Cyber Host Forensic Analyst III

The Role

This position supports onsite incident response for government agencies, leading forensic teams during evidence collection, performing host-based forensic analysis, and documenting findings. Duties include coordinating investigations, evaluating malicious code, and briefing stakeholders on methodologies and progress.

Skills & Experience

Requires 8+ years in cyber forensic investigations, forensic imaging, chain-of-custody handling, and attack characterization. Familiarity with tools such as EnCase, FTK, SIFT, X-Ways, Volatility, Wireshark, Autopsy, Splunk, and EDR platforms like CrowdStrike is desired, along with an active TS/SCI clearance.

Who It Suits

Ideal for experienced forensic investigators comfortable mentoring junior analysts, leading onsite teams, and liaising with technical and non-technical stakeholders within sensitive government environments requiring high-level security clearance.