onsite
Senior Digital Forensics Incident Response Analyst
Software Engineer
Senior analyst leading digital forensics and incident response investigations for DoD environments, leveraging memory analysis, malware reverse‑engineering, and Python automation to contain threats and produce actionable intelligence.
About the role
Key Responsibilities
- Lead end‑to‑end digital forensics investigations on Windows, Linux, and cloud platforms, preserving evidence and maintaining chain‑of‑custody.
- Conduct real‑time incident response, containment, and eradication of advanced persistent threats in DoD networks.
- Perform memory and disk analysis, malware reverse‑engineering, and threat‑hunting to identify attacker tactics, techniques, and procedures.
- Develop and maintain automated forensic tooling and scripts using Python to accelerate evidence collection and reporting.
- Collaborate with intelligence, cyber‑operations, and engineering teams to produce comprehensive incident reports and recommendations.
Requirements
- Active DoD TS/SCI clearance with polygraph eligibility.
- 5+ years of hands‑on experience in digital forensics and incident response, preferably in a government or defense setting.
- Proficiency with forensic tools (e.g., EnCase, FTK, Volatility, X-Ways) and malware analysis frameworks.
- Strong scripting skills in Python and familiarity with SIEM platforms and cloud environments (AWS/Azure).
- Excellent analytical, communication, and documentation skills, with the ability to convey technical findings to both technical and non‑technical stakeholders.