Digital Forensic Analyst

The Role

The analyst serves as the programme’s primary forensics expert, conducting comprehensive examinations of digital media including drives, mobile devices, cloud environments, and virtual machines. Day-to-day duties span forensic acquisition, artifact analysis, memory forensics, log correlation, malware analysis, and the production of legally defensible forensic reports for a geographically distributed federal IT enterprise.

Skills & Experience

Deep expertise in forensic methodologies, write-blocking, hashing, and chain of custody procedures is essential. Candidates should be proficient with industry-standard forensic imaging tools, static and dynamic malware analysis, cloud platforms such as AWS and Microsoft 365, and log analysis across endpoint, network, and application sources. An active security clearance or eligibility to obtain one is required.

Who It Suits

This role suits a technically rigorous, detail-oriented forensics professional with substantial experience in federal or government contexts. Those comfortable operating across diverse operating systems, cloud environments, and legal frameworks — including e-discovery and insider threat investigations — will thrive, particularly candidates who can produce thorough, court-ready evidentiary findings.