Senior Cyber Host Forensic Analyst – Onsite, TS/SCI

Forensic Focus; Sterling (VA); On-site; USD 92,000 - 154,000; Full time

Job summary

Forensic Focus in Sterling, VA seeks an experienced Cyber Host Forensic Analyst III for onsite, full-time work. The role leads incident response for government agencies, directs onsite forensic teams during evidence collection, and performs host-based analysis.

Requirements include 8+ years in cyber forensics, proficiency with EnCase, FTK, SIFT, X-Ways, Volatility, Wireshark, Autopsy, Splunk; experience with CrowdStrike EDR; active TS/SCI clearance preferred; strong stakeholder briefing skills.

Qualifications

• 8+ years in cyber forensic investigations and host-based analysis.
• Experience with evidence handling and chain-of-custody processes.
• Strong ability to document findings and coordinate investigations.

Responsibilities

• Lead onsite incident response for government agencies.
• Direct forensic teams during evidence collection and analysis.
• Perform host-based forensic analysis and document methodologies.
• Coordinate investigations and brief stakeholders on progress.

Tools

EnCase

FTK

SIFT

X-Ways

Volatility

Wireshark

Autopsy

Splunk

CrowdStrike

Job description

Forensic Focus in Sterling, VA seeks an experienced Cyber Host Forensic Analyst III for onsite, full-time work. The role leads incident response for government agencies, directs onsite forensic teams during evidence collection, and performs host-based analysis.

Requirements include 8+ years in cyber forensics, proficiency with EnCase, FTK, SIFT, X-Ways, Volatility, Wireshark, Autopsy, Splunk; experience with CrowdStrike EDR; active TS/SCI clearance preferred; strong stakeholder briefing skills.