Mid-Level Digital Forensics & Incident Response Examiner

Booz Allen Hamilton; Washington; On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking a Mid-level Digital Forensic Examiner to join our DFIR team. You will collect, analyze, and present digital evidence in support of investigations, and work under the Examiner Lead. You will develop solutions for moderate complexity problems and may guide junior staff.

You will conduct cyber incident response investigations, analyze malware and logs, and prepare detailed reports for counsel and clients, collaborating with senior staff as needed.

Qualifications

• Experience with full life-cycle case management of large scale investigations.
• Experience working with Windows, Mac/Linux systems and scripting languages (PowerShell, Python).
• Experience in forensic and incident response methodology.
• Ability to note details and write reports and communicate with counsel and clients.
• Ability to prioritize work and work independently in a collaborative team environment.
• HS diploma or GED.

Responsibilities

• Generate paperwork and data entry for new matters.
• Work cyber incident response investigations requiring forensic, malware, and log analysis.
• Collect and analyze forensic images and triage datasets to identify malware and actions taken.
• Collect and analyze malware and logs from various sources.
• Determine whether unauthorized data ex-filtration occurred.
• Analyze systems to identify Indicators of Compromise (IOCs).
• Provide analysis results for senior level review, both written and oral.
• Provide analysis results orally to clients.
• Prepare detailed technical reports in an understandable manner.
• Perform other duties as assigned.

Skills

DFIR experience

Windows and Mac/Linux

PowerShell

Python

Forensic methods

Case management

Report writing

Communication skills

Team collaboration

Education

HS diploma

Bachelor’s cybersecurity

Master’s cybersecurity

CCE

EnCE

GCIA

GCFA

CISSP

Tools

EnCase

FTK

Axiom

Splunk

ELK Stack

Job description

Booz Allen Hamilton is seeking a Mid-level Digital Forensic Examiner to join our DFIR team. You will collect, analyze, and present digital evidence in support of investigations, and work under the Examiner Lead. You will develop solutions for moderate complexity problems and may guide junior staff.

You will conduct cyber incident response investigations, analyze malware and logs, and prepare detailed reports for counsel and clients, collaborating with senior staff as needed.