Sr. Digital Forensic Analyst

Revolutional; Kearneysville (WV); On-site; USD 130,000 - 170,000; Full time

Job summary

Revolutional is seeking a Sr. Digital Forensic Analyst to lead forensic artifact and malware analysis in a 24x7 SOC supporting a large federal agency. You will oversee analysts, preserve evidentiary value, and deliver reports to enhance response and detection capabilities.

The ideal candidate has a strong background in digital forensics, memory/disk/network forensics, and experience with EnCase, FTK, Volatility, IDA Pro, and Ghidra. US citizenship and Public Trust clearance are required.

Qualifications

• Bachelor’s degree in a relevant field and 10+ years of experience; 3 years can substitute for a degree.
• Expert knowledge of advanced technical principles and concepts in digital forensics and malware analysis.
• Ability to develop solutions to undefined, complex issues impacting multiple areas.
• Demonstrated ingenuity in developing new technical solutions and systems.
• Certifications such as GCFA, GREM, GCFE, or EnCE are preferred.
• Cloud forensics experience in AWS or Azure and scripting skills (Python, PowerShell).

Responsibilities

• Lead forensic and malware analysis for priority incidents.
• Preserve evidentiary value while protecting operational systems.
• Deliver technical reports driving response and detection improvements.
• Mentor forensic analysts.
• Coordinate findings with client SOC teams for monitoring and refinement.

Skills

Digital forensics

Malware analysis

Memory forensics

Disk forensics

Network forensics

Cloud forensics (AWS/Azure)

Python

PowerShell

Leadership / task lead

Evidence handling

Federal contracts experience

GCFA/GCFE/EnCE

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field

Tools

EnCase

FTK

Volatility

IDA Pro

Ghidra

Job description

Location: Onsite – New Carrollton, MD or Kearneysville, WV

Terms: Full-time

Clearance: Public Trust

Travel: 0% (onsite presence at client facilities as directed)

Position Description

We are seeking a Sr. Digital Forensic Analyst to serve as task lead for forensic artifact analysis and malware analysis in a 24x7x365 Security Operations Center (SOC) supporting a large federal agency. This seasoned subject matter expert collects and analyzes forensic artifacts and malicious content to support incident response, technical analysis, and detection improvement, leads the forensic analysts performing this work, and develops solutions to undefined, complex technical problems.

The successful candidate will:

• Lead forensic and malware analysis for priority incidents.
• Preserve evidentiary value while protecting operational systems.
• Deliver technical reports that drive response and detection improvements.
• Mentor forensic analysts.

Responsibilities:

• Serve as task lead for forensic artifact and malware analysis, assigning and reviewing the work of forensic analysts.
• Collect or support collection of forensic images, files, logs, memory captures, and other artifacts relevant to cybersecurity incidents.
• Analyze forensic images, digital media, files, and other artifacts in a manner that protects operational systems and preserves evidentiary value.
• Identify, analyze, reverse engineer, and de-obfuscate malicious or suspicious content related to cybersecurity incidents.
• Conduct malware analysis in an appropriately isolated and controlled environment.
• Document analysis methodology, findings, indicators of compromise, and recommended follow-on actions in technical reports and incident records.
• Coordinate findings with the client SOC team to support monitoring, response, containment, and detection refinement.

Required Skills and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 10+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
• Extensive expertise in the technical domain area, with expert knowledge of and ability to apply advanced technical principles, theories, and concepts.
• Ability to develop solutions to undefined, complex technical issues and problems that impact multiple areas or disciplines.
• Demonstrated ingenuity and creativity in developing new technical solutions and systems to achieve functional objectives.
• Expert experience in digital forensics and malware analysis, including memory, disk, and network forensics.
• Proficiency with forensic and reverse engineering tools (e.g., EnCase, FTK, Volatility, IDA Pro, Ghidra).
• Knowledge of evidence handling and chain-of-custody procedures.
• Experience leading a team or serving as a task lead, including assigning work, reviewing quality, and reporting status to client leadership.
• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Certifications such as GCFA, GREM, GCFE, or EnCE.
• Experience with cloud forensics in AWS or Azure.
• Scripting skills (Python, PowerShell) for analysis automation.

Work Authorization/Clearance:

Must be a U.S. Citizen and able to obtain a Public Trust clearance.