Senior Digital Forensics & Incident Response Analyst

Agile Defense; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

Agile Defense in Washington, DC is seeking a Digital Forensics and Incident Analyst to support the Threat Analysis & Investigations function. The role analyzes digital evidence and investigates computer security incidents to mitigate vulnerabilities in enterprise systems.

Responsibilities span analyzing logs, collecting artifacts, performing malware analysis, maintaining chain of custody, and preparing technical reports for legal and oversight bodies.

Qualifications

• U.S. citizenship and an active Top Secret clearance.
• Bachelor's degree in Cybersecurity, CS, Digital Forensics, Information Systems, or related field.
• 7 years of hands-on digital forensics and incident response (DFIR) experience.
• Required certifications: CFIA and CFIH.
• Experience with EnCase, FTK, Autopsy/The Sleuth Kit, X-Ways, Volatility, Wireshark, YARA, and malware reverse-engineering tools such as Ghidra or IDA Pro.
• Strong command of Windows, Unix, and Linux internals; file systems (NTFS, FAT, EXT); virtualization; and SIEM/event-correlation platforms.
• Knowledge of NICE Framework, NIST guidance, MITRE ATT&CK, chain‑of‑custody standards, and Rules of Evidence.
• Excellent technical writing and the ability to present findings clearly to legal, oversight, and investigative authorities.

Responsibilities

• Analyze log files, evidence, and other information to determine the best methods for identifying the perpetrator(s) of a network intrusion.
• Confirm what is known about an intrusion and discover new information via dynamic analysis.
• Provide technical summaries of findings and deliver written analysis reports to requesting customers.
• Examine recovered data for information relevant to the matter at hand.
• Perform file signature analysis and file system forensic analysis across NTFS, FAT, and EXT.
• Collect and analyze intrusion artifacts to enable mitigation of cyber defense incidents.
• Conduct malware analysis to identify obfuscation techniques and interpret results.
• Determine the extent of threats and recommend countermeasures to mitigate risk.

Skills

Top Secret clearance

Technical writing

Education

Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Systems, or related field

Tools

EnCase

FTK

Autopsy/The Sleuth Kit

X-Ways

Wireshark

YARA

Ghidra/IDA Pro

Job description

Agile Defense in Washington, DC is seeking a Digital Forensics and Incident Analyst to support the Threat Analysis & Investigations function. The role analyzes digital evidence and investigates computer security incidents to mitigate vulnerabilities in enterprise systems.

Responsibilities span analyzing logs, collecting artifacts, performing malware analysis, maintaining chain of custody, and preparing technical reports for legal and oversight bodies.