Digital Forensics Analyst (Cyber Analyst III) TS/SCI

Responsibilities

• Analyzes, retrieves, catalogs, and safeguards digital data related to cybercrime investigations.
• Researches and evaluates equipment and software that helps in recovering necessary data.
• Tests new software to ensure functionality.
• Documents artifacts and deliverables according to set standards.
• Conducts complex and high-profile, non-destructive evaluations of computer systems to determine operating and file systems.
• Analyzes computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data.
• Provides detailed examination reports to government agencies.
• Configures, installs, and maintains Network Intrusion Detection systems and Network Forensic Analysis Tools.
• Performs work under minimal supervision.
• Handles complex issues and problems and refers only the most complex issues to higher-level staff.

Qualifications

• Must be a U.S. citizen
• Active TS/SCI Clearance
• Minimum 6 Years of experience with Digital Forensics or Incident Response
• Static Analysis Security Testing (SAST) and Dynamic Analysis Security Testing (DAST) experience
• Hands-on experience in mobile device and computer forensics within operational, military, law enforcement, or intelligence environments
• Proficiency with commercial forensic tools such as Cellebrite UFED/PA/Inseyets, Magnet AXIOM, EnCase, X-Ways, Oxygen, MSAB XRY/XAMN, or FTK
• Thorough understanding of forensically sound imaging, hashing, and verification procedures
• Strong knowledge of Windows, macOS, Linux, Android, and iOS file systems and artifact locations
• Experience with digital exploitation workflows and supporting intelligence processes
• Clear, concise technical writing and briefing skills
• Ability to work independently in fast-paced environments and collaboratively in small teams

Preferred Qualifications

• Prior support to USSOCOM, USASOC, TSOCs, or other Joint SOF organizations
• Experience in deployed or expeditionary exploitation environments
• Background in military, law enforcement, or forensic laboratory operations
• Expertise in password recovery, encryption bypass, chip-off, or other advanced acquisition techniques
• Familiarity with DOMEX and biometric-enabled intelligence
• Scripting experience (Python, PowerShell) for automation and artifact parsing
• Experience in malware analysis, reverse engineering, or network forensics
• Familiarity with intelligence analysis tools and reporting standards