Senior Incident Response & Forensic Analyst - On-Site CO

The Aerospace Corporation; Colorado Springs (CO); On-site; USD 135,000 - 203,000; Full time

Benefits offered by this job

Health care

Paid holidays and vacation

Relocation assistance

Education assistance

Flexible work schedules

Job summary

The Aerospace Corporation is seeking an experienced Incident Response and Forensic Analyst to lead investigations and drive containment, eradication, and recovery efforts for security incidents. You’ll conduct in-depth forensics, preserve evidence, and develop robust response playbooks within a team of cybersecurity professionals protecting classified and unclassified environments.

The role requires 5–7 years in incident response or digital forensics, strong tool proficiency (EnCase, FTK,

Qualifications

• Bachelor's degree or equivalent in cybersecurity, computer science, digital forensics, information systems or related field.
• 5–7 years of incident response or digital forensics experience.
• Hands-on forensics on Windows, Linux and/or macOS.
• Proficiency with leading forensic tools (EnCase, FTK, X-Ways, Autopsy).
• Strong evidence handling, chain of custody, and reporting skills.

Responsibilities

• Lead incident response activities from detection through containment, eradication, recovery and post-incident analysis.
• Conduct digital forensic investigations on compromised systems, networks and endpoints to determine root cause and scope.
• Perform forensic analysis of disk images, memory dumps, network traffic and log data using industry-standard tools.
• Preserve digital evidence following chain-of-custody procedures for potential legal proceedings.
• Develop and maintain incident response playbooks, procedures and forensic workflows.
• Coordinate with SOC, IT operations, legal, and business stakeholders during active incidents.
• Document timelines, findings and remediation in detailed technical reports.
• Provide expert testimony and briefings to technical teams and management.
• Mentor junior analysts and share expertise across the team.

Skills

Incident response

Digital forensics

Windows

Linux

macOS

EnCase

FTK

X-Ways

Memory forensics

Network forensics

Python scripting

Education

Bachelor's degree in Cybersecurity/CS/Forensics

Tools

EnCase

FTK

X-Ways

Autopsy

Wireshark

tcpdump

NetworkMiner

Job description

The Aerospace Corporation is seeking an experienced Incident Response and Forensic Analyst to lead investigations and drive containment, eradication, and recovery efforts for security incidents. You’ll conduct in-depth forensics, preserve evidence, and develop robust response playbooks within a team of cybersecurity professionals protecting classified and unclassified environments.

The role requires 5–7 years in incident response or digital forensics, strong tool proficiency (EnCase, FTK,