Entry-Level Digital Forensics Analyst

Arete IR; United States; On-site; USD 85,000 - 110,000; Full time

Job summary

Arete IR seeks a Forensics Analyst I to join the DFIR team, performing triage and in-depth forensic analysis across Windows, macOS, Linux, and networking devices. You will document findings, build timelines and attack maps, and contribute to threat intelligence efforts.

You will collaborate with SOC and Threat Intel teams, delivering concise, audience-appropriate reports and helping restore client operations during incidents.

Qualifications

• Bachelor's or Associate degree with 4+ years in incident response or digital forensics.
• Certifications such as Security+, Network+, SANS GCED/GCFE/GCFA/CEH/CHFI preferred.
• Experience delivering technical findings to non-technical audiences and handling sensitive data.

Responsibilities

• Performs forensic analysis on Windows, macOS, Linux and networking devices.
• Documents findings and develops a master timeline and attack map.
• Identifies data sources and gaps across the attack lifecycle.
• Works with SOC to identify IOCs, TTPs, and indicators of compromise.
• Delivers findings in a clear narrative tailored to audience.

Skills

Forensic analysis

IOCs & TTPs

Timeline construction

Narrative reporting

Education

Bachelor's degree in Information Security/CS/Forensics or related field

Associate's degree + 4+ years IR/forensics

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Wireshark

Job description

Arete IR seeks a Forensics Analyst I to join the DFIR team, performing triage and in-depth forensic analysis across Windows, macOS, Linux, and networking devices. You will document findings, build timelines and attack maps, and contribute to threat intelligence efforts.

You will collaborate with SOC and Threat Intel teams, delivering concise, audience-appropriate reports and helping restore client operations during incidents.