Lead Forensic & Malware Analysis (Hybrid) – Public Trust

cFocus Software Incorporated; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Job summary

cFocus Software Incorporated seeks a Forensic and Malware Lead to join AOUSC on a Hybrid basis with onsite in Washington, DC. The role requires an Active Public Trust clearance and deep experience in digital forensics and malware analysis across Windows, Linux, macOS, cloud, and enterprise environments.

You will coordinate with incident response teams, develop forensic and malware reports, and ensure evidence handling aligns with chain-of-custody procedures and Judiciary SOPs.

Qualifications

• Active Public Trust clearance is required.
• B.S. in Computer Science, Information Technology, or related field.
• Five+ years in IR within a large SOC (over 5,000 endpoints) with at least 3 years in digital forensics.
• Three+ years of disk, memory and registry analysis using EnCase, FTK, X-Ways, Volatility.
• Understanding of file systems and OS artifacts (SRUM, Shellbags, Prefetch).
• Familiarity with federal evidence guidelines and chain of custody requirements.
• Active GCFA, GREM, CFCE, or OSED certification.

Responsibilities

• Lead digital forensics and malware analysis activities for AOUSC SOD operations.
• Provide advanced forensics expertise for Windows, Linux, macOS, cloud, and enterprise environments.
• Perform static and dynamic malware analysis to identify IOCs, TTPs, and root cause.
• Analyze forensic artifacts, memory images, endpoint telemetry, SIEM data, and timelines.

Skills

Public Trust clearance

Digital forensics

Malware analysis

Windows forensics

IR/forensics leadership

Education

Bachelor's degree in Computer Science / Information Technology or related field

Tools

EnCase

FTK

X-Ways

Volatility

Splunk

Microsoft Sentinel

EDR tools

Job description

cFocus Software Incorporated seeks a Forensic and Malware Lead to join AOUSC on a Hybrid basis with onsite in Washington, DC. The role requires an Active Public Trust clearance and deep experience in digital forensics and malware analysis across Windows, Linux, macOS, cloud, and enterprise environments.

You will coordinate with incident response teams, develop forensic and malware reports, and ensure evidence handling aligns with chain-of-custody procedures and Judiciary SOPs.