Remote Cyber IR & Digital Forensics Pro

Forensic Focus; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Forensic Focus seeks a senior incident responder/forensic analyst to lead investigations on federal IT systems. You will triage incidents, conduct forensic analysis and log reviews to detect persistence and lateral movement, and prepare detailed reports with remediation guidance.

You will also ensure evidence collection and chain-of-custody documentation in high-stakes environments. The role requires extensive experience in cybersecurity within federal standards, strong knowledge of incident

Qualifications

• 8+ years in cybersecurity
• 5+ years in incident response or forensics
• Knowledge of NIST SP 800-61/800-86
• Knowledge of CISA KEV Catalog
• Experience with SIEM/EDR tools (Splunk, CrowdStrike, Defender)
• GCIH certification preferred

Responsibilities

• Manage time-sensitive security incidents across federal IT systems.
• Perform triage, forensic investigation and log analysis to uncover persistence and lateral movement.
• Collect evidence, maintain chain-of-custody, and produce investigation reports and remediation guidance.

Skills

Incident response

Forensics

Cybersecurity

Federal compliance

Education

GCIH certification

Tools

Splunk

CrowdStrike

Microsoft Defender

SIEM/EDR

Job description

Forensic Focus seeks a senior incident responder/forensic analyst to lead investigations on federal IT systems. You will triage incidents, conduct forensic analysis and log reviews to detect persistence and lateral movement, and prepare detailed reports with remediation guidance.

You will also ensure evidence collection and chain-of-custody documentation in high-stakes environments. The role requires extensive experience in cybersecurity within federal standards, strong knowledge of incident