Senior Digital Forensics & Incident Response Analyst

Forensic Focus; Washington (District of Columbia); On-site; USD 92,000 - 154,000; Full time

Job summary

Forensic Focus in Washington, DC is seeking a Senior Digital Forensics & Incident Response Analyst to lead investigations spanning endpoints, servers, mobile devices, data platforms, and cloud environments. You will acquire evidence, preserve chain-of-custody, analyze artifacts and malware, assess data lineage, and author detailed forensic reports for technical and executive audiences.

The role requires 3+ years in DFIR or cybersecurity engineering, with strong OS file system knowledge and

Qualifications

• 3+ years in digital forensics, incident response, or cybersecurity engineering.
• Strong knowledge of Windows, Linux, and macOS file systems.
• Scripting across Python, Bash, and PowerShell.
• Exposure to cloud platforms (AWS, Azure, GCP, OCI) and related forensics.
• Certifications such as GCFE, GCFA, GREM, or GCIH preferred.

Responsibilities

• Lead digital forensic investigations across endpoints, servers, mobile devices, data platforms and cloud.
• Perform evidence acquisition, preservation, and chain-of-custody management.
• Analyze artifacts and malware, assess data lineage, and document findings for technical and executive audiences.

Skills

Digital forensics

Incident response

Python scripting

Bash scripting

PowerShell scripting

Cloud platforms (AWS/Azure/GCP)

Job description

# Senior Digital Forensics & Incident Response Analyst*TikTok USDS Joint Venture***Washington, DC**Onsite · Senior · Full-time### The RoleThis position leads digital forensic investigations spanning endpoints, servers, mobile devices, data platforms, and cloud environments. Duties include evidence acquisition and preservation, chain-of-custody management, artifact and malware analysis, data lineage assessment, and authoring detailed forensic reports for technical and executive audiences.### Skills & ExperienceRequires 3+ years in digital forensics, incident response, or cybersecurity engineering, with strong knowledge of Windows, Linux, and macOS file systems. Scripting (Python, Bash, PowerShell), cloud platform exposure (AWS, Azure, GCP, OCI), and certifications such as GCFE, GCFA, GREM, or GCIH are preferred.### Who It SuitsIdeal for an experienced DFIR practitioner comfortable handling high-stakes insider threat investigations, evidence handling under legal scrutiny, and cross-functional collaboration with legal, HR, and engineering teams in a regulated corporate environment.Typical advertised salary forDigital Forensics roles in United States:**$92,000–$154,000**(median $122,000 — from221 recent listings analysed by Forensic Focus).Compare Digital Forensics salaries in United States →Certifications mentioned:GCFA · GCFE · GREM · GCIH — find training for these on theDFIR Training Finder.Learn More/Apply