digital forensics analyst

Palo Alto Networks

<div>
 <strong>
  Our Mission
  <br/>
  <br/>
 </strong>
 At Palo Alto Networks&reg; everything starts and ends with our mission:
 <br/>
 <br/>
 Being the cybersecurity partner of choice, protecting our digital way of life.
 <br/>
 <br/>
 Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
 <br/>
 <br/>
 <strong>
  Who We Are
  <br/>
  <br/>
 </strong>
 This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  Your Career
  <br/>
  <br/>
 </strong>
 This role is client-facing and requires the Senior Consultant to help lead and produce deliverables based on reactive services client engagements. The Senior Consultant will work directly with multiple customers and key stakeholders (Admins, C-Suite, etc) to lead incident response incidents and guide clients through the engagement from start to finish.
 <br/>
 <br/>
 <strong>
  Your Impact
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Weekend Work Shift is Friday-Monday (10 hr work day/ 40 hr work week)
  </li>
  <li>
   Perform reactive incident response functions including but not limited to - host-based analysis functions through investigating Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs)
  </li>
  <li>
   Examine firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
  </li>
  <li>
   Investigate data breaches leveraging forensics tools including Encase, FTK, X-Ways, SIFT, Splunk, and custom Unit 42 investigation tools to determine source of compromises and malicious activity that occurred in client environments
  </li>
  <li>
   Lead incident response engagements to guide clients through forensic investigations, contain security incidents, and provide guidance on longer term remediation recommendations
  </li>
  <li>
   Mentorship of Incident Response Consultants in incident response and forensics best practices
  </li>
  <li>
   Ability to perform light travel requirements as needed to meet business demands (on average 30%)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Your Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   4+ years of incident response or digital forensics experience with a passion for cyber security
  </li>
  <li>
   Proficient with host-based forensics and data breach response
  </li>
  <li>
   Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Volatility, WireShark, TCPDump, and open source forensic tools
  </li>
  <li>
   Identified ability to grow into a valuable contributor to the practice and, specifically
  </li>
  <ul>
   <li>
    have an external presence via public speaking, conferences, and/or publications
   </li>
   <li>
    have credibility, executive presence, and gravitas
   </li>
   <li>
    be able to have a meaningful and rapid delivery contribution
   </li>
   <li>
    have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products
   </li>
   <li>
    be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team
   </li>
  </ul>
  <li>
   Incident Response Consulting preferred
  </li>
  <li>
   Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or related field or equivalent military experience required
   <br/>
  </li>
 </ul>
 <strong>
  Additional Information
  <br/>
  <br/>
 </strong>
 <strong>
  The Team
  <br/>
  <br/>
 </strong>
 Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients&rsquo; security posture.
 <br/>
 <br/>
 <strong>
  Compensation Disclosure
  <br/>
  <br/>
 </strong>
 The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $128,000 - $176,000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here.
 <br/>
 <br/>
 <strong>
  Our Commitment
  <br/>
  <br/>
 </strong>
 We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
 <br/>
 <br/>
 We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
 <br/>
 <br/>
 Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
 <br/>
 <br/>
 All your information will be kept confidential according to EEO guidelines.
</div>


Senior Consultant, DFIR, Reactive Services (Unit 42) - Remote Weekend Shift

Ankura

<div><div>Ankura is a team of excellence founded on innovation and growth.</div><div></div><div>
Company and Team Overview</div><div>
Ankura is a global consulting firm, consistently recognized by Forbes as one of the World&rsquo;s Best Management Consulting Firms. With over 2,200 professionals across 35+ offices worldwide&mdash;including a rapidly expanding footprint in the Middle East&mdash;Ankura delivers strategic advisory, risk, and transformation services to clients navigating complex challenges.</div><div></div><div>
This role sits within Ankura&rsquo;s Legal Tech &amp; Data Analytics practice, one of seven specialist service lines focused on delivering high-impact solutions across investigations, litigation support, and business process improvement. Our team leverages advanced analytics, AI, and review optimization to uncover insights and drive outcomes for clients across sectors.</div><div></div><div>
In Dubai, we&rsquo;re at the heart of regional innovation, working closely with public and private sector leaders to shape resilient, forward-looking organizations. At Ankura, we define success in one word: <i>Value</i>. Value for our clients is our currency, our mantra, our driving force. Every solution, every service, every offering we provide is built to deliver value.</div><div></div><div>
What We Offer You</div><ul><li><div>
Accelerated career growth opportunities supported by structured development, global training programs, and Ankura Academy&rsquo;s e-learning platform.</div></li><li><div>
Collaboration with internationally recognised experts in a high-impact, global consultancy.</div></li><li><div>
A flat team structure that encourages innovation, curiosity, and open dialogue.</div></li><li><div>
Opportunities to travel and contribute to international projects across Ankura&rsquo;s global network.</div></li><li><div>
A culture that values initiative, learning, and creative problem-solving.</div></li></ul><div></div><div>
Our professionals are trusted advisors who work collaboratively and in a very measured and expedient way to maximise value for our clients. We are experts known for leading challenging processes and bringing together disparate stakeholder groups.</div><div></div><div>
Role Overview</div><div>
You will play a key role in delivering high-quality outcomes on client matters, supporting project teams with technical execution and workflow optimization. You will be exposed to cutting-edge technologies and methodologies in eDiscovery and digital forensics, contributing to impactful solutions in a fast-paced, client-focused environment.</div><div></div><div>
The role is perfectly suited for a professional with 2 or more years of experience in eDiscovery and it is advantageous if the candidate has experience with or is keen to explore digital forensics including data collections. The eDiscovery and digital forensics service plays a vital role in investigations, litigation support, and business process improvements, specialising in leveraging innovative analytics, AI, data reduction and review optimisation to get the best insights and outcomes for our clients.</div><div></div><div>
The ideal candidate is passionate about technology, client-focused, and committed to delivering high-quality work. We&rsquo;re looking for confident, self-motivated professionals who can work independently across a broad range of tasks and contribute meaningfully to the growth of our Middle East team.</div><div>
This role is based in our Dubai office and follows a hybrid working model, combining in-office collaboration with remote flexibility. Candidates must be based in or willing to relocate to Dubai and be available for regular in-person engagement with clients and our team.</div><div></div><div>
Primary Responsibilities</div><ul><li><div>
Support users in performing tasks on eDiscovery platforms, including Relativity.</div></li><li><div>
Design and maintain SOP documentation and assist in implementation.</div></li><li><div>
Process and analyse electronically stored information (ESI) using industry-standard tools.</div></li><li><div>
Manage databases and workflows to support efficient document review and retrieval.</div></li><li><div>
Perform data remediation, including case disposition, deletion, and workspace archiving.</div></li><li><div>
Troubleshoot technical issues and recommend solutions to client challenges</div></li></ul><div></div><div>
Requirements</div><ul><li>
Minimum 2.1 undergraduate degree (or GPA 3.75+), preferably in analytical fields such as Computer Science, Digital Forensics, Cybersecurity, Engineering, or Mathematics.</li><li>
At least 2 years of hands-on experience in eDiscovery; exposure to digital forensics is a plus.</li><li>
Passion for data analysis and eagerness to grow as a data consultant in a global firm.</li><li>
Fluent in English; Arabic is a plus.</li><li>
Must have the ability to travel locally and internationally, with a focus on low-friction mobility across the GCC region and Europe, including eligibility for visa processes that support short-notice client engagements.</li></ul><div></div><div>
Desired Attributes</div><ul><li>
Collaborative, proactive, and solutions-oriented mindset.</li><li>
Strong work ethic with a drive for continuous improvement.</li><li>
Professionalism, discretion, and diplomacy in all interactions.</li></ul><ul><li>
Ability to manage multiple priorities in a fast-paced environment.</li><li>
Technologically savvy with strong analytical and research skills.</li><li>
Excellent communication and organizational abilities.</li></ul><div></div><div>
Ankura is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability. Equal Employment Opportunity Posters, if you have a disability and believe you need a reasonable accommodation to search for a job opening, submit an online application, or participate in an interview/assessment, please email accommodations@ankura.com or call toll-free +1.312-583-2122. This email and phone number are created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues unrelated to a disability, will not receive a response.</div></div><div></div>

eDiscovery & Digital Forensics, Legal Tech & Data Analytics (Dubai)

Tamkeen Technologies

<div><h3 class="jobSectionHeader"><b>Roles and Responsibilities:
</b></h3><ul><li>Lead and coordinate the response to critical and complex security incidents, guiding SOC L1 and L2 analysts during investigations.</li>
<li>Conduct advanced incident analysis and provide actionable recommendations for incident containment.</li>
<li>Proactively hunt for advanced threats, APTs, and sophisticated attack patterns within client networks.</li>
<li>Perform in-depth cyber threat analysis to understand attack vectors and tactics, techniques, and procedures (TTPs) used by threat actors.</li>
<li>Conduct advanced digital forensics and memory analysis to identify root causes and perform post-incident investigations.</li>
<li>Perform detailed malware analysis and reverse engineering to understand malware behavior and capabilities.</li>
<li>Integrate threat intelligence from various sources into the MSSP&rsquo;s security operations to improve threat detection and response effectiveness.</li>
<li>Collaborate with threat intelligence teams to enhance the MSSP&rsquo;s threat intelligence capabilities.</li>
<li>Develop and update incident response playbooks and standard operating procedures (SOPs) to address emerging threats.</li>
<li>Provide cybersecurity consulting and advisory services to clients, offering strategic guidance on security best practices and risk management.</li>
<li>Act as a primary point of contact for key clients, ensuring effective communication and a clear understanding of their security needs.</li>
<li>Build strong relationships with clients by understanding their business goals and aligning MSSP services accordingly.</li>
<li>Establish and track key SOC performance metrics, incident trends, and key performance indicators (KPIs).</li>
<li>Provide regular reports to MSSP management, clients, and stakeholders.</li>
<li>Provide strong leadership to SOC L1 and L2 analysts, fostering a collaborative and high-performing team environment.</li>
<li>Mentor junior analysts, guiding their career development and enhancing their technical skills.</li>
<li>Collaborate with internal MSSP teams such as threat intelligence, threat hunting, and engineering to enhance overall client security posture.</li>
</ul><h3 class="jobSectionHeader"><b>Technical Skills</b></h3><ul>
<li>In-depth knowledge of networking concepts, TCP/IP, network protocols, security architecture, and modern security technologies.</li>
<li>Proficiency in using SIEM, IDS/IPS, firewalls, EDR, and other security tools.</li>
<li>Advanced skills in scripting and programming languages for automation and analysis.</li>
<li>Strong analytical skills to investigate complex security incidents and devise effective solutions.</li>
<li>Excellent verbal and written communication skills to document incidents, write reports, and interact with team members, stakeholders, and clients.</li>
<li>Previous experience in leading and managing a team of cybersecurity professionals.</li>
<li>Deep understanding of threat intelligence sources, threat actors, and advanced cyber-attack techniques. Proven experience in leading incident response efforts for complex incidents.</li>
<li>Strong experience in digital forensics, memory analysis, and advanced malware analysis.</li>
</ul><h3 class="jobSectionHeader"><b>Qualifications</b></h3><p><b>
Education:</b> Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Technology, or a related field is typically required.</p><p><b>
Certifications:</b> Hold one or more certifications such as, GCFA, GCIA, GCIH, GREM</p><p><b>
Experience:</b> Minimum of 5 years or more of progressive experience in a cybersecurity role, with extensive hands-on experience in a SOC environment.</p></div>

Cybersecurity Operations Center

United States Department of Justice

<p></p><div><div><div><div><div><div><div><div><div><div><div><div><div>Interested in fighting healthcare fraud? Then the Division of Medi-Cal Fraud and Elder Abuse (DMFEA) is the place you want to be. The mission of the Division of Medi-Cal Fraud and Elder Abuse as the State&rsquo;s Medicaid Fraud Control Unit involves investigating and prosecuting, both criminally and civilly, (a) healthcare providers who defraud the Medi-Cal program and (b) those who abuse or neglect elderly and dependent adults in designated facilities.</div><div></div><p><br>
The Division of Medi-Cal Fraud and Elder Abuse is looking for an Information Technology Specialist (ITS) II &ndash; this is an opportunity highly qualified applicants should not miss.</p><p>
Under the general direction of the Information Technology Manager (ITM) I, the ITS II demonstrates leadership and ingenuity in the Information Security Engineering domain, serving as a subject matter expert and skilled practitioner of advanced digital investigations and forensic examinations. The incumbent serves as a member of a team of non-sworn Digital Forensic Investigators providing digital investigative and forensic services to attorneys and law enforcement officers. Focuses may include digital forensics, big data, cloud, Internet of Things, electronic information systems, and social media forensics. The position performs a variety of technical tasks in connection with the collection and analysis of the most complex electronic information processing systems in support of the Division of Medi-Cal Fraud and Elder Abuse Digital Forensic Investigations (DFI). The DFI is primarily responsible for conducting advanced-level forensic examination, analysis, reconstruction of computing environments, and research specific to the collection and preservation of digital evidence in a forensically sound manner. The ITS II identifies documents, collects, processes, presents, and preserves evidence in criminal and civil investigations, pre-litigation, and litigation matters. Examples of digital evidence and electronic media include, but are not limited to: computer hard drives, external/thumb drives, servers, cellular phones, network devices, information systems, and any other devices or media that store and/or process digital information. The ITS II acts as part of a team of law enforcement personnel.<br>
<br>
The ITS II must exercise a high degree of initiative, independence, and confidentiality during the performance of critical and routine assignments and will provide technical expertise and project management on a wide variety of complex information technology (IT) solutions. The ITS II serves as a subject matter expert (SME) and demonstrates a high level of knowledge as it pertains to digital forensic analysis; forensic best practices; data storage and management and information security, as it relates to ensuring the integrity of the forensic process. The incumbent will make optimal recommendations for management&rsquo;s consideration in order to establish or improve organizational wide policies and procedures. Other duties will include but are not limited to: preparing standard forensic reports; maintaining files, peer review of casework and appearing in court in order to provide expert testimony as a SME or witness. This position requires a high level of confidentiality as information that the ITS II will have access to may be very private, privileged, or sensitive in nature. Planned and short-notice In-State and occasional Out-of-State travel is required.</p><div><br>
</div><p></p><p>You will find additional information about the job in the <b>Duty Statement</b>.</p>
</div><p></p><div><p>Working Conditions</p>
<p></p><div>Telework is available but is contingent on DMFEA's operational needs. Telework requires California residency. This position is required to work in the office a minimum of three days a week.</div><br>
</div></div><p></p><div><div><p>Minimum Requirements</p>
You will find the Minimum Requirements in the Class Specification.<ul><li>
INFORMATION TECHNOLOGY SPECIALIST II</li><li>
INFORMATION TECHNOLOGY SPECIALIST I</li></ul>
</div><div><p>Additional Documents</p>
<ul><li>Job Application Package Checklist</li><li>
Duty Statement</li></ul>
</div></div><div><div><p>Position Details</p>
<div><div><div><b>Job Code #:</b> </div><div>JC-499216
</div></div><div><div><b>Position #(s):</b>
</div><div><div>423-654-1414-901</div>
</div></div><div><div><div><b>Working Title:</b> </div><div><b>Digital Forensic Investigator</b>
</div></div></div><div><div><b>Classification:</b> </div><div>INFORMATION TECHNOLOGY SPECIALIST II
<div>$8,625.00 - $11,557.00 A
</div>New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.
</div></div><div></div><div><div><div><p><b>Shall Consider:</b></p>
</div><p>INFORMATION TECHNOLOGY SPECIALIST I
</p><div><div>$6,513.00 - $8,729.00 A
</div><div>$7,163.00 - $9,599.00 B
</div><div>$7,864.00 - $10,537.00 C
</div></div></div></div><div><div><b># of Positions:</b> </div><div>1
</div></div><div><div><b>Work Location:</b> </div><div>Los Angeles County
</div></div><div><div><b>Telework:</b> </div><div>Hybrid
</div></div><div><div><b>Job Type:</b> </div><div>Permanent, Full Time
</div></div><div><div><div><b>Work Shift:</b> </div><div>Day
</div></div></div><div><div><div><b>Work Week:</b> </div><div>Monday - Friday
</div></div></div></div></div><div><p>Department Information</p>
<div><div><ul><li>This position is located in the Division of Medi-Cal Fraud and Elder Abuse, Investigations Section, Burbank Regional Office.</li></ul></div><ul><li>
Please disregard the SROA/Surplus language below, as the Department of Justice requires applicants to submit their SROA/Surplus Letter if that is the basis of their eligibility.</li></ul><ul><li><div><b>
Individuals who are new to State service </b><b>or are looking to promote must have list </b><b>eligibility in order to gain employment </b><b>with the Department of Justice. To </b><b>access the Information Technology </b><b>Specialist II, and Information Technology </b><b>Specialist I Examination and obtain list </b><b>eligibility, please click:</b></div></li></ul><ul><li><b>
Information Technology Specialist II</b></li></ul><ul><li><b>
Information Technology Specialist I</b></li></ul><div>
 Additional exams and information can be found
<br>
 at: https://oag.ca.gov/careers/exams.<br>
</div><ul><li>
For more information about the department, please visit the Attorney General&rsquo;s website at https://www.oag.ca.gov/</li></ul><ul><li>
For all questions regarding this job posting, please contact DMFEA_Personnel@doj.ca.gov.</li></ul><b>
Personal Leave Program: Effective July 1, 2025, state employees are subject to temporary wage reductions in exchange for Personal Leave Program (PLP) accruals. The specific rate and hours earned were negotiated and agreed upon by each bargaining unit. The actual monetary impact of these temporary reductions can vary based on your bargaining unit and/or federal and state tax withholdings. For additional information please visit </b><b>Human Resources Manual - CalHR</b><br>
</div></div></div><div></div><div><div><p>Special Requirements</p>
<div></div><div><ul><li>The position(s) require(s) a Background Investigation to be cleared prior to being hired.</li><li>
Clearly indicate the Job Control JC-499216 and the title of this position in the &quot;Examination or Job Title(s) For Which You Are Applying&quot; section located on the first page of your State Application.</li><li>
Clearly indicate the basis of your eligibility in the &quot;Explanations&quot; section located on the first page of you State Application.</li><li><div>
If you are using education to meet the minimum qualifications for this position, you must submit a copy of your transcript or diploma. <b>Unofficial school transcripts may be accepted during the application process; however, submission of official transcripts is required prior to appointment.</b></div></li></ul>
</div></div><div><p>Application Instructions</p>
<div><p>Completed applications and all required documents must be received or postmarked by the Final Filing Date in order to be considered. Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application.
</p>Final Filing Date: 1/13/2026
<p><b>Who May Apply</b></p>
<div>Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply.
<br>
<br>
Applications will be screened and only the most qualified applicants will be selected to move forward in the selection process. Applicants must meet the Minimum Qualifications stated in the Classification Specification(s).
</div><p><b>How To Apply</b></p>
<div>Complete Application Packages (including your Examination/Employment Application (STD 678) and applicable or required documents) must be submitted to apply for this Job Posting. Application Packages may be submitted electronically through your CalCareer Account at www.CalCareers.ca.gov. When submitting your application in hard copy, a completed copy of the Application Package listing must be included. If you choose to not apply electronically, a hard copy application package may be submitted through an alternative method listed below:<br>
<div><p><b>Address for Mailing Application Packages</b></p>
<p>You may submit your application and any applicable or required documents to:</p><br>
<div></div><div><div><div>Department of Justice
</div><div>DMFEA Personnel
</div><div>Attn: Kittiya Jaikaew (JC-499216)
</div><div>2329 Gateway Oaks Drive
</div><div></div><div>Sacramento, CA 95833
</div></div></div></div><div><p><b>Address for Drop-Off Application Packages</b></p>
<p>You may drop off your application and any applicable or required documents at:</p><br>
<div></div><div><div><div><div>Department of Justice
</div><div>DMFEA Personnel
</div><div>Kittiya Jaikaew (JC-499216)
</div><div>2329 Gateway Oaks Drive
</div><div></div><div>Sacramento, CA 95833
</div><div></div><div>08:30 AM - 04:30 PM
</div></div></div></div></div></div><p><b>Required Application Package Documents</b></p>
<p>The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:
</p><ul><li>Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.</li>
<li>Resume is required and must be included.</li>
<li>Statement of Qualifications -
<br>
A Statement of Qualifications (SOQ) is required. Applicants who do not submit an SOQ will not be considered for this position. This SOQ prompt is listed below.</li>
</ul></div>Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.
</div></div></div><div><p>Desirable Qualifications</p>
<div>In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:
</div><div><ul><li>Associate's degree or certification with a concentration in Criminal Justice or Computer Science is preferred.</li><li>
Two or more years of experience participating in criminal investigations and producing investigative reports.</li><li>
Two or more years of experience in precision note-taking and detailed report writing.</li><li>
Extensive experience performing forensic acquisitions and conducting analysis of data from mobile devices, computers, servers, and databases.</li><li>
Ability to work under pressure and prioritize projects with short timelines.</li><li>
Broad experience and deep understanding of social media platforms (Facebook, LinkedIn, Twitter, Instagram, etc.).</li><li>
Experience performing forensic tool validation.</li><li>
Strong problem-solving skills and the motivation to learn about unfamiliar technologies or programs.</li><li>
Familiar with and knowledge of chain-of-custody procedures when handling evidence as part of a criminal investigation.</li><li>
Excellent oral and written communication skills, ability to handle work assignments with tact and diplomacy, and ability to build rapport with customers, colleagues, and others.</li><li>
Careful attention to detail and the availability to travel (planned and short-notice).</li></ul>
</div></div><div><p>Benefits</p>
<div>Benefit Information - Please access this link for information on benefits afforded to employees who work for the State of California - https://www.calhr.ca.gov/Pages/California-State-Civil-Service-Employee-Benefits-Summary.aspx
</div></div><div><p>Contact Information</p>
<div><p>The Human Resources Contact is available to answer questions regarding the position or application process.
</p><p><b>Human Resources Contact:
</b><br>
Kittiya Jaikaew<br>
(916) 597-3661<br>
Kittiya.Jaikaew@doj.ca.gov
</p><div><p>Please direct requests for Reasonable Accommodations to the interview scheduler at the time the interview is being scheduled. You may direct any additional questions regarding Reasonable Accommodations or Equal Employment Opportunity for this position(s) to the Department's EEO Office.
</p><b>EEO Contact:</b><br>
EEO Officer<br>
(916) 210-7580<br>
EERROffice@doj.ca.gov
</div><p>California Relay Service: 1-800-735-2929 (TTY), 1-800-735-2922 (Voice) TTY is a Telecommunications Device for the Deaf, and is reachable only from phones equipped with a TTY Device.
</p></div></div><div><p>Additional Information on Application Filing</p>
<p></p><p>Please note, if using the United States Postal Service for delivery, there is no guarantee that your application will be date stamped and will arrive by the final filing date. If your application does not have a postmark or date stamp and arrives after the final filing date, your application will not be accepted. Therefore, to ensure the timely delivery of your application, it is recommended that you use either electronic delivery, parcel service, or certified mail. Using one of these options will provide proof of delivery prior to the final filing date.</p>
</div><p></p><div><p>Statement of Qualification</p>
<p></p><div>The Statement of Qualifications is a narrative discussion of how your education, training, and experience demonstrate your proficiency in the following three (3) areas for this position. The Statement of Qualification serves as documentation of your ability to present information clearly and concisely in writing. It should be typed in 12-point font and no more than two pages in length.<br>
</div><ul><li>Describe your extensive experience performing digital forensic acquisitions and conducting analysis of data from mobile devices, computers, servers, and databases.</li></ul><br>
<div></div><ul><li>Describe your experience performing forensic tool validation.</li></ul><br>
<div></div><ul><li>Describe your experience participating in criminal investigations and producing investigative reports.</li></ul>
</div><p></p><div><div><p>Equal Opportunity Employer</p>
<p>The State of California is an equal opportunity employer to all, regardless of age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding and related medical conditions), and sexual orientation.
</p><p>It is an objective of the State of California to achieve a drug-free work place. Any applicant for state employment will be expected to behave in accordance with this objective because the use of illegal drugs is inconsistent with the law of the State, the rules governing Civil Service, and the special trust placed in public servants.</p></div></div></div></div></div></div></div></div></div></div></div><div></div>

INFORMATION TECHNOLOGY SPECIALIST II

Peraton

<div><b>About Peraton</b><br>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.<br>
<br>
<b>Program Overview</b>Encompasses technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support for Bureau of Diplomatic Security, Cyber and Technology Security Directorate in three key offices/functional areas: Cyber Monitoring and Operations, Cyber Threat and Investigations, and Technology Innovation and Engineering State.<br>
<br>
<b>About The Role</b><br>
Peraton is seeking a <b>Digital Forensic Analyst - Journeyman</b>with the Federal Strategic Cyber programs to support a high-impact cybersecurity and technology program focused on securing global infrastructure and enabling innovative, effective, and secure business processes.
<br>
<br>
<b>Location: Arlington, VA - 100% On-site.</b><br>
<br>
<b>In this role, you will:</b><br>
<br>
<ul><li>Leverage expertise in digital forensics to perform in-depth examinations while assuring forensic soundness of recovered digital evidence is maintained to meet court admissibility standards of the Department of Justice.</li><li>Serve as a Mid-level Digital Forensic Analyst with 5-8 years of experience, who will support the CIF program with the ability and skillset to provide in-depth digital forensic analysis of mobile devices, electronic storage devices, cloud, server, and personal computer systems.</li><li>Conduct forensic examinations of digital evidence through the application of recognized scientific best practices for the recognition, collection, analysis, and interpretation of digital evidence for criminal and civil law or regulatory purposes.</li><li>Leverage skillsets to perform in-depth forensic analysis of various operating systems including Android, Apple iOS/MAC, Microsoft Windows, and Linux based operating systems.</li><li>Leverage skillsets to perform in-depth forensic analysis of file systems including APFS, NTFS, ExFAT, HFS/+, EXT2/3/4, and FAT/FAT32.</li><li>Leverage skillsets to perform in-depth forensic analysis of system and third-party application databases.</li><li>As a tool-agnostic examiner, maintain proficiency in the use of industry-standard forensic hardware and software tools such as Magnet Axiom, Cellebrite Inseyets, PA/UFED, Oxygen Forensic Detective, EnCase, X- Ways, Nuix and with mobile advanced extraction tools such as Graykey and Cellebrite Premium.</li><li>Maintain non-vendor and vendor specific certifications related to job duties.</li><li>Provide on-scene support during the execution of search warrants with the identification, collection, packaging, handling, and chain-of-custody procedures of digital evidence.</li><li>Provide on-scene expertise and triaging guidance of mobile device and running computer systems regarding; encryption, RAM captures, signal-blocking, biometrics, pin-locks, and field acquisition considerations.</li><li>Produce comprehensive notes, reports, and illustrative exhibits for federal, state, and local judicial proceedings; provide expert witness testimony to explain examination interpretations and conclusions from forensic examinations to a lay audience.</li><li>Collaborate with program government and contractor leadership, forensic analysts, law enforcement officers, prosecutors, and other stakeholders to ensure that CIF maintains forensically-sound procedures and best practices in the imaging, analysis, and presentation of digital evidence.</li><li>Stay abreast of new developments and trends in digital forensics, cybersecurity, forensic law, mobile devices, social media tools, mobile applications, and encryption technologies.</li></ul><br>
<b>
Qualifications</b><br>
<br>
<b>Required:</b><br>
<br>
<ul><li>Bachelor's degree and 5 years of relevant experience or Masters Degree and 3 years experience. An additional 4 years of relevant experience may be substituted in lieu of the degree requirement.</li><li>To be considered for this position, applicants must either currently hold one of the professional certifications listed below or obtain one prior to their start date. Continued certification is required as a condition of employment.</li><li>GIAC: GCFE, GASF</li><li>IACIS: CFCE, ICMDE</li><li>NCFI: BCERT, MDE
</li><li>DC3: CDFE, CDMC</li><li>Opentext: EnCE</li><li>Cellebrite: [CCO &amp; CCPA], CCME</li><li>Oxygen Forensics: OFC</li><li>Magnet Forensics: MCFE</li><li>Demonstrated in-depth knowledge if forensic analysis of mobile device hardware, third-party applications, Apple iOS and Android-based operating systems; Apple Macintosh, Linux and Microsoft Windows operating systems, Windows Registry, Android Debug Bridge (ADB); Apple iTunes and iCloud; various computer file systems.</li><li>Experience in providing on-scene triaging, processing, handling, and packaging of electronic/digital evidence (chain of custody) during search and seizure warrants.</li><li>Demonstrated knowledge in using forensic software tools such as Magnet Axiom, Cellebrite Inseyets PA, Oxygen Forensic Detective, Nuix, X-ways, EnCase and with mobile advanced extraction tools.</li><li>Experience writing detailed notes and reports that translate complex technical information to non-technical audiences.</li><li>U.S. citizenship required.
</li><li>Ability to obtain an interim Secret clearance before start date.</li><li>The ability to obtain a final Top-Secret security clearance.
</li></ul><br>
<b>Preferred:</b><br>
<br>
<ul><li>A minimum of one additional certification from, but is not limited to:</li><li>Cyber Crime Center (CDFE, CDMC)</li><li>Cellebrite (CCO+CCPA) X-Ways (X-PERT)</li><li>Oxygen Forensic Detective (OFC)</li><li>Magnet Forensics (MCFE)</li></ul><br>
<b>
SCA / Union / Intern Rate or Range</b><br>
<br>
<b>Details</b><br>
Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
<br>
<br>
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
<br>
<br>
Application Duration Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
<br>
<br>
<b>EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div>

Journeyman Digital Forensic Analyst

Giza Systems EG

<div><h4 class="jobSectionHeader"><b>Job Description</b></h4>
<p></p><div><p>The L1 SOC Analyst serves as the first line of defense within the Security Operations Center, responsible for monitoring, triaging, and escalating security alerts in accordance with defined procedures and SLAs. The role focuses on initial alert investigation, incident logging, and ensuring accurate and timely escalation to higher-tier analysts when required.</p>
<p>
Responsibility:</p>
<ul>
<li>Serve as the first SOC tier to monitor and triage security alerts.</li>
<li>Ensure threat alerts are contextually analyzed and escalated to the next SOC tier when deeper analysis is required.</li>
<li>Provide feedback and comments on relevant data quality and visibility issues.</li>
<li>Monitor and report on the health of the data collection and log ingestion pipelines.</li>
<li>Log security incidents accurately and ensure adequate information is available for L2/L3 analysts.</li>
<li>Generate and distribute scheduled and ad-hoc SOC reports.</li>
<li>Operate independently to investigate and escalate alerts in line with operational requirements and SLA commitments.</li>
<li>Adhere to SOC processes, playbooks, and incident handling procedures.</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Personal Skills</b></h4>
<p></p><div><ul><li>Excellent communication skills</li>
<li>Excellent problem-solving skills.</li>
<li>Ability to support and balance own time among multiple tasks, and lead junior staff when required</li>
<li>Ability to successfully interface with clients (internal and external)</li>
<li>Ability to document and explain technical details in a concise, understandable manner</li>
<li>Excellent command of English</li>
</ul><ul><li>Ability to work independently and as part of a team</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Technical Skills</b></h4><br>
 <p></p><div><p><br>
Previous hands-on experience with SIEM technologies (e.g., QRadar, Splunk, LogRhythm, Elastic SIEM).
 <br>
Good knowledge of operating systems, primarily Windows and Linux.
 <br>
Good understanding of networking protocols, concepts, and technologies.
<br>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent practical experience.
<br>
Security certifications such as Security+, GSEC, CEH, or similar are a plus.
<br>
Experience in programming or scripting (e.g., Python, PERL, Java, Shell, PowerShell).
<br>
Previous experience working as a systems or network administrator.
<br>
Experience configuring or supporting network security solutions (e.g., SIEM, firewalls, IDS/IPS).
<br>
Exposure to incident response and digital forensics activities.
<br>
Previous experience as a penetration tester is an added advantage.<br>
<br>
<br>
</p></div><p></p><h4 class="jobSectionHeader"><b>Education</b></h4>
<div><p>Bachelor&rsquo;s in computer science, Digital Forensics, Engineering, other related field, or equivalent</p></div></div><p></p>
<br><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Riyadh, Saudi Arabia</div>
</div><div><div>Company Industry</div>
<div>IT Services</div>
</div><div><div>Company Type</div>
<div>Employer (Private Sector)</div>
</div><div><div>Job Role</div>
<div>Engineering</div>
</div><div><div>Employment Type</div>
<div>Employee</div>
</div><div><div>Job Division</div>
<div>Jafeer</div></div></div>
<br><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Entry Level</div>
</div><div><div>Years of Experience</div>
<div>Min: 1 Max: 2</div>
</div><div><div>Residence Location</div>
<div>Saudi Arabia</div>
</div><div><div>Nationality</div>
<div>Saudi Arabia</div>
</div><div><div>Degree</div>
<div>Bachelor's degree</div></div></div>

L1 SOC Analyst

SFAU-NAVTTC

<p>We are seeking a highly motivated and knowledgeable <b>Cyber Security Teacher</b> to join our academic team. The ideal candidate will be responsible for delivering high-quality instruction in cyber security concepts, tools, and best practices. This role involves teaching theoretical foundations as well as hands-on practical skills to prepare students for careers in cyber security and related IT fields.</p><p>The Cyber Security Teacher will design lesson plans, conduct lectures and labs, assess student performance, and stay up to date with emerging cyber threats, technologies, and industry standards</p><p>Required Qualifications:</p><ul><li>Bachelor Computer Science/SE/IT/EEE/Cybersecurity having 3 years experience in network security/ ethical hacking/digital forensics.</li><li>Bachelor along with Professional Certification in network security/ethical hacking/digital forensics having 3 years relevant experience.</li></ul><p>Job Type: Full-time</p><p>Work Location: In person</p>

Cyber Security Teacher

Search 10000+ Digital forensics analyst jobs near you this January. New roles added regularly across leading industries. Apply today.