Digital Forensics Analyst

Job Description

We are seeking a highly skilled Digital Forensics Analyst to join our cybersecurity team in a critical role supporting national security operations. The successful candidate will be responsible for conducting comprehensive forensic investigations of digital devices, analyzing malicious software, and providing expert technical analysis to support ongoing security initiatives.

This position requires an expert-level understanding of digital forensics methodologies, malware analysis techniques, and multiple operating systems. The ideal candidate will have extensive hands-on experience with industry-standard forensic tools and advanced technical skills in reverse engineering and system-level analysis.

Important Note: This position requires a security clearance that involves an extensive background investigation process taking approximately 3 months to complete.

Required Skills

Digital Forensics & Evidence Handling

• Demonstrated experience performing hands-on forensic review of laptops and mobile devices using industry-standard tools including EnCase, FTK, X-Ways, Magnet IEF, or BlackLight
• Proven expertise handling and imaging various evidence types including Solid State Drives (SSD), Hard Disk Drives (HDD), USB drives, volatile memory, and optical media
• Extensive experience with data extraction and analysis from diverse sources including files, system logs, directory structures, unallocated disk space, raw disk images, and custom databases
• Advanced skills in parsing various data types to extract forensically valuable metadata and content from multiple data sources

Operating Systems & Mobile Forensics

• In-depth understanding and demonstrated experience with multiple operating systems including Windows, Linux, iOS, and Android platforms
• Hands-on experience performing forensic review and reverse engineering of modern mobile devices, specifically Google Android and Apple iOS systems
• Proven experience working with virtualization technologies including ESXi, VMware, and VirtualBox environments

Malware Analysis & Reverse Engineering

• Demonstrated experience conducting comprehensive analysis of malicious software using both static and dynamic malware analysis techniques
• Proficiency with debugging and disassembly tools including OllyDbg, WinDbg, IDA Pro, and Binary Ninja
• Advanced understanding of system kernel-level processing with ability to detect and analyze significant kernel events including rootkits, function hooks, system call tables, and critical data structures

Highly Desired Skills

Programming & Scripting

• Demonstrated programming experience with scripting languages including Perl, Python, and Bash for automation and analysis tasks

Organizational Knowledge

• Familiarity with the sponsor's enterprise operations, organizational capabilities, and technical development programs
• Understanding of the sponsor's information cybersecurity policies, procedures, and regulatory requirements

Security Standards & Risk Management

• Experience with comprehensive risk management frameworks and federal security standards including:
  • Committee on National Security Systems Publication (CNSSP) 1253
  • Federal Information Processing Standards (FIPS) 140-2, 199, and 200
  • National Institute of Standards and Technology (NIST) Special Publications 800-37 (Risk Management Framework), 800-39 (Risk Assessment), and 800-53 (Security Controls)