digital forensic analyst

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Digital Forensics Engineer Job Description</b></h1><b>
Position Title: </b>Digital Forensics Engineer<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Digital Forensics Engineer supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by providing advanced digital forensics, incident response, cyber investigation, evidence preservation, malware analysis, and e-discovery support services.<br>
The Digital Forensics Engineer conducts complex forensic examinations involving workstations, servers, cloud platforms, mobile devices, email systems, network traffic, and enterprise applications in support of cybersecurity investigations, incident response activities, insider threat investigations, legal support actions, and enterprise cyber defense operations. The role supports 24x7x365 Security Operations Center (SOC) functions and coordinates closely with federal stakeholders, incident responders, threat hunters, legal teams, privacy personnel, and law enforcement partners.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform advanced digital forensic analysis and investigations in support of SBA ECS cybersecurity operations requirements.</li><li>
Support Task Areas 3.5.3 and 3.5.3.6 by conducting forensic examinations related to cybersecurity incidents, insider threats, malware infections, unauthorized access, and data exfiltration.</li><li>
Collect, preserve, analyze, and document digital evidence in accordance with federal forensic standards and chain-of-custody procedures.</li><li>
Perform host-based, network-based, cloud-based, and mobile device forensic investigations across enterprise environments.</li><li>
Conduct forensic acquisition and analysis of Windows, Linux, macOS, cloud, virtualized, and hybrid systems.</li><li>
Analyze endpoint telemetry, security logs, network packet captures (PCAP), SIEM data, and forensic artifacts to identify indicators of compromise (IOCs) and adversary activity.</li><li>
Support incident response activities by reconstructing attack timelines, determining root cause, identifying attack vectors, and assessing operational impact.</li><li>
Perform malware analysis and reverse engineering support activities to identify malicious behaviors, persistence mechanisms, and command-and-control communications.</li><li>
Support e-discovery operations including collection, indexing, preservation, processing, and review of electronically stored information (ESI).</li><li>
Conduct forensic examinations supporting legal, Inspector General (IG), Human Resources (HR), insider threat, privacy, and law enforcement investigations.</li><li>
Utilize forensic and cyber defense tools including EnCase, FTK, Velociraptor, Wireshark, Volatility, Splunk, Microsoft Defender, Sentinel, and endpoint detection and response (EDR) platforms.</li><li>
Perform memory analysis, disk analysis, registry analysis, browser artifact analysis, and log correlation activities.</li><li>
Develop forensic reports, technical findings, evidentiary documentation, executive briefings, and remediation recommendations.</li><li>
Maintain detailed forensic documentation, evidence handling procedures, and chain-of-custody records.</li><li>
Support cybersecurity monitoring, detection, containment, eradication, and recovery activities within the SOC environment.</li><li>
Coordinate with SOC analysts, incident responders, threat hunters, engineers, and federal stakeholders during cyber investigations and breach response activities.</li><li>
Support continuous improvement of forensic methodologies, investigative procedures, and cybersecurity operational capabilities.</li><li>
Assist with the development and maintenance of digital forensic playbooks, standard operating procedures (SOPs), and incident handling guidance aligned with NIST SP 800-61 and NIST SP 800-86.</li><li>
Research emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and evolving forensic technologies.</li><li>
Support federal cybersecurity compliance requirements, reporting activities, and operational readiness initiatives.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Digital Forensics, Information Assurance, Information Technology, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 8 years of experience supporting digital forensics, cyber investigations, incident response, cybersecurity operations, or Security Operations Center (SOC) environments.</li><li>
Hands-on experience conducting enterprise-level forensic investigations and evidence analysis.</li><li>
Experience with forensic acquisition and analysis tools including EnCase, FTK, X-Ways, Velociraptor, Volatility, or equivalent technologies.</li><li>
Experience analyzing Windows, Linux, cloud, mobile, and network forensic artifacts.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting legal hold, e-discovery, insider threat, and regulatory investigation activities.</li><li>
Experience with SIEM, EDR, IDS/IPS, packet analysis, and security monitoring technologies.</li><li>
Strong understanding of NIST cybersecurity standards including NIST SP 800-61 and NIST SP 800-86.</li><li>
Ability to prepare technical forensic reports and present investigative findings to technical and executive stakeholders.</li><li>
Strong analytical, investigative, communication, and technical documentation skills.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
EnCase Certified Examiner (EnCE)</li><li>
Certified Computer Examiner (CCE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA CySA+</li><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul><p>
</p><p>6HY6JyRiD8</p></div>

SBA - Digital Forensics Engineer

The Amatriot Group

<div><div>Cyber Threat Analyst<br>
5 Year DoJ Contract | Chantilly, VA<br>
Amatriot is seeking a Cyber Threat Analyst to support a Cyber Technical Analysis Unit in<br>
analyzing cyber intrusion activity, digital communications, and host/network forensic artifacts in<br>
support of DoJ mission operations. This role is focused on cyber threat analysis, intrusion<br>
investigation, host-based forensic analysis, network traffic analysis, and attribution support<br>
within a highly sensitive operational environment. The ideal candidate will possess experience<br>
analyzing Splunk data, conducting host and network forensic analysis, and utilizing industrystandard<br>
forensic and cyber analysis tools to identify malicious activity, recover artifacts, and<br>
support investigative operations.<br>
Responsibilities<br>
<ul><li>Process, evaluate, and analyze digital network communications and cyber threat data to</li></ul>
identify malicious activity and support investigative operations.<br>
<ul><li>Conduct cyber intrusion investigations and end-to-end kill chain analysis across host and</li></ul>
network environments.<br>
<ul><li>Perform host-based forensic analysis leveraging Splunk and standard forensic toolsets</li></ul>
to identify indicators of compromise, attacker activity, persistence mechanisms, and<br>
unauthorized access.<br>
<ul><li>Analyze packet capture (PCAP) and NetFlow data to identify malicious communications,</li></ul>
software usage, command execution, credential activity, and network-based indicators of<br>
compromise.<br>
<ul><li>Correlate digital artifacts including IP addresses, URLs, malware indicators, system logs,</li></ul>
and user activity across multiple data sources to support attribution and investigative<br>
lead generation.<br>
<ul><li>Analyze encrypted and plaintext credentials, registry artifacts, rootkit activity, commandline</li></ul>
execution, and other system-level forensic evidence.<br>
<ul><li>Draft detailed technical reports and analytical findings based on cyber investigations</li></ul>
while participating in internal review and quality assurance processes.<br>
<ul><li>Support development and refinement of cyber analysis processes, CONOPS, SOPs,</li></ul>
and investigative methodologies.<br>
<ul><li>Conduct open-source and intelligence community research to maintain awareness of</li></ul>
emerging cyber threats, malware trends, and adversary tactics, techniques, and<br>
procedures (TTPs).<br>
<ul><li>Collaborate with internal teams and mission partners across the intelligence community</li></ul>
to support tactical and strategic cyber operations.<br>
<ul><li>Provide operational updates and analytical findings to leadership and investigative</li></ul>
stakeholders.<br>
Required Skills &amp; Experience<br>
<ul><li>Active Top Secret Clearance required, with willingness and ability to obtain a Counter</li></ul>
Intelligence (CI) Polygraph.<br>
<ul><li>BS/BA degree with 5+ years of relevant experience or 9 years with no degree. Advanced</li></ul>
certifications, specialized training, or equivalent hands-on experience may be considered<br>
in lieu of years of experience<br>
<ul><li>Experience performing host-based forensic analysis utilizing Splunk.</li><li>Experience analyzing network traffic, packet capture (PCAP), and NetFlow data.</li><li>Hands-on experience with industry-standard forensic tools such as:</li></ul>
o Splunk<br>
o EnCase<br>
o Magnet AXIOM<br>
o X-Ways Forensics<br>
<ul><li>Understanding of cyber intrusion methodologies, attacker kill chains, malware behavior,</li></ul>
and forensic artifact analysis.<br>
<ul><li>Experience correlating threat indicators and investigative data to support attribution and</li></ul>
operational analysis.</div></div>

Cyber Threat Analyst

<div>
 5 Year DoJ Contract | Chantilly, VA
 <br/>
 <br/>
 Amatriot is seeking a Cyber Threat Analyst to support a Cyber Technical Analysis Unit in
 <br/>
 <br/>
 analyzing cyber intrusion activity, digital communications, and host/network forensic artifacts in
 <br/>
 <br/>
 support of DoJ mission operations. This role is focused on cyber threat analysis, intrusion
 <br/>
 <br/>
 investigation, host-based forensic analysis, network traffic analysis, and attribution support
 <br/>
 <br/>
 within a highly sensitive operational environment. The ideal candidate will possess experience
 <br/>
 <br/>
 analyzing Splunk data, conducting host and network forensic analysis, and utilizing industrystandard
 <br/>
 <br/>
 forensic and cyber analysis tools to identify malicious activity, recover artifacts, and
 <br/>
 <br/>
 support investigative operations.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Process, evaluate, and analyze digital network communications and cyber threat data to
   <br/>
   <br/>
  </li>
 </ul>
 identify malicious activity and support investigative operations.
 <br/>
 <br/>
 <ul>
  <li>
   Conduct cyber intrusion investigations and end-to-end kill chain analysis across host and
   <br/>
   <br/>
  </li>
 </ul>
 network environments.
 <br/>
 <br/>
 <ul>
  <li>
   Perform host-based forensic analysis leveraging Splunk and standard forensic toolsets
   <br/>
   <br/>
  </li>
 </ul>
 to identify indicators of compromise, attacker activity, persistence mechanisms, and
 <br/>
 <br/>
 unauthorized access.
 <br/>
 <br/>
 <ul>
  <li>
   Analyze packet capture (PCAP) and NetFlow data to identify malicious communications,
   <br/>
   <br/>
  </li>
 </ul>
 software usage, command execution, credential activity, and network-based indicators of
 <br/>
 <br/>
 compromise.
 <br/>
 <br/>
 <ul>
  <li>
   Correlate digital artifacts including IP addresses, URLs, malware indicators, system logs,
   <br/>
   <br/>
  </li>
 </ul>
 and user activity across multiple data sources to support attribution and investigative
 <br/>
 <br/>
 lead generation.
 <br/>
 <br/>
 <ul>
  <li>
   Analyze encrypted and plaintext credentials, registry artifacts, rootkit activity, commandline
   <br/>
   <br/>
  </li>
 </ul>
 execution, and other system-level forensic evidence.
 <br/>
 <br/>
 <ul>
  <li>
   Draft detailed technical reports and analytical findings based on cyber investigations
   <br/>
   <br/>
  </li>
 </ul>
 while participating in internal review and quality assurance processes.
 <br/>
 <br/>
 <ul>
  <li>
   Support development and refinement of cyber analysis processes, CONOPS, SOPs,
   <br/>
   <br/>
  </li>
 </ul>
 and investigative methodologies.
 <br/>
 <br/>
 <ul>
  <li>
   Conduct open-source and intelligence community research to maintain awareness of
   <br/>
   <br/>
  </li>
 </ul>
 emerging cyber threats, malware trends, and adversary tactics, techniques, and
 <br/>
 <br/>
 procedures (TTPs).
 <br/>
 <br/>
 <ul>
  <li>
   Collaborate with internal teams and mission partners across the intelligence community
   <br/>
   <br/>
  </li>
 </ul>
 to support tactical and strategic cyber operations.
 <br/>
 <br/>
 <ul>
  <li>
   Provide operational updates and analytical findings to leadership and investigative
   <br/>
   <br/>
  </li>
 </ul>
 stakeholders.
 <br/>
 <br/>
 <strong>
  Required Skills &amp; Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Active Top Secret Clearance required, with willingness and ability to obtain a Counter
   <br/>
   <br/>
  </li>
 </ul>
 Intelligence (CI) Polygraph.
 <br/>
 <br/>
 <ul>
  <li>
   BS/BA degree with 5+ years of relevant experience or 9 years with no degree. Advanced
   <br/>
   <br/>
  </li>
 </ul>
 certifications, specialized training, or equivalent hands-on experience may be considered
 <br/>
 <br/>
 in lieu of years of experience
 <br/>
 <br/>
 <ul>
  <li>
   Experience performing host-based forensic analysis utilizing Splunk.
  </li>
  <li>
   Experience analyzing network traffic, packet capture (PCAP), and NetFlow data.
  </li>
  <li>
   Hands-on experience with industry-standard forensic tools such as:
  </li>
  <li>
   Splunk
  </li>
  <li>
   EnCase
  </li>
  <li>
   Magnet AXIOM
  </li>
  <li>
   X-Ways Forensics
  </li>
  <li>
   Understanding of cyber intrusion methodologies, attacker kill chains, malware behavior,
   <br/>
   <br/>
  </li>
 </ul>
 and forensic artifact analysis.
 <br/>
 <br/>
 <ul>
  <li>
   Experience correlating threat indicators and investigative data to support attribution and
   <br/>
   <br/>
  </li>
 </ul>
 operational analysis.
</div>


State of West Virginia

<div><div><div><h2 class="jobSectionHeader"><b>Nature of Work</b></h2></div>
<div><p>Under limited supervision, this position performs advanced accounting and auditing functions for the Office of Accounting. This role serves as a primary liaison for vendor relations, resolving complex payment disputes through account reconciliation and financial research. The incumbent is responsible for identifying procurement and posting errors within wvOASIS, preparing necessary adjusting entries as well as providing high-level analytical support. Furthermore, this position plays a role in the implementation of the wvOASIS travel system by assisting Accounts Payable staff with the development of policies, interpretation of procedures , and generating critical financial reports.</p></div><br>
<p></p>
<div><h2 class="jobSectionHeader"><b>Minimum Qualifications</b></h2></div>
<p></p><div><div><b>Training: </b>Bachelor's degree from an accredited college or university with at least 24 semester hours in accounting.</div><div><b>
AND</b></div><div><b>
Experience: </b>Four (4) years of full-time or equivalent part-time paid experience in professional accounting, statutory accounting, auditing work, forensic accounting, public accounting, investigative and/or forensic auditing, certified fraud examining, or other directly related accounting.</div><div><b>
OR</b></div><div><b>
Substitutions: </b>(1) Master's degree in accounting may substitute for two (2) years of the required experience. (2) Certification or registration as a Public Accountant in West Virginia may be substituted for the training and two (2) years of the required experience.</div><div></div><div><br>
Preference will be given to applicants holding a Certified Fraud Examiner (CFE), Certified Forensic Accountant (CFA), Certified Valuation Analyst (CVA), or applicants who have completed a graduate certificate program in forensic accounting and fraud investigation.</div></div><br>
<p></p>
<div><h2 class="jobSectionHeader"><b>Other Information</b></h2></div><br>
<p></p><div><br>
<div><b>An additional one (1) year of experience in accounting, auditing, bookkeeping, and/or finance may substitute for the required accounting semester hours at the rate of one (1) year of experience for every thirty semester hours.</b></div></div></div></div><p></p>

Accountant/Auditor 4

STC Bahrain

<p><b>stc Bahrain </b>provides telecommunications and digital services across Bahrain.</p><p>At stc Bahrain, <b>cybersecurity</b> roles usually sit within Business Products &amp; Solutions / ICT / SOC (Security Operations / Enterprise Security) teams.</p><p><b>Core Responsibilities:</b></p><p>Depending on level (SOC Analyst, Engineer, or Specialist), typical duties include:</p><p><b>1. Threat Monitoring &amp; Detection</b></p><p>Monitor security alerts from SIEM tools and SOC systems</p><p>Detect suspicious network activity and cyber threats</p><p>Analyze logs from servers, endpoints, and cloud systems</p><p><b>2. Incident Response</b></p><p>Investigate cyber incidents (malware, phishing, breaches)</p><p>Contain and escalate security threats</p><p>Support recovery and forensic analysis</p><p><b>3. Security Operations</b></p><p>Maintain firewalls, IDS/IPS, endpoint protection tools</p><p>Apply security patches and updates</p><p>Ensure network and cloud security compliance</p><p><b>4. Risk &amp; Compliance</b></p><p>Support cybersecurity audits and risk assessments</p><p>Ensure alignment with ISO 27001 and telecom security standards</p><p>Document vulnerabilities and mitigation plans</p><p><b>5. Enterprise &amp; Cloud Security (advanced roles)</b></p><p>Secure cloud platforms and applications</p><p>Manage identity/access control systems</p><p>Support Zero Trust security frameworks</p><p>stc also operates a large SOC and AI-driven cybersecurity ecosystem protecting networks, cloud, and enterprise systems</p><p><b>Skills &amp; Requirements:</b></p><p>Bachelor&rsquo;s in IT / Computer Science / Cybersecurity</p><p><i>Certifications (preferred):</i></p><p>Security+ / CEH / CISSP / CCNA Security</p><p><i>Knowledge of:</i></p><p>SIEM tools (Splunk, QRadar)</p><p>Firewalls, endpoint security, IDS/IPS</p><p>Strong analytical and incident handling skills</p><p>Understanding of telecom or enterprise networks is a plus</p><p>Pay: From RO1,000.000 per month</p><p>Work Location: In person</p>

Cybersecurity (stc Bahrain)

City of Milwaukee

<div><p>Recruitment #2605-5353-001</p>
<div><div><div><div><b>List Type </b></div><div>Original
</div></div><br>
<div><div><b>Requesting Department </b></div><div>Milwaukee Police Department
</div></div><br>
<div><div><b>Open Date </b></div><div>5/8/2026 2:45:00 PM
</div></div><br>
<div><div><b>Filing Deadline </b></div><div>5/26/2026 11:59:00 PM</div></div></div></div><div></div><div> Apply
</div><div></div><div><div><h2 class="jobSectionHeader"><b>Introduction</b></h2>
<div><p><b>The City of Milwaukee is proud to employ a diverse workforce dedicated to delivering exceptional service to its residents. If you have a passion for being a part of an inclusive team of public servants, please consider the following opportunity.</b></p>
</div><h2 class="jobSectionHeader"><b>Purpose</b></h2>
<div><p>The Crime Scene Supervisor oversees the Forensics Division personnel involved in evidence identification, preservation, collection, and analysis, ensuring recognized techniques within the parameters of the forensic science field are implemented and followed.</p>
</div><h2 class="jobSectionHeader"><b>Essential Functions</b></h2>
<div><p><b>Crime Scene Processing</b></p>
<p>
</p><ul><li>Monitor Computer Aided Dispatch (CAD) calls for service and assignments related to forensic personnel to ensure responses are appropriate and efficient.</li>
<li>Respond to crime scenes and other locations to guide and assist members in processing digital and physical evidence.</li>
<li>Review documentation to ensure timely completion, submission, and accuracy.</li>
<li>Conduct and maintain records of Milwaukee Police Department (MPD) processes, including inspections of vehicles, equipment, personnel, and department property.</li>
<li>Provide guidance, support, and training on forensic-related duties and responsibilities to law enforcement members and partners.</li>
<li>Serve as a credible witness in court and administrative proceedings.</li>
<li>Serve as the subject matter expert in crime scene and evidence processing.</li>
</ul>
<p></p><p><b>Supervision/Administration</b></p>
<p>
</p><ul><li>Supervise the daily work of the Crime Scene Investigators I and II, Forensic Investigators, and other members under the command of the Forensics Division.</li>
<li>Manage the duties and functions of criminal records, to include the efficient operation of the Forensic identification systems, including latent print and criminal record databases.</li>
<li>Compile data and prepare, review, and complete narrative and statistical reports and documentation of work completed, including crime scene diagrams.</li>
<li>Conduct and maintain records of MPD processes, including inspection of vehicles, equipment, personal and departmental property.</li>
<li>Schedule, establish, and maintain appropriate staffing levels.</li>
<li>Assist with hiring processes, including drafting job announcements, attending career fairs and recruiting events, interviewing candidates, conducting orientation and onboarding new employees.</li>
<li>Ensure the proficiency and productivity of subordinate staff.</li>
<li>Coach, counsel, and evaluate employees in a manner that is consistent with training, departmental directives, Code of Conduct, standard operating procedures and city policies.</li>
<li>Conduct investigations into the conduct of staff; recommend disciplinary action, as appropriate.</li>
<li>Assist in budget management, including personnel, overtime and operating budgets; purchase equipment and supplies pursuant to City policies and procedures.</li>
<li>Ensure the efficient use of forensic resources, including personnel, equipment, and financial resources, by planning, prioritizing, delegating, supervising, and reviewing the work of Forensic Division personnel.
</li></ul><p></p><p><i>We welcome qualified individuals with disabilities who are interested in employment and will make reasonable accommodations during the hiring process in accordance with the Americans with Disabilities Act (ADA) of 1990, as amended by the Americans with Disabilities Act Amendments Act (ADAAA) of 2008.</i></p>
</div><h2 class="jobSectionHeader"><b>Conditions of Employment</b></h2>
<div><p><b>The Crime Scene Supervisor must:</b></p>
<p>
</p><ul><li>Be flexible with shift hours, including nights, weekends, holidays, and overtime to meet operational demands, often with little notice, such as in the event of an emergency or staff shortage.</li>
<li>Work in the field, responding to and investigating crime scenes.</li>
<li>Possess the ability to professionally handle exposure to death, dead bodies in various states of decomposition, biohazards, and other unpleasant conditions.</li>
<li>Perform medium physical activity, including walking, climbing, crawling, kneeling, reaching, pushing, pulling, and lifting up to 50 pounds of force occasionally, up to 20 pounds frequently, and up to 10 pounds constantly to move objects.</li>
<li>Withstand exposure to extreme weather conditions, noise, and other hazards.</li>
<li>Complete a minimum of 80 hours of training identified by the Milwaukee Police Department related to crime scene processing, forensic disciplines, and/or leadership within two years of appointment.</li>
</ul>
<p></p><p><b>NOTE: Candidates must pass an MPD background investigation before hire. Per the Criminal Justice Information Services (CJIS) security policy, your application will be rejected if you have been convicted of a felony.</b></p>
</div><h2 class="jobSectionHeader"><b>Minimum Requirements</b></h2>
<p></p><div><div><ul><li>Bachelor&rsquo;s degree preferred in criminal justice, science, computer science, or a closely related field from an accredited college or university.</li></ul>
<ul><li>Three years of experience performing forensic-related duties, including crime scene processing, forensic photography and digital imaging, digital and multimedia evidence processing, or the identification, preservation, collection and analysis of physical, digital, biological, or latent print evidence, including the identification and processing of suspects.</li></ul>
<ul><li>Valid driver&rsquo;s license at the time of appointment and throughout employment.</li></ul>
</div>
<p></p><p><i>Equivalent combinations of education and experience may also be considered.</i></p>
<p><b>
NOTICE:</b> Please do not attach your academic transcripts to your employment application. The hiring department will verify candidates&rsquo; education as part of the background screening process prior to extending any job offers.</p>
</div><h2 class="jobSectionHeader"><b>Desirable Qualifications</b></h2>
<p></p><div><ul><li>Experience leading staff and/or projects.</li>
</ul>
</div><p></p><h2 class="jobSectionHeader"><b>Knowledge, Skills, Abilities &amp; Other Characteristics</b></h2>
<div><p><b>TECHNICAL</b></p>
<p>
</p><ul><li>General knowledge of law enforcement practices.</li>
<li>Ability to read maps and navigate throughout the City of Milwaukee.</li>
<li>Ability to observe and recall details.</li>
<li>Ability to apply techniques for gathering and preserving physical evidence and for gathering, recovering and managing digital evidence.</li>
<li>Ability to apply forensic techniques and best practices, including the use of digital equipment, lighting, filtration, infrared, and ultraviolet techniques.</li>
<li>Ability to use powders and chemicals to process scenes for physical evidence and subsequent lifting/photographing.</li>
<li>Knowledge of and ability to apply standard techniques for the classification, development, transfer, and chemical processing of physical evidence.</li>
<li>Ability to read and understand work-related documents.</li>
<li>Ability to apply the rules of evidence and court methods.</li>
<li>Proficiency using the Microsoft Office suite, including Outlook, Word, and Excel.</li>
<li>Ability to use various specialized databases for fingerprint analysis and identification.</li>
<li>Ability to perform quality control and verification work accurately.</li>
<li>Thorough understanding of techniques, equipment, and processes related to forensic photography.</li>
</ul>
<p></p><p><b>COMMUNICATION AND INTERPERSONAL</b></p>
<p>
</p><ul><li>Customer service skills, empathy, and tact to serve the public respectfully and represent the department positively.</li>
<li>Ability to provide services in a culturally sensitive manner.</li>
<li>Ability to establish and maintain effective working relationships with sworn and civilian staff, counterparts in the intelligence and law enforcement communities, representatives of City departments, elected officials, and the public.</li>
<li>Ability to work cooperatively and fairly with others whose backgrounds may differ from one&rsquo;s own.</li>
<li>Data compilation and written communication skills to be able to produce charts, maps, and narrative reports to communicate findings in a concise and well-organized manner.</li>
<li>Verbal communication skills, including the ability to respond to questions, explain complex technical information, and provide testimony in court.</li>
</ul>
<p></p><p><b>CRITICAL THINKING AND PROFESSIONALISM</b></p>
<p>
</p> <ul><li>Ability to work independently with minimal direct supervision.</li>
 <li>Ability to plan and accomplish work, manage multiple assignments simultaneously, and meet deadlines.</li>
 <li>Ability to handle sensitive information carefully.</li>
 <li>Situational awareness and the ability to remain composed during stressful situations.</li>
<li>Ability to use positive coping skills to handle frequent exposure to the details of events, crimes, and tragedies.</li>
<li>Analytical, problem-solving, and decision-making skills; sound judgment.</li>
<li>Honesty and the ability to maintain the utmost confidentiality regarding all police matters.</li>
<li>Ability to adhere to City of Milwaukee, departmental, and divisional policies; applicable ordinances; the MPD Code of Conduct and Standard Operating Procedures; and forensic science standards and best practices.</li>
<li>Commitment to continuous learning and to participation in job-related training and professional organizations such as the International Association for Identification to maintain current knowledge and skills in forensics analysis.</li>
</ul>
<p></p><p><b>SUPERVISORY</b></p>
<p>
</p><ul><li>Ability to assign duties, set performance standards, monitor work in progress, evaluate performance, and make hiring recommendations.</li>
<li>Ability to provide guidance and training and to coach team members to success.</li>
<li>Ability to foster an environment of inclusion wherein all employees are treated respectfully, are valued for their strengths, and feel that they can safely express themselves.</li>
</ul>
</div><p></p><h2 class="jobSectionHeader"><b>Current Salary</b></h2>
<div><p>The current salary range (Pay Range 2LN) is <b>$90,032-$108,380</b> annually, and the current resident incentive salary range for City of Milwaukee residents is <b>$93,634-$112,715</b> annually. <i>Appointment above the minimum is possible based upon level of experience and other qualifications, and is subject to approval.</i></p>
<p><b>
BENEFITS:</b></p>
<p>
The City of Milwaukee provides a comprehensive benefit program which includes the following:</p>
<p>
</p><ul><li>Wisconsin Retirement System (WRS) Defined Benefit Pension Plan</li>
<li>457 Deferred Compensation Plan</li>
<li>Health and Dental Insurance</li>
<li>Paid Parental Leave</li>
<li>Comprehensive Wellness Program</li>
<li>Onsite Clinic Services</li>
<li>Onsite Employee Assistance Program</li>
<li>Alternative Work Schedules</li>
<li>Long Term Disability Insurance</li>
<li>Group Life Insurance</li>
<li>Tuition Benefits</li>
<li>Paid Vacation</li>
<li>12 Paid Holidays</li>
<li>Paid Sick Leave and other paid leaves</li>
<li>Flexible Spending Arrangement</li>
<li>Commuter Value Pass
</li></ul><p></p><p>For full details of the benefits offered by the City of Milwaukee, please visit https://city.milwaukee.gov/der/benefits.</p>
</div><h2 class="jobSectionHeader"><b>Selection Process</b></h2>
<div><p><b>THE SELECTION PROCESS</b> will be job-related and will consist of one or more of the following: an evaluation of education, experience, and/or responses to supplemental questions, a written or performance test, a structured interview, or other assessment methods. The Department of Employee Relations reserves the right to call only the most qualified candidates to structured interviews and performance examinations. Structured interviews may include written exercises. Selection process component weights will be determined by further analysis of the job.</p>
<p><b>
INITIAL FILING DATE</b> &ndash; The selection process will be held as soon as practical after the deadline listed above. Receipt of applications may be discontinued at any time after this date without prior notice. However, recruitment may continue until the City's needs have been met. Qualified applicants will be notified of the date, time, and place of the selection process components. Unless required by law, the City of Milwaukee will not provide alternative dates or times for the selection process. The applicant is responsible for attending all phases of the job selection process at the time and place designated by the City of Milwaukee.</p>
</div><h2 class="jobSectionHeader"><b>Additional Information</b></h2>
<p></p><div><ul><li>Applications and further information can be accessed by visiting https://www.jobapscloud.com/MIL/</li>
<li>If you would like assistance completing an application, please contact the Department of Employee Relations at (414) 286-3751 or staffinginfo@milwaukee.gov.</li>
<li>The Department of Employee Relations is located at City Hall, 200 E. Wells St, Room 706, Milwaukee, WI 53202.</li>
</ul>
</div><p></p><h2 class="jobSectionHeader"><b>Conclusion</b></h2>
<div><p><b><i>EEO 102</i></b></p>
<p><b><i>
The City of Milwaukee values and encourages diversity and is an equal opportunity employer.</i></b></p></div></div></div></div>

CRIME SCENE SUPERVISOR

<div><h1 class="jobSectionHeader"><b>Cyber Threat Intelligence Analyst Job Description</b></h1><b>
Position: </b>Cyber Threat Intelligence Analyst<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services.<br>
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul><p>
</p><p>Pw75tUj9Bf</p></div>

SBA - Cyber Threat Intelligence Analyst

Search 10000+ Digital forensic analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 digital forensic analyst jobs Near Me

SBA - Digital Forensics Engineer

Cyber Threat Analyst

Cyber Threat Analyst

Accountant/Auditor 4

Cybersecurity (stc Bahrain)

CRIME SCENE SUPERVISOR

SBA - Cyber Threat Intelligence Analyst