Senior DFIR Analyst: Forensics, IR & Cloud Investigations

Forensic Focus; Washington (District of Columbia); On-site; USD 92,000 - 154,000; Full time

Job summary

Forensic Focus in Washington, DC is seeking a Senior Digital Forensics & Incident Response Analyst to lead investigations spanning endpoints, servers, mobile devices, data platforms, and cloud environments. You will acquire evidence, preserve chain-of-custody, analyze artifacts and malware, assess data lineage, and author detailed forensic reports for technical and executive audiences.

The role requires 3+ years in DFIR or cybersecurity engineering, with strong OS file system knowledge and

Qualifications

• 3+ years in digital forensics, incident response, or cybersecurity engineering.
• Strong knowledge of Windows, Linux, and macOS file systems.
• Scripting across Python, Bash, and PowerShell.
• Exposure to cloud platforms (AWS, Azure, GCP, OCI) and related forensics.
• Certifications such as GCFE, GCFA, GREM, or GCIH preferred.

Responsibilities

• Lead digital forensic investigations across endpoints, servers, mobile devices, data platforms and cloud.
• Perform evidence acquisition, preservation, and chain-of-custody management.
• Analyze artifacts and malware, assess data lineage, and document findings for technical and executive audiences.

Skills

Digital forensics

Incident response

Python scripting

Bash scripting

PowerShell scripting

Cloud platforms (AWS/Azure/GCP)

Job description

Forensic Focus in Washington, DC is seeking a Senior Digital Forensics & Incident Response Analyst to lead investigations spanning endpoints, servers, mobile devices, data platforms, and cloud environments. You will acquire evidence, preserve chain-of-custody, analyze artifacts and malware, assess data lineage, and author detailed forensic reports for technical and executive audiences.

The role requires 3+ years in DFIR or cybersecurity engineering, with strong OS file system knowledge and