Digital Forensics SME

The Role

This senior position leads advanced digital forensics and incident response work across an enterprise environment, covering forensic imaging, memory analysis, malware reverse engineering, and network intrusion investigations. The analyst also coordinates SOC remediation efforts, supports threat intelligence production, and produces evidentiary-quality documentation for security and law enforcement stakeholders.

Skills & Experience

Candidates require 8+ years of DFIR experience, a relevant degree, and a Top Secret/DOE Q clearance. Core competencies include endpoint, network, and media forensics, volatile data acquisition, static and dynamic malware analysis, mobile device investigations, phishing analysis, chain-of-custody procedures, and proficiency with enterprise DFIR toolsets.

Who It Suits

This role suits a seasoned forensics professional comfortable operating at a subject matter expert level, leading high-severity incident response while also conducting hands-on technical analysis. Those with a background bridging operational SOC work, law enforcement collaboration, and advanced malware analysis will find this environment well matched to their skills.