Senior Digital Forensics Analyst - Hybrid/Onsite

Crest Security Assurance; Alexandria (VA); Hybrid; USD 120,000 - 165,000; Full time

Job summary

Crest Security Assurance seeks a Senior Digital Forensics Investigator to drive forensics across endpoints, networks, and cloud environments. You will acquire and analyze evidence, perform malware analysis, and support containment and remediation with incident response teams.

The role requires 5+ years of DFIR experience, strong tooling knowledge, and collaboration with IR, SOC, legal, and government stakeholders. Hybrid role in Alexandria, VA.

Qualifications

• Bachelor's degree in Cybersecurity, Digital Forensics, CS, IT, or related field.
• 5+ years of hands-on DFIR experience.
• Experience with imaging, memory analysis, evidence preservation, and chain-of-custody.
• Proficiency investigating Windows, Linux, M365, Azure, and AWS.
• Hands-on with forensic tools, SIEMs, EDR/XDR, and network traffic analysis.
• Strong knowledge of MITRE ATT&CK and investigative reporting.

Responsibilities

• Conduct digital forensic investigations on endpoints, servers, networks, cloud services to identify evidence.
• Acquire, preserve, and analyze digital evidence including disk images, memory captures, logs.
• Use EnCase, FTK, Autopsy, Volatility, Magnet AXIOM to collect and analyze evidence.
• Perform malware analysis including static/dynamic analysis and IOC identification.
• Investigate ransomware, credential theft, insider threats, exfiltration and APT activity.
• Analyze artifacts across Windows, Linux, AD, M365, Azure, AWS to reconstruct timelines.
• Analyze endpoint telemetry, SIEM alerts, EDR/XDR data, network captures using Splunk, Wireshark.
• Support threat hunting and IOC analysis using MITRE ATT&CK.
• Support incident response with evidence, attack-path reconstruction, and remediation guidance.
• Investigate insider threats and data leakage while maintaining confidentiality.
• Maintain chain-of-custody, secure storage, and repeatable procedures per NIST SP 800-86 and federal requirements.
• Develop forensic SOPs, playbooks, and evidence collection methodologies.
• Prepare detailed forensic reports with methods, timelines, findings, impacts and actions.
• Coordinate with IR, SOC, threat intel, legal, privacy, and government stakeholders.

Skills

Digital forensics

Incident investigation

Evidence preservation

MITRE ATT&CK

Network traffic analysis

Windows/Linux

Education

Bachelor's degree

Tools

EnCase

FTK

Autopsy

Volatility

Magnet AXIOM

Splunk

Wireshark

Microsoft Defender

Job description

Crest Security Assurance seeks a Senior Digital Forensics Investigator to drive forensics across endpoints, networks, and cloud environments. You will acquire and analyze evidence, perform malware analysis, and support containment and remediation with incident response teams.

The role requires 5+ years of DFIR experience, strong tooling knowledge, and collaboration with IR, SOC, legal, and government stakeholders. Hybrid role in Alexandria, VA.