Senior Analyst, Forensics – Remote

Arete; Texas; Remote; USD 100,000 - 160,000; Full time

Job summary

Forensic Focus in the United States seeks an experienced forensic analyst to lead investigations into ransomware and compromise cases, analyzing OS artifacts, deleted data, and memory across Windows, Linux, and Mac systems. You will drive complex examinations from start to finish and ensure meticulous documentation.

Responsibilities include reviewing network traffic and log data, collaborating with SOC teams, and producing clear investigative reports and timelines for legal counsel and

Qualifications

• Strong disk and memory forensics knowledge.
• Experience with incident response.
• Ability to lead investigations and produce reports.

Responsibilities

• Lead forensic examinations during ransomware and compromise investigations.
• Analyse OS artifacts, deleted data, and memory across Windows, Linux, and Mac.
• Review network traffic and log data; collaborate with SOC teams.
• Produce clear investigative reports and timelines for stakeholders.
• Communicate findings to legal counsel and non-technical stakeholders.

Skills

Leadership

Communication

Incident response

Education

GCFE

GCFA

GCIH

CEH

CHFI

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

Job description

The Role

This position leads forensic examinations during ransomware and compromise investigations, analysing operating system artifacts, deleted data, and memory across Windows, Linux, and Mac systems.

The analyst reviews network and log data, collaborates with SOC teams, and produces clear investigative reports and timelines for stakeholders.

Skills & Experience

Requires strong knowledge of disk and memory forensics, network traffic analysis, and tools such as EnCase, Axiom, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, and Wireshark.

Relevant certifications include GCFE, GCFA, GCIH, CEH, or CHFI, plus several years of incident response or forensic experience.

Who It Suits

Ideal for an experienced forensic analyst comfortable leading investigative teams, handling sensitive data, and communicating technical findings clearly to legal counsel and non-technical stakeholders in a remote working environment.