Digital Forensics SME

The Role

This position involves conducting advanced forensic investigations across endpoints, networks, and digital media, identifying root causes of cybersecurity incidents and supporting remediation efforts. Responsibilities include malware analysis, phishing investigation, chain-of-custody evidence handling, IOC development, threat intelligence reporting, and providing technical oversight within SOC operations.

Skills & Experience

Candidates require eight or more years in digital forensics and incident response, alongside a relevant bachelor’s degree. Proficiency with tools such as EnCase, FTK, X-Ways, and Velociraptor is essential, as are static and dynamic malware analysis skills. Experience producing court-quality documentation and holding an active TS/DOE Q clearance are required.

Who It Suits

This role suits a seasoned forensics professional comfortable operating as a technical authority, equally capable of hands-on investigation and collaborative engagement with federal partners and law enforcement. Those who thrive on complex, high-stakes incident response within a structured government environment will find this position well matched to their expertise.