Digital Forensic Examiner, Mid

What you'll do

• Manage cyber incident response investigations involving forensic, malware, and log analysis.
• Collect and analyze forensic images and triage datasets to identify malware and actions taken.
• Analyze systems to identify Indicators of Compromise (IOCs) and unauthorized data exfiltration.
• Correlate events from multiple sources to create comprehensive timeline analyses.
• Prepare detailed technical reports and provide oral analysis results to clients and senior leadership.
• Generate necessary paperwork and data entry for new forensic matters.
• Review and guide the activities of junior employees.

What we're looking for

• High school diploma or GED.
• Experience with full life-cycle case management of large scale and complex investigations.
• Experience with Microsoft Windows, Mac, or Linux systems and scripting/programming languages like PowerShell or Python.
• Experience in forensic and incident response methodology.
• Ability to correlate events from multiple sources to create a timeline analysis.
• Ability to perform log analysis of multiple types and identify malware or unauthorized activity.
• Ability to write detailed technical reports and communicate effectively with counsel and client leadership.
• 1+ years of experience with Incident Response or Digital Forensics (preferred).
• Experience with tools including EnCase, FTK, Axiom, Splunk, Elk Stack, or open-source applications (preferred).
• Experience with mobile devices (preferred).
• Experience with endpoint detection and response tools such as SentinelOne (preferred).
• Bachelor’s degree in cyber security (preferred); Master’s degree in cyber security (plus).
• CCE, EnCE, CFCE, ACE, CISSP, GCIA, GCFE, GCFA, GREM, or GNFA Certification (preferred).