Junior Digital Forensics Investigator

Arete Event Staffing Firm; United States; On-site; USD 85,000 - 110,000; Full time

Job summary

Arete Incident Response is seeking a Forensics Analyst I to support the Senior Analyst and Tiger Team on active projects. You will perform triage-level and deep-dive forensic analysis across Windows, macOS, and Linux, and coordinate with SOC to identify IOCs and TTPs.

You will document findings, develop master timelines, and present findings to diverse audiences. The role requires 4+ years of incident response or digital forensics, or a relevant degree, with preferred DFIR certifications.

Qualifications

• Associate degree and 4+ years of incident response or digital forensics experience, or a Bachelor's in Information Security, CS, DF, Cyber Security or related field.
• Security+, Network+, SANS GCED/GCFE/GCFA/GCIH/CEH/CHFI certifications preferred.
• Experience analyzing Windows, Linux and Mac artifacts and network logs.
• Ability to deliver findings to non-technical audiences.

Responsibilities

• Performs digital forensic analysis on Windows, macOS, and Linux systems.
• Documents forensic findings and builds master timeline and attack map.
• Leverages SOC data and EDR telemetry to identify IOCs and TTPs.
• Delivers clear forensic updates and reports for counsel and clients.
• Uses MITRE ATT&CK and Cyber Kill Chain frameworks to contextualize actions.
• Maintains case notes, tracker, timeline and attack map for collaboration.
• Drafts investigative updates and conclusions on intrusions and data access.

Skills

Forensic analysis

OS forensics

Log analysis

Non-technical communication

Education

Associate degree

Bachelor's degree in Information Security / Cyber Security / Computer Science

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Volatility

Wireshark

Job description

Arete Incident Response is seeking a Forensics Analyst I to support the Senior Analyst and Tiger Team on active projects. You will perform triage-level and deep-dive forensic analysis across Windows, macOS, and Linux, and coordinate with SOC to identify IOCs and TTPs.

You will document findings, develop master timelines, and present findings to diverse audiences. The role requires 4+ years of incident response or digital forensics, or a relevant degree, with preferred DFIR certifications.