Digital Forensics and Incident Analyst (TS)

The Role

This position supports threat analysis and investigations by examining digital evidence and responding to computer security incidents at Tier 2 and Tier 3 levels within an enterprise SOC environment. The analyst collects, preserves, and examines evidence using documented techniques, maintains chain of custody, and coordinates with partner security operations centres and law enforcement.

Skills & Experience

Candidates must hold an active Top Secret clearance. The role requires familiarity with the NICE Framework, enterprise forensic and live-monitoring tools, case management applications, and investigative procedures supporting legal counsel, oversight bodies, FOIA requests, and professional-responsibility offices.

Who It Suits

This role suits an experienced digital forensics or incident response professional who is comfortable operating in a structured, compliance-driven federal environment, working across multiple stakeholder groups, and applying rigorous, court-admissible investigative practices to complex cyber-intrusion and computer-crime cases.