Cloud Analyst

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
McLean, VA
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $144k
$87k $207k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $122,275–$166,328.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1744 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 900 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Cloud Analyst

The Cloud Analyst role involves performing expert incident response to support Business Email Compromise investigations. You will collect, analyze, and present digital evidence, creating timelines by correlating events from multiple sources. Daily responsibilities include leading fast-paced cloud investigations from start to finish, organizing case notes, and providing verbal or written updates to clients. You will utilize Microsoft 365 logs, PowerShell scripted toolsets, and forensic artifacts to solve problems of moderate complexity. The role requires proficiency with email header analysis and potentially tools like EnCase, FTK Axiom, Splunk, or the ELK Stack. You must be able to work after standard business hours to manage multiple incidents. This position focuses on the technical forensic analysis of cloud data across platforms like AWS, Azure, and GCP.

What you'll do

  • Collect, analyze, and present digital evidence to support Business Email Compromise (BEC) investigations.
  • Analyze logs from Microsoft 365 and use PowerShell-based toolsets for investigation.
  • Correlate events from multiple sources to create detailed timeline analyses.
  • Lead fast-paced cloud investigations from start to finish, including forensic finding presentations.
  • Write executive summary reports and provide regular verbal or written updates to clients.
  • Organize case notes and manage multiple concurrent incidents independently.
  • Perform incident response duties during off-hours, including evenings, weekends, and holidays.

What we're looking for

  • High school diploma or GED.
  • Experience with the collection and analysis of logs in Microsoft 365.
  • Experience with scripted BEC toolsets written in PowerShell.
  • Knowledge of common forensic artifacts analyzed during an investigation.
  • Ability to correlate events from multiple sources to create a timeline analysis.
  • Ability to lead fast-paced cloud investigations, including creating forensic findings and executive summary reports.
  • Ability to work after standard business hours, including evenings, weekends, and holidays, and take a rotation on call.
  • DFIR or Cybersecurity Certification such as CCE, EnCE, CFCE, CISSP, CISM, GCIA, GCFE, GCFA, GREM, or GNFA (preferred).

More like this

Similar roles

Digital Forensic Examiner

Booz Allen Hamilton

Warrenton, OR +1 44 days ago $112,900–$257,000
Digital Forensics Incident Response Log Analysis Python PowerShell Windows Linux Mac EnCase FTK Axiom Splunk Elk Stack Timeline Analysis IOCs

DFIR Team Lead

Booz Allen Hamilton

McLean, VA 1 day ago $112,800–$257,000
DFIR Python PowerShell FTK EnCase XWF Axiom Windows Linux Mac AWS Azure GCP Firewall Network Traffic IIS Antivirus DNS Timeline Analysis
3+ yrs exp

Digital Forensic Examiner, Mid

Booz Allen Hamilton

Washington, DC 49 days ago
Digital Forensics Incident Response Log Analysis Python PowerShell Windows Linux Mac EnCase FTK Axiom Splunk Elk Stack Timeline Analysis IOCs

Digital Forensic Examiner, Mid

Booz Allen Hamilton

Washington, DC 49 days ago
Digital Forensics Incident Response Log Analysis Python PowerShell Windows Linux Mac EnCase FTK Axiom Splunk Elk Stack Timeline Analysis IOCs

DFIR Team Lead

Booz Allen Hamilton

McLean, VA 98 days ago
DFIR Python PowerShell FTK EnCase XWF Axiom Windows Linux Mac AWS Azure GCP Firewall Network Traffic IIS Antivirus DNS Timeline Analysis
3+ yrs exp

Digital Forensics Analyst

Booz Allen Hamilton

Bethesda, MD 43 days ago
Digital Forensics Incident Response Splunk EnCase FTK X-Ways Cellebrite Autopsy KAPE Velociraptor Linux Windows macOS AWS Azure GCP NIST 800‑53 RMF FedRAMP Malware Analysis Reverse Engineering
2+ yrs exp