Digital Forensics Analyst ( Python, Splunk, Arcsight)

The Role

This position involves conducting digital media acquisition and forensic analysis across an enterprise network environment, supporting incident response efforts and a range of case types including insider threat, malware, and digital misuse. Day-to-day work includes evidence recovery, data carving, USB analysis, and developing Python-based automation to improve forensic workflows.

Skills & Experience

Candidates should demonstrate proficiency in digital and mobile forensic tools, Python scripting, and platforms such as Splunk and ArcSight. Familiarity with NIST SP 800-61 incident response guidelines is expected, alongside strong technical report writing. At least one recognised industry certification is required, and a US Secret Security Clearance eligibility is mandatory.

Who It Suits

This role suits an analytically minded forensic professional who works effectively both independently and within a team, and who is comfortable advising senior leadership. Those who thrive in dynamic environments requiring triage, prioritisation, and adaptability, while also enjoying mentoring colleagues and engaging with a broad range of case types, will find this role rewarding.