Forensics Specialist

Forensic Focus; Herndon (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

WarCollar Industries, LLC in Herndon, VA is seeking a Senior Forensics Specialist to lead investigations into cybersecurity incidents across enterprise and cloud systems. The role focuses on acquiring digital evidence, analyzing artifacts, and reconstructing attack timelines to guide containment.

You will coordinate remediation with stakeholders, translate complex findings for both technical teams and leadership, and contribute to national security projects.

Qualifications

• 10+ years of cybersecurity experience including host and network forensics.
• Tier 3 incident response experience required.
• DoD 8570 IAT Level II certification.

Responsibilities

• Acquire and preserve digital evidence from incidents.
• Analyze endpoint and network artifacts to reconstruct chains of attack.
• Coordinate containment and remediation with stakeholders.
• Explain findings clearly to technical and leadership teams.

Skills

Digital forensics

Incident response

Forensic analysis

Evidence handling

Communication with leadership

Education

DoD 8570 IAT Level II certification

Tools

Magnet AXIOM

X-Ways

FTK

EnCase

Volatility

KAPE

Job description

# Forensics Specialist*WarCollar Industries, LLC***Herndon, VA**Onsite · Senior · Full-time### The RoleThis position involves leading forensic investigations into cybersecurity incidents across enterprise and cloud systems. Responsibilities include acquiring and preserving digital evidence, analyzing endpoint and network artifacts, reconstructing attack timelines, and coordinating containment and remediation with stakeholders.### Skills & ExperienceCandidates need over a decade of cybersecurity experience, including host and network forensics and Tier 3 incident response. Proficiency with tools like Magnet AXIOM, X-Ways, FTK, EnCase, Volatility, and KAPE is required, along with DoD 8570 IAT Level II certification.### Who It SuitsIdeal for experienced forensic investigators comfortable supporting government and national security clients, who can perform deep technical analysis while communicating findings clearly to both technical teams and leadership.