The Digital Forensics Analyst is responsible for collecting, preserving, analyzing, and documenting digital evidence associated with cybersecurity incidents, investigations, legal proceedings, and insider threat cases.
This position conducts forensic examinations of computers, servers, mobile devices, cloud environments, virtual systems, and storage media to determine what occurred during a security incident. The analyst reconstructs timelines, identifies attacker activity, recovers deleted artifacts, and supports root cause investigations.
The Digital Forensics Analyst maintains evidence integrity, follows chain-of-custody procedures, and produces detailed investigative reports suitable for executive, legal, regulatory, and law enforcement review.
The position frequently supports ransomware investigations, insider threat investigations, fraud investigations, intellectual property theft cases, and major breach investigations.
Requirements
- The candidate must have a minimum of Secrete Clearance.
- Candidates must possess advanced knowledge of digital forensics principles, evidence preservation techniques, forensic acquisition methods, operating systems, file systems, memory analysis, and artifact analysis.
- The candidate should have experience using industry-standard forensic tools and conducting investigations across Windows, Linux, macOS, cloud platforms, and mobile devices. Strong documentation skills are essential due to the legal and evidentiary nature of forensic work.
- The position requires patience, precision, objectivity, and the ability to produce defensible findings based on evidence rather than assumptions.
- Typical certifications include GCFA, GCFE, EnCE, CHFI, CFCE, or equivalent forensic certifications.
Skills Required
- Minimum Secret security clearance
- Advanced knowledge of digital forensics principles and evidence preservation techniques
- Knowledge of forensic acquisition methods, operating systems, file systems, memory analysis, and artifact analysis
- Experience using industry-standard forensic tools
- Experience conducting investigations across Windows, Linux, macOS, cloud platforms, and mobile devices
- Strong documentation skills for legal and evidentiary forensic work
- GCFA, GCFE, EnCE, CHFI, CFCE, or equivalent forensic certification
- Patience, precision, objectivity, and ability to produce evidence-based defensible findings
What We Do
Defianx is a cybersecurity and technology services firm serving government agencies and businesses, particularly organizations responsible for mission-critical environments. It provides cybersecurity engineering, security and network operations, incident response, threat operations, cloud security, and technology modernization, alongside federal mission support. Its work connects security, IT, operations, and governance to help clients maintain continuity, improve resilience, make technology investments more valuable, and give leaders clearer insight into risk and business outcomes.
