor's Degree or equivalent combination of education and experience to successfully perform the essential functions of the job. Degree in information security, Computer Sciences or Technology related field preferred. 10 years of related experience.

Position Purpose

The Cyber Threat Spec Sr. provides management with a clear picture of threats associated with Business Technology assets in a way that enables them to make well-informed decisions regarding threat management. This is achieved through the effective communication of information collected through various tools, analysis of event and incident reports utilizing both automated and manual methods. The Cyber Threat Spec Sr. must also be capable of supervising and guiding the forensics team to include conducting computer forensic investigations, data recovery, electronic discovery and leading an incident response team.

Job Description

Essential Functions

1. Conducting forensic collections of electronic evidence including information system and network devices for legal, human resources, ethics, and information security.
2. Applying forensic software/hardware applications to analyze digital media, images; determining solutions for recovery of potentially relevant information.
3. Examining and analyzing network traffic, related applications and operating systems to identify potential threats, anomalous or malicious activities to network resources; validating Intrusion Detection System (IDS) alerts.
4. Analyze security data to effectively detect intrusions & attempted intrusions and to initiate and engage the proper resources to mitigate the risk.
5. Providing reports and documents regarding network security incidents details and outcome; leads efforts in troubleshooting problems and recommending vulnerability corrections.
6. Monitoring and improving documentation and reporting processes for cyber incident status and results.
7. Design and implementation of the organizational information security solutions, and continuously enhancing information security approaches and methodologies.
8. Lead incident response team in addressing and managing the aftermath of a security breach or attack. Must be trained and have experience in incident response procedures and practices.
9. Defining process issues and resolutions; facilitating and overseeing computer forensics processes.
10. Conducting security assessments, penetration testing, and ethical hacking.
11. Identifying, analyzing, and reporting threats or hidden events within the enterprise network by using defensive measures and information collected from a variety of sources to protect data, information systems, and networks.
12. Perform analysis and investigations using data from firewalls, IPS, VPN, web filtering, SIEM, IDS, email filtering and forensic tools.
13. Contributes to the development and maintenance of the information security strategy.

Additional Functions

1. Able to be on call for incidents and problems; also able to work different shifts.
2. Able to travel as needed.
3. Proficient in the use of incident response and forensics tools such as FTK, Encase, and Cellebrite.

Other Requirements

1. Must have an understanding of cyber forensics, networking, and information security technologies and be able to demonstrate outside-the-box thinking and continuous learning.
2. Experience with the following operating systems: Windows, OSX, IOS, Linux or UNIX.
3. Security Certification such as CISSP, CEH, ACE, EnCE, CCE, Security+ etc. required.

Credit history check will be conducted for all candidates for this position.

Equal Opportunity Employer

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans.