Find Jobs
Find Jobs Near You – Available Work in Your Location
Digital Forensics Analyst
Career Insights for Crime Scene / Forensic Science Technician
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on Virginia data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
A Crime Scene or Forensic Science Technician collects and analyzes physical evidence from crime scenes. Carefully documents a crime scene and catalogues evidence collected. Conducts laboratory analysis of evidence gathered, uses computer databases to identify evidence, and uses findings to reconstruct crime scenes.
$72,269 / year median in Virginia
+7% projected growth
Job Description
Job Requirements Alexandria, VA Public Trust Polygraph not specified Senior Level Career (10+ yrs experience) Salary not specified Join Premium to unlock estimated salaries
Job Description Digital Forensics Analyst Position Summary:
We are seeking a Digital Forensics Analyst to conduct deep-technical digital forensic investigations, artifact analysis, and malware analysis across enterprise, hybrid, and cloud environments. This role acquires digital media, inspects system artifacts, and analyzes cloud logs to reconstruct complex security incidents and trace adversary activity. The ideal candidate brings extensive technical experience investigating Windows, Linux, macOS, and major cloud platforms (M365, Azure, AWS) to deliver clear audit-ready investigative reports. Key Responsibilities
•
Digital Evidence Acquisition & Analysis:
Perform forensically sound acquisitions and in-depth analysis of hard drives, volatile memory, mobile devices, and virtual machines across Windows, Linux, and macOS platforms.
•
Cloud & Hybrid Investigations:
Analyze cloud telemetry, including M365 logs, Azure audit logs, AWS CloudTrail, and IAM activity, to reconstruct cloud-native compromises and unauthorized access.
•
Malware Analysis & Triage:
Conduct static and dynamic analysis of suspicious files, scripts, and binaries to determine functionality, reverse-engineer behavior, and extract indicators of compromise (IOCs).
•
Enterprise Log & Network Forensics:
Correlate disparate data sources—including EDR telemetry, SIEM alerts, and full packet captures (PCAP)—to map adversary movement, timeline events, and establish root causes.
•
Reporting & Evidence Chain of Custody:
Author detailed technical forensic reports, maintain strict chain-of-custody protocols, and present findings to incident response leads, legal counsel, and leadership.
•
Tooling & Capability Enhancements:
Develop automated forensic collection workflows, custom scripts, and maintain evidence collection toolkits to continuously improve investigative capabilities.
Qualifications Required:
•
Experience:
5+ years of hands-on experience conducting or supporting digital forensics and incident investigations across multi-OS environments (Windows, Linux, macOS).
•
Technical Mastery:
o
Digital Media & Mobile:
Deep knowledge of forensic imaging techniques, file system internals (NTFS, APFS, EXT4), and mobile device acquisitions. o
Cloud & Virtualization:
Practical experience auditing M365, Azure, AWS (CloudTrail, IAM, S3 logs), and hypervisor/VM environments. o
Enterprise Data Sources:
Hands-on experience analyzing EDR telemetry, SIEM logs, network traffic, and raw packet captures. o
Malware Analysis:
Experience executing basic to intermediate malware triage and artifact analysis.
Preferred Certifications:
•
SANS GIAC
GCFA, GCFE, GREM, GCIH, GISF, GXPN, GCTI, or GOSI.
•
EnCase:
EnCE, CFSR, or ENCEP.
Job Location:
Hybrid to Alexandria, VA.
Clearance:
Public Trust or higher.
group id:
91130095 Log in to view the job poster Apply now