Senior Digital Forensics & IR Analyst

Arete; Texas; On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical/Dental insurance

Life/Disability Insurance

401(k)

Job summary

Arete is seeking a Forensic Analyst to lead and perform advanced digital forensics investigations across Windows, Linux, and macOS environments. You will analyze OS artifacts, memory, and logs, coordinate with the SOC, and produce clear, audience-tailored write-ups and timelines for legal team and partners.

Applicants should have 4+ years in incident response or digital forensics and hold relevant certifications. A strong communication style and ability to lead teams are preferred.

Qualifications

• Thorough knowledge of Windows and Unix/Linux disk and memory forensics.
• Experience with network security monitoring, traffic analysis, and log analysis.

Responsibilities

• Leads the forensics analysis to support engagements on ransomware/compromise investigations.
• Analyzes OS artifacts and recovers deleted items across Windows, Linux, Mac, and RAM forensics.
• Analyzes network and OS log files including Event logs, audit logs, firewall and VPN logs.
• Works with SOC to leverage EDR data to identify IOCs or TTPs.
• Prepares clear narrative findings and timelines for counsel and partners.
• Uses MITRE ATT&CK and Cyber Kill Chain to contextualize IOCs.
• Drafts incident reports and performs peer reviews of team reports.
• Delivers the Forensic Investigations plan and manages timelines.

Skills

Memory forensics

Disk forensics

NSM analysis

Log analysis

EnCase

FTK

Axiom

X-Ways

Volatility

Wireshark

Report writing

Microsoft Office

Education

Bachelor’s degree in information security, CS, digital forensics, cyber security or related field

4+ years incident response or digital forensics experience or Master’s degree with 3+ years related experience

Tools

EnCase

FTK

Axiom

X-Ways

SIFT

Splunk

Volatility

Wireshark

TCPDump

Open-source forensic tools

Job description

Arete is seeking a Forensic Analyst to lead and perform advanced digital forensics investigations across Windows, Linux, and macOS environments. You will analyze OS artifacts, memory, and logs, coordinate with the SOC, and produce clear, audience-tailored write-ups and timelines for legal team and partners.

Applicants should have 4+ years in incident response or digital forensics and hold relevant certifications. A strong communication style and ability to lead teams are preferred.