Digital Forensic Examiner, Mid

What you'll do

• Collect and analyze forensic images and triage datasets to identify malware and attacker actions.
• Perform cyber incident response investigations involving forensic, malware, and log analysis.
• Identify Indicators of Compromise (IOCs) and determine if unauthorized data exfiltration occurred.
• Correlate events from multiple sources to create detailed timeline analyses.
• Prepare and present detailed technical reports and oral analysis results to clients and senior leadership.
• Generate necessary paperwork and data entry for new forensic matters.
• Review and guide the activities of more junior employees.

What we're looking for

• High school diploma or GED.
• Experience with full life-cycle case management of large scale and complex investigations.
• Experience with Microsoft Windows, Mac, or Linux systems.
• Experience with scripting or programming languages such as PowerShell or Python.
• Experience in forensic and incident response methodology.
• Ability to correlate events from multiple sources to create a timeline analysis.
• Ability to perform log analysis of multiple types.
• 1+ years of experience with Incident Response or Digital Forensics (preferred).
• Experience with digital forensic tools including EnCase, FTK, Axiom, Splunk, Elk Stack, and open-source applications (preferred).
• Experience with mobile devices (preferred).
• Experience with endpoint detection and response tools such as SentinelOne (preferred).
• Bachelor’s degree in cyber security (preferred); Master’s degree in cyber security (plus).
• CCE, EnCE, CFCE, ACE, CISSP, GCIA, GCFE, GCFA, GREM, or GNFA Certification (preferred).