Senior Digital Forensics Investigator (Remote)

Arete; Texas; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical/Dental benefits

Life/Disability Insurance

401(k) matching

Job summary

Arete is seeking a skilled Forensic Analyst to drive and coordinate investigations of ransomware and compromises. You will work with a tiger-team to analyze OS, memory, and artifacts across Windows, Linux, and Mac platforms, and review logs to identify threats.

Responsibilities include delivering clear narratives, mapping IOCs to MITRE/CKC, and preparing reports for counsel. Strong communication and leadership experience preferred.

Qualifications

• Bachelor’s degree in a relevant field with 4+ years incident response or digital forensics experience, or a Master’s with 3+ years.
• Two or more certifications from the list: Security+, Network+, SANS GCED, GCIH, GCFE, GCFA, CEH, CHFI, EnCe.

Responsibilities

• Lead forensic analysis to support engagements for ransomware/compromise investigations.
• Collaborate with tiger team analysts for OS, memory, and artifact forensics across Windows, Linux, and Mac.
• Analyze network and log data including Windows Event Logs, VPN and firewall logs.
• Leverage EDR data with SOC to identify IOCs and TTPs for cases.
• Prepare concise forensic findings and narrative timelines for counsel and partners.
• Develop attack maps using MITRE ATT&CK and Cyber Kill Chain for IOC context.
• Draft and peer-review investigative reports and appendices.
• Manage forensic investigations plan, timelines, and delivery; perform other duties as assigned.

Skills

Windows/Linux memory forensics

NSM & log analysis

enterprise security controls

forensic tools suite

presentation to non-technical audience

team leadership

PII/PHI handling

cyber insurance investigations

prioritization & independent work

communication skills

MS Office proficiency

Education

Bachelor’s degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field

4+ years incident response or digital forensics experience (or Master’s +3+)

Tools

EnCase

Axiom

FTK

X-Ways

SIFT

Splunk

Redline

Volatility

Wireshark

TCPDump

Job description

Arete is seeking a skilled Forensic Analyst to drive and coordinate investigations of ransomware and compromises. You will work with a tiger-team to analyze OS, memory, and artifacts across Windows, Linux, and Mac platforms, and review logs to identify threats.

Responsibilities include delivering clear narratives, mapping IOCs to MITRE/CKC, and preparing reports for counsel. Strong communication and leadership experience preferred.