Forensic Analysis

Forensic Analysis Cybersecurity Jobs

3 jobs found

1mo ago

Cybersecurity Specialist - Mid

Cherokee Federal Arlington, VA

Arlington, VA

1mo ago Closed

$185k - $215k/yr Full time Forensic Analysis Incident Response Information Security

This position is no longer accepting applications (closed Oct 24, 2026).

Job Description

Cherokee Insights is seeking a Cybersecurity Specialist – Mid to support the Behavioral Threat Analysis Center (BTAC) with insider threat analysis and intervention/prevention strategies across network and enterprise security.

Responsibilities

Perform analysis using “best practices” and security methodologies for information systems
Interface with DoW Insider Threat (InT) Management and Analysis Center (DITMAC) management and staff across necessary levels
Support forensic analysis of digital information
Recommend threat-appropriate countermeasures for information systems
Plan and design security solutions and capabilities to help DoW identify, protect, detect, respond, and recover from cyber threats and vulnerabilities
Apply state-of-the-art technical and industry knowledge to advanced, complex cybersecurity projects
Create action plans covering policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats
Perform other job-related duties as assigned

Requirements

10+ years of experience advising security professionals on emerging cyber threats
Working knowledge of classified and unclassified systems, plus Government and Industry standards/requirements
Experience with Risk/Vulnerability/Threat Assessments
Experience in Cloud Security and Security Operations
Experience with Threat Intelligence and Threat Hunting
Experience assisting counterintelligence, insider threat, or law enforcement investigations
CISSP certification
Experience advising non-IT professionals on DoW network standards to enable effective deployment of insider threat tools
Strong coordination skills across a wide range of organizations; ability to promote uncommon technical solutions for mission needs
Understanding of DoD/IC computer systems, protections, and threats
Knowledge of both offensive and defensive cyber capabilities
Knowledge of User Activity Monitoring (UAM) software and processes
Experience configuring Firewall (FW), Intrusion Prevention System (IPS), and Intrusion Detection System (IDS)
Bachelor’s degree in computer science or a related field
Active Top Secret/SCI clearance required
8+ years working within the DoW/IC
Expertise in at least one functional area:
- Penetration Testing
- Forensics
Demonstrated knowledge of state, local, and federal cyber trends, developments, standards, frameworks, and regulations and their impact to operations
Must be a US Citizen
Physical requirements: prolonged periods of sitting and working on a computer; may occasionally require standing or moving about the office for extended periods
Must pass pre-employment qualifications of Cherokee Federal

Compensation

Starting salary range: USD 185,000 to 215,000 per year

Benefits

Up to 6% 401(k) company match
Paid time off
Medical, dental, and vision insurance, plus prescription drug coverage
Basic life and AD&D insurance, with supplemental life options
Short-term and long-term disability coverage
Paid holidays
Employee Assistance Program (EAP)
Flexible Spending Account (FSA) and Health Savings Account (HSA) options
Professional development, training, and certification support
Voluntary benefits including accident, critical illness, and identity theft protection

Job Details

Location: Arlington, VA (hybrid); Remote / Arlington
Reports to: Program Manager
FLSA status: Exempt
Supervisory: No supervisory/management authority

Compliance Notices

Cherokee Federal is a federal contractor subject to VEVRAA and takes affirmative action to employ and advance qualified protected veterans
Cherokee Federal takes affirmative action to employ and advance qualified individuals with disabilities in compliance with Section 503 of the Rehabilitation Act
Reasonable accommodations are available for qualified individuals with disabilities or those with sincerely held religious beliefs; to request an accommodation, contact Human Resources at careers@

View full job page →

1mo ago

Senior Cybersecurity - Digital Forensic Investigator

AT&T Charlotte, NC

Charlotte, NC

1mo ago Closed

$128k - $193k/yr Full time Senior Chain Of Custody Cloud Platforms

This position is no longer accepting applications (closed Oct 21, 2026).

Job Description

This Senior Cybersecurity role focuses on digital forensic investigations to support cybersecurity incidents across AT&T’s enterprise environment. You will collaborate with Incident Response, Threat Intelligence, Malware Analysis, engineering, platform teams, and legal stakeholders to determine what occurred, assess scope and impact, identify attack vectors, and recommend actions to reduce future risk.

Location and Work Details

Location: Charlotte, NC (onsite)
Weekly hours: 40
Time type: Regular
Work location reference: USA:NC:Charlotte / Ibm Dr - Adm:8505 Ibm Dr

Salary Range

USD 128,400 - 192,600 per year

Seniority note (job board range): $128,400.00 - $192,600.00 USD Annual

Key Responsibilities

Conduct digital forensic investigations tied to cybersecurity incidents and suspicious activity.
Collect, preserve, process, and analyze digital evidence while maintaining evidentiary integrity and chain of custody.
Perform forensic analysis across endpoints and memory, as well as logs, cloud, network, and live-response sources.
Identify attack scope, affected assets, root cause, and extent of compromise.
Reconstruct investigative timelines using forensic artifacts, telemetry, and log sources.
Produce detailed technical reports and executive-level summaries that document investigative findings.
Collaborate with Incident Response, Threat Intelligence, Malware Analysis, platform teams, Legal, and other stakeholders during investigations.
Support investigations across on-premises, cloud, and hybrid environments.
Use forensic results to identify security control gaps and recommend improvements.
Support development and improvement of forensic processes, methodologies, automation, and tooling.
Participate in an on-call rotation to support time-sensitive investigations.
Stay current on emerging threats, attack techniques, forensic methodologies, and investigation technologies.
Evaluate and utilize emerging technologies, including artificial intelligence, to improve investigative efficiency and analytical effectiveness while understanding associated risks and limitations.

Required Qualifications

Minimum 3 years of experience in Digital Forensics, Incident Response, Cyber Threat Hunting, Security Operations, or a related cybersecurity discipline.
Experience investigating environments involving Windows, Linux, macOS, cloud platforms, or enterprise network environments.
Experience analyzing forensic artifacts, logs, endpoint telemetry, and other investigative data sources.
Experience documenting findings and preparing technical reports.
Experience or working knowledge in several of the following areas: Digital Forensics; Live Response; Memory Forensics; Endpoint Investigations; Cloud Forensics; Incident Response; Threat Intelligence; Malware Analysis Fundamentals; Log Analysis; Network Security and Protocols; SIEM Platforms; EDR Platforms; Windows, Linux, and macOS; Public Cloud Platforms (AWS and Azure); Scripting and Automation (Python, PowerShell, Bash, or similar); Identity and Access Management; Web Applications and APIs.

Technologies

Windows, Linux, macOS
AWS, Azure
Python, PowerShell, Bash
SIEM Platforms, EDR Platforms
Identity and Access Management
Web Applications and APIs
Generative AI technologies

Education

Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity

Preferred Qualifications

Industry certifications such as GCFA, GCFE, GCIH, GNFA, GCIA, CISSP, EnCE, CFCE, or equivalent.
Experience supporting large-scale enterprise investigations.
Experience with cloud-native security investigations.
Experience supporting investigations involving telecommunications, network infrastructure, or large distributed environments.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

What Candidates Should Expect

Writing detailed investigative reports.
Leading investigations from evidence collection through final reporting.
Working directly with engineers, security teams, and business stakeholders.
Participating in an on-call rotation.
Handling multiple investigations with competing priorities.
Operating with a high degree of independence and accountability.
Supporting investigations that may require rapid response and extended collaboration during significant cybersecurity events.

Job Contribution

Use advanced, interdisciplinary knowledge to resolve difficult and complex issues using broad professional concepts.
Guide others by applying advanced principles and company practices.
Lead moderate sized projects or parts of larger projects with strategic value.
Operate autonomously with frequent senior leadership interaction.

Supervisor

Role Differentiator

Manages complex cybersecurity work.

View full job page →

3mo ago

Associate/Cybersecurity & Incident Response (Forensic Services practice)

Charles River Associates New York, NY

New York, NY

3mo ago Closed

$93k - $105k/yr Full time Cyber Forensics Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 6, 2026).

Job Description

Charles River Associates is seeking an Associate for its Forensic Services practice, supporting cybersecurity and incident response work for CRA clients. The role centers on executing security and privacy investigations, providing expert digital forensic assistance during data security incidents, and turning technical findings into forensic deliverables that support legal and business outcomes.

This onsite position is based in New York, NY and is designed for candidates with hands-on experience in digital forensics, malware analysis, and threat-focused incident work, including evidence handling and control assessments aligned to recognized cybersecurity frameworks.

Role Summary

Execute security and privacy investigations related to data security matters, including ongoing breach detection, threat analysis, incident response support, and malware analysis
Provide digital forensic support for counsel and clients in cases such as data breaches and fraud
Draft forensic reports and affidavits, and testify as an expert in digital forensics and incident response
Perform forensic analysis using standard evidence handling techniques and computer forensics tooling
Produce technical assessments/audits and guidance on the adequacy of cyber security controls mapped to frameworks including NIST CSF 2.0, HIPAA, ISO 27001 and 27002, SOC 2, and NERC-CIP

Key Responsibilities

Acquire data and images from identified hosts, then locate evidence of compromise by analyzing disk, file, memory, and logs
Identify artifact and evidence locations to answer questions such as execution, file access, data theft, anti-forensics, and adversary system usage
Hunt and detect unknown live, dormant, and custom malware across enterprise environments
Create Indicators of Compromise (IOCs) to strengthen incident response and threat intelligence
Track adversary activity second-by-second using in-depth timeline analysis
Determine malware type (for example, rootkits, backdoors, and Trojan horses) and support appropriate defenses and response tactics
Identify lateral movement and pivots within client environments, showing how an adversary moves system to system
Use physical memory analysis tools to assess adversary activities on hosts and pivot points across a network
Examine traffic using common network protocols to identify patterns of activity and actions warranting investigation
Identify and track malware beaconing to command-and-control (C2) using memory forensics, registry analysis, and network connections
Assess the appropriateness and sufficiency of available data for access and analysis, including threat intelligence, logging data, and contextual clues
Recognize relationships among multiple sources and information types to support effective data analysis
Use programming and analysis tools including Python, T-SQL, VBA, Excel, and C# for programming, model building, and database administration
Implement quality control measures and documentation to support reliability of analysis and risk management
Participate in practice-building activities, including recruiting and training

Requirements

Bachelor’s or Master’s degree with a relevant academic focus (Computer Science, Digital Forensics, Information Security and/or Information Systems)
2-4 years of relevant work experience in financial/economic analysis, preferably in a consulting firm; applications accepted from recent graduates and candidates in the workforce
Digital forensics/incident response training and certifications, including SANS GIAC (GCFA, GCFE, GNFA, GIME), IACIS (CFCE or CIFR), Magnet MCFE, X-ways X-Pert or similar
Strong understanding of computer operating systems, software, and hardware
Ability to conduct detailed forensic investigations across computers, networks, mobile devices, and removable media
Experience performing digital forensic analysis with commercial and open source tools, including file system forensics, memory analysis, and network analysis
Experience with static/dynamic malware analysis in a lab environment, and threat hunting in a live environment
Experience with proper evidence handling procedures and chain of custody
Experience drafting technical and investigative reports and communicating technical findings
Experience using automation tools and scripts to expedite analysis
Understanding of incident handling procedures: preparation, identification, containment, eradication, and recovery
Understanding of common adversary attack techniques and how to leverage that knowledge to stop further adversary activity
Experience in collegiate computer security competitions

Technologies

Python, T-SQL, VBA, Excel, C#, SANS GIAC (GCFA, GCFE, GNFA, GIME), IACIS (CFCE or CIFR), Magnet MCFE, X-ways X-Pert
NIST CSF 2.0, ISO 27001, ISO 27002, SOC2, NERC-CIP

Compensation and Location

Location: New York, NY (onsite)
Salary: USD 92,500 - 105,000 per year (good-faith estimate of annual base salary range)
Additional compensation: may be eligible for bonus incentive compensation

Benefits

100 hours of training annually through formal and informal programs
Comprehensive total rewards program and a superior benefits package
Wellness programming supporting physical, mental, emotional, and financial well-being
In-house immigration support for foreign nationals and international business travelers
Medical, dental, and vision insurance
401(k) retirement plan with employer match
Life and disability insurance
Paid time off (vacation, sick leave, holidays)
Paid parental leave
Wellness programs and employee assistance resources
Commuter benefits

How to Apply

Resume: include current address, personal email, and telephone number
Cover letter: describe interest in CRA and how the role matches goals
Transcript: may be unofficial

Work Location Flexibility

CRA supports in-office time to enable career growth, mentorship, and inclusivity
Expect individuals to work in the office at least 3 to 4 days per week, with specific days coordinated with practice or team (may include travel to another CRA office or client meetings)

View full job page →

Forensic Analysis Cybersecurity Jobs

Cybersecurity Specialist - Mid

Senior Cybersecurity - Digital Forensic Investigator

Associate/Cybersecurity & Incident Response (Forensic Services practice)

Get Forensic Analysis Cybersecurity Jobs alerts