digital forensics analyst

New England State Police Information Network

The New England State Police Information Network (NESPIN) is a regional center dedicated to assist local, state, federal, and tribal criminal justice agencies by providing adaptive solutions and services that facilitate information sharing, support criminal investigations, and promote officer safety.NESPIN has an immediate opening for a Digital Forensics Analyst. This is a full-time non-exempt position, located at NESPIN headquarters in Franklin, Massachusetts. The schedule for this onsite position is Monday through Friday, 37.5 hours per week, during regular business hours of 8:00am to 4:30pm.DUTIES: The successful candidate will be responsible for forensic examinations of mobile device evidence and/or forensic examination of audio and video evidence. The basic responsibilities of the analyst include but are not limited to:<ul><li>Preserve and analyze data from electronic data sources, including tablets, digital cameras, GPS, and mobile devices, ensuring that the evidential integrity of the data is not compromised.</li><li>Specialized technical work in the clarification/enhancement and conversion of audio and video evidence.</li><li>Retrieval of evidence from Digital Video Recorder systems in lab.</li><li>Report detailed findings in preparation for review by investigators, prosecutors, or legal counsel, explaining complex technical concepts to nontechnical people.</li><li>Conduct validation testing and performance verifications of various hardware/software tools.</li><li>Assess and troubleshoot a variety of technical issues.</li><li>Form and articulate expert opinions based on analysis and report findings.</li><li>Provide expert testimony in depositions, trials, and other proceedings.</li><li>Must be willing to travel for training or presentations after hours/weekends/holidays.</li></ul>MINIMAL EDUCATIONAL REQUIREMENTS: Associate&rsquo;s degree in Digital Forensics, Computer Science, or a closely related field is required.Bachelor&rsquo;s degree in Digital Forensics is strongly preferred (relevant experience as a multimedia or digital forensic analyst may substitute for a bachelor&rsquo;s degree).Ability to lift computers that can weigh up to 50 lbs.Salary Range: $76,219 &ndash; 78,759 annually, pluscomprehensive benefit package, including health, dental and vision insurance, 401K and paid time off.State Police background check required for final candidates.Interested candidates should submit a resume and cover letter no later than November 14, 2025.Job Type: Full-timePay: From $76,219.00 per yearBenefits:<ul><li>401(k)</li><li>Dental insurance</li><li>Flexible spending account</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Work Location: In person

Digital Forensics Analyst

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

Booz Allen Hamilton

<div>Cyber Defense Forensics Analyst
The Opportunity:
As a security operations center analyst, you&rsquo;re in the middle of the action, responding to and mitigating threats in real time. You&rsquo;re the first line of cyber defense for your organization, and they look to you for guidance on best practices and security measures. We need a SOC analyst like you to help us secure critical infrastructure from the constant onslaught of cyber-attacks.
As an analyst on our team, you&rsquo;ll develop network defense skills as you learn to monitor, detect, and analyze threats by interacting directly with affected users and leveraging state-of-the-art technologies.
When an incident is detected, you&rsquo;ll work with the team to collect data to help incident response understand and mitigate the threat. You&rsquo;ll analyze alerts to figure out just how many systems are affected and initiate recovery efforts. You&rsquo;ll contribute to assessments and learn how to analyze patterns to understand attackers&rsquo; goals to stop them from succeeding. This is a great opportunity to hone your cybersecurity skills and learn more about threat assessment and incident response.
Work with us as we secure against malicious actors.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
Experience conducting digital forensics or incident response investigations within classified DoD environments</li><li>
Experience with forensic tools such as EnCase, FTK, Autopsy, Cellebrite, Volatility, or X-Ways</li><li>
Experience with SIEMS such as Splunk or ArcSight</li><li>
Knowledge of Windows, Linux, and network forensic artifacts, including memory and disk analysis</li><li>
Ability to identify, triage, and report events that occur to protect data, information systems, and infrastructure</li><li>
Ability to collect, preserve, and analyze evidence in accordance with DoD or federal chain-of-custody standards</li><li>
Ability to find trends, patterns, or correlations in security data</li><li>
TS/SCI clearance</li><li>
Bachelor&rsquo;s degree in a CS, Cybersecurity, or Digital Forensics field</li><li>
DoD 8140 baseline Level II Certification such as Security+, CySA+, CISSP, or DoD Cyber Workforce Framework Certification</li></ul>
Nice If You Have:
<ul><li>Experience supporting Cyber Protection Teams (CPTs), Defensive Cyber Operations (DCO), or Air Force cyber missions</li><li>
Experience with Elastic, Splunk, Wireshark, or MISP for multi-source data correlation</li><li>
Knowledge of malware analysis, reverse engineering, or memory forensics</li><li>
Ability to prepare and brief forensic findings to commanders or senior decision-makers</li><li>
Master&rsquo;s degree in Digital Forensics, Information Assurance, or Cybersecurity</li><li>
GCFA, GCFE, CHFI, or CEH Certifications</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $55,300.00 to $126,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Cyber Defense Forensics Analyst

Bernalillo County

<div><div>Job Posting Title:</div>
Forensic Analyst<div>
Department:</div>
Bernalillo County Sheriff's Office<div>
Location:</div>
400 ROMA AVE NW<div>
Pay:</div>
$29.49 - $46.57<div></div><div>
Close Date:</div>
November 12, 2025<div></div><div><div>
Employees at Bernalillo County enjoy the ability to team up with each other to build a high quality of life for our county residents, communities, and businesses. In addition to being an organization with a strong focus on work-life balance, building a culture of flexibility, learning, and belonging the County offers many benefits. Employees of Bernalillo County enjoy many thoughtful rewards such as, but not limited to generous leave accruals; career development opportunities; remote &amp; flex-work options as appropriate; longevity pay; education assistance program; health benefits; lucrative retirement; and so much more.</div></div> 
<div></div>
Provides expert-level intake, extraction, analysis, and reporting on criminal evidence obtained from social media and electronic device extractions. Works primarily with the Criminal Investigations Division, the Technology Division, or the Sheriff's Office to establish and follow standardized procedures for handling digital evidence. Becomes familiar with specific investigations and utilizes tools and training to reconstruct communications, locations, and the general use of mobile devices and social media related to the planning, execution, and concealment of criminal activity. Assists specialty units with investigations and creates intelligence briefs on bad actors identified through social media.<div>
DUTIES AND RESPONSIBILITIES</div><ul><li>
Intake digital evidence and perform safe data extractions, including actively monitoring social media for events that may indicate criminal activity. Capture these events safely and identify associated users.</li><li>
Create timelines and maps, and locate communications to understand the full digital footprint of crimes. Organize information related to people, scenes, vehicles, and timelines for each homicide and/or other crimes, primarily using mobile device extractions and social media warrant returns.</li><li>
Monitor dangerous online public behavior and communicate immediate threats to appropriate personnel.</li><li>
Respond to investigative and major call-outs at the direction of the division chain of command. Assist with on-scene digital evidence extraction and identification of witnesses and their backgrounds. Determine which digital media should be preserved to support the investigation.</li><li>
Master and review systems and databases that assist in identifying offenders and witnesses, including jail phone calls, multi-agency shared reporting systems, and open-source search methods.</li><li>
Maintain detailed logs for homicides and other violent crimes as deemed appropriate.</li><li>
Ensure forensic equipment remains in proper working order by installing software updates, cleaning hardware, and managing storage appropriately.</li><li>
Develop materials and lead briefings with specialized BCSO units and local/federal partners on current trends and threats identified on social media, including known crime drivers.</li><li>
Use records analysis to generate additional investigative leads and recommendations to identify emerging crime drivers.</li><li>
Conduct test-analysis and physical inspections of mobile devices to improve mapping accuracy and reporting quality in forensic examinations.</li><li>
Maintain and train personnel on social media platforms, including new and emerging technologies accessible to the public.</li><li>
Meet with prosecutors and investigative teams to provide case updates and ensure ongoing pursuit of all possible digital leads.</li><li>
Create and maintain dashboards for various criminal investigative divisions to track case statuses and performance metrics.</li><li>
Conduct field briefings for officers across the department, highlighting current trends and emerging threats.</li><li>
Develop and deliver training sessions for officers and prosecutors based on specialized expertise gained through this work.</li></ul><div><ul><li> 
The above information is intended to outline the general nature and scope of the duties required for this position. It is not an exhaustive list and may vary depending on specific job assignments and responsibilities.</li></ul></div><div></div><div> 
MINIMUM QUALIFICATIONS</div><ul><li>
Bachelor's degree in Forensic Science or Digital Forensics from an accredited college or university.</li><li>
Two (2) years of directly related experience.</li></ul><div></div><ul><li>Any equivalent combination or related education and/or experience may be considered for the above requirements.</li></ul><div></div><div> 
SUPPLEMENTAL INFORMATION</div><div></div><div>
ADDITIONAL REQUIREMENTS 
The offer of this Bernalillo County position requires compliance with the following:</div><ul><li>
Employee must successfully complete post-offer employment medical examination and background investigation.</li><li>
Employee must comply with the safety guidelines of the County.</li><li>
Employee must complete the required FEMA training(s) as assigned to the position.</li><li>
Employee must complete the required Supervisor classes if applicable.</li><li>
Employee must have a valid New Mexico driver's license by employment date and maintain a valid NM driver's license while employed in this position.</li><li>
All positions may be required to work various shifts and be scheduled per department needs.</li><li>
Employee must pass and attend the required training as assigned.</li></ul></div><div></div>

Forensic Analyst

Peraton

<div>About Peraton 
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure. 
 
Program Overview 
Encompasses technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support for Bureau of Diplomatic Security, Cyber and Technology Security Directorate in three key offices/functional areas: Cyber Monitoring and Operations, Cyber Threat and Investigations, and Technology Innovation and Engineering State. 
 
About The Role 
 
Peraton is currently seeking to hire a Sr Digital Forensic Analyst for its' Federal Strategic Cyber program.
 
 
Location: Arlington, VA - full-time, on-site role.
 
 
This Federal Strategic Cyber program encompasses technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support to aid and advise the Cyber &amp; Technology Security (CTS) Directorate. This includes protecting a global cyber infrastructure comprising networks, systems, information, and mobile devices all while identifying and responding to cyber risks and threats.
 
 
In this role, you will:
 
 
<ul><li>Serve as a senior-level digital forensic analyst conducting examinations on digital data from a variety of sources, including cellphones, tablets, computers, storage media, cloud data, and others.
</li><li>Apply recognized scientific practices for the identification, analysis, interpretation, and presentation of digital data.
</li><li>Analyze data in various examination contexts, including criminal, civil, and administrative requests.
</li><li>Perform detailed analysis of digital data in accordance with requestors' directions and search warrant specifications/limitations.
</li><li>Practice and be proficient with industry-standard forensic tools for the extraction and examination of digital data, such as Cellebrite Inseyets, Oxygen Forensic Detective, Magnet Forensics Graykey and Axiom, Nuix, X-ways, and others.
</li><li>Be proficient in the analysis of various mobile and computer operating systems, file systems, and third-party application databases.
</li><li>Write comprehensive reports of examination processes and findings for use by investigators, prosecutors, and other stakeholders in federal, state, and local judicial proceedings.
</li><li>Be able to provide expert witness testimony, explaining examination procedures and evidence interpretations to a lay audience.
</li><li>Provide on-site support during search warrant executions by identifying, collecting, packaging, documenting, and ensuring the chain of custody for digital evidence.
</li><li>Collaborate with program leadership and fellow forensic analysts to ensure that CIF maintains forensically-sound procedures and best practices in the acquisition, analysis, and presentation of digital evidence.
</li><li>Conduct thorough peer and media dissemination reviews of forensic reports and analysis artifacts to ensure high-quality work prior to customer delivery.
</li><li>Mentor new hires by sharing expertise and guiding them through CIF workflows and practical exercises to ensure a successful on-boarding process.
</li><li>Share insights and best practices with other analysts to enhance team knowledge and performance.
</li><li>Stay current with new developments and trends in digital forensics, cybersecurity, forensic law, mobile devices and applications, social media tools, and encryption/decryption methods.
</li></ul> 
Qualifications 
 
Minimum:
 
 
<ul><li>Bachelor's degree and a minimum of 9 years of experience as a digital forensic examiner in performing mobile and non-mobile analysis.
</li><li>An additional four years of experience may be substituted in lieu of degree.
</li><li>Minimum of one of the following approved forensic certifications:
</li><li>GIAC: GCFE, GASF
</li><li>IACIS: CFCE, ICMDE
</li><li>NCFI: BCERT, MDE
</li><li>DC3: CDFE, CDMC
</li><li>Opentext: EnCE
</li><li>Cellebrite: [CCO &amp; CCPA], CCME
</li><li>Oxygen Forensics: OFC
</li><li>Magnet Forensics: MCFE
</li><li>Demonstrated ability with mobile and non-mobile forensic software tools such as Magnet Axiom, Cellebrite, Oxygen, and with mobile advanced extraction hardware and software tools.
</li><li>Knowledge of Windows and MacOS, Apple iOS, Android operating systems, Android Debug Bridge (ADB), iTunes, and iCloud and Windows Backups.
</li><li>Experience writing detailed reports that simplify complex technical information to non-technical audiences.
</li><li>Demonstrated strong critical thinking, creativity, sound decision-making, and situational awareness to seek leadership guidance when needed.
</li><li>Ability to collaborate with individuals at all levels and interact tactfully, courteously, and professionally with peers and CIF end-customers.
</li><li>Ability to travel for on-scene seizures of digital evidence, training, and/or testimony.
</li><li>Serve as a senior-level digital forensic analyst, having 9+ years of experience performing mobile and non-mobile device forensics in a criminal forensic laboratory.
</li><li>Conduct digital forensic analysis of various mobile devices, computer systems, and storage media including cloud data, performing digital forensic analysis across various types of cases involving both mobile and non-mobile devices.
</li><li>Proficient in industry-standard forensic examination tools such as Cellebrite, Oxygen, Nuix, Axiom, and X-ways and similar to perform in-depth digital forensic analysis of various mobile and computer operating systems, file systems, iOS, and third-party application databases.
</li><li>Experience conducting forensic examinations on mobile and non-mobile digital evidence through the application of recognized scientific practices for the identification, analysis, interpretation, and presentation of digital evidence for criminal, civil, and administrative purposes.
</li><li>Experience providing on-site support during search warrants by identifying, collecting, packaging, handling, documenting, and ensuring the chain of custody for digital evidence.
</li><li>Experience preparing detailed reports and exhibits for judicial proceedings and provide expert testimony to explain forensic findings to non-expert audiences.
</li><li>Experience collaborating with leadership, forensic analysts, law enforcement, prosecutors, and stakeholders to deliver the highest-quality product to the customer.
</li><li>Amenable and able to stay updated on advancements in digital forensics, cybersecurity, forensic law, mobile devices, social media tools, applications, and encryption technologies.
</li><li>U.S. citizenship required.
</li><li>Ability to obtain an interim Secret clearance before start date.
</li><li>Ability to obtain a final Top-Secret security clearance.
</li></ul> 
Preferred:
 
 
<ul><li>At least one additional vendor or vendor-neutral certification is preferred but not required. This certification may come from (but is not limited to) a certification from the above or from of following:
</li><li>Cyber Crime Center (CDFE, CDMC)
</li><li>Cellebrite (CCO+CCPA)
</li><li>X-Ways (X-PERT)
</li><li>Oxygen Forensics (OFC)
</li><li>Magnet Forensics (MCFE)
</li></ul> 
SCA / Union / Intern Rate or Range 
 
Details 
 
Target Salary Range: $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
 
 
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</div>

Senior Digital Forensic Analyst

Nets-international Communication

Overview The Cybersecurity Engineer will be responsible for identifying, analyzing, and mitigating security vulnerabilities across systems, applications, and networks. This role includes conducting Vulnerability Assessments, Penetration Testing (VAPT), Digital Forensics &amp; Incident Response (DFIR), Red Team exercises, and Security Posture Assessments. The ideal candidate will have a deep understanding of frameworks such as MITRE ATT&amp;CK and OWASP, and will work to strengthen the organization&rsquo;s security defenses against evolving threats.Key ResponsibilitiesVulnerability Assessment &amp; Penetration Testing (VAPT)<ul><li>Conduct web, network, mobile, and API penetration tests using tools and manual testing methods.</li><li>Identify and exploit vulnerabilities, simulate attacks, and provide detailed remediation reports.</li><li>Perform security configuration reviews for systems, firewalls, and cloud infrastructure.</li><li>Develop automated scanning scripts and processes for continuous assessment.</li></ul>Red Teaming &amp; Threat Simulation<ul><li>Execute Red Team / Adversary Simulation exercises to evaluate real-world attack scenarios.</li><li>Map attack chains and techniques using the MITRE ATT&amp;CK framework.</li><li>Collaborate with Blue Teams to test detection, response, and containment capabilities.</li><li>Document findings and improve overall organizational cyber resilience.</li></ul>Digital Forensics &amp; Incident Response (DFIR)<ul><li>Investigate and respond to security incidents, breaches, and malware attacks.</li><li>Collect, preserve, and analyze digital evidence in line with forensic best practices.</li><li>Prepare detailed incident reports with timelines, root cause analysis, and corrective actions.</li><li>Support SOC and threat-hunting teams in real-time investigations.</li></ul>Security Posture &amp; Risk Assessment<ul><li>Conduct security posture reviews for IT assets, networks, and cloud environments.</li><li>Evaluate security controls and recommend strategies to reduce attack surface.</li><li>Perform gap analysis against industry standards (ISO 27001, NIST, CIS).</li><li>Support compliance and audit readiness initiatives.</li></ul>Security Research &amp; Development<ul><li>Stay current with emerging threats, exploits, and vulnerability disclosures.</li><li>Develop custom tools or scripts for exploit testing or automation.</li><li>Participate in bug bounty programs, CTFs, or security community contributions.</li></ul>Technical Skills &amp; ToolsVAPT Tools: Burp Suite, Metasploit, Nessus, Nmap, OWASP ZAP, Nikto, SQLMap Forensics Tools: Autopsy, FTK, EnCase, Volatility, Wireshark Red Team Tools: Cobalt Strike, Empire, BloodHound, Mimikatz, Metasploit Frameworks &amp; Methodologies: MITRE ATT&amp;CK, OWASP Top 10, NIST 800-53, CIS Controls Scripting: Python, Bash, PowerShell Cloud Security: Azure, AWS, GCP (optional but preferred) Other: SIEM (Splunk, ELK, QRadar), EDR tools, Threat Intel platformsQualifications &amp; Experience<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Cybersecurity, or a related field.</li><li>3&ndash;6 years of hands-on experience in penetration testing, incident response, or red teaming.</li><li>Strong knowledge of network protocols, system internals, and web technologies.</li><li>Familiarity with MITRE ATT&amp;CK, OWASP, and Kill Chain models.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>&#305;stanbul: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team: 4 years (Required)</li></ul>

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Overview The Cybersecurity Engineer will be responsible for identifying, analyzing, and mitigating security vulnerabilities across systems, applications, and networks. This role includes conducting Vulnerability Assessments, Penetration Testing (VAPT), Digital Forensics &amp; Incident Response (DFIR), Red Team exercises, and Security Posture Assessments. The ideal candidate will have a deep understanding of frameworks such as MITRE ATT&amp;CK and OWASP, and will work to strengthen the organization&rsquo;s security defenses against evolving threats.Key ResponsibilitiesVulnerability Assessment &amp; Penetration Testing (VAPT)<ul><li>Conduct web, network, mobile, and API penetration tests using tools and manual testing methods.</li><li>Identify and exploit vulnerabilities, simulate attacks, and provide detailed remediation reports.</li><li>Perform security configuration reviews for systems, firewalls, and cloud infrastructure.</li><li>Develop automated scanning scripts and processes for continuous assessment.</li></ul>Red Teaming &amp; Threat Simulation<ul><li>Execute Red Team / Adversary Simulation exercises to evaluate real-world attack scenarios.</li><li>Map attack chains and techniques using the MITRE ATT&amp;CK framework.</li><li>Collaborate with Blue Teams to test detection, response, and containment capabilities.</li><li>Document findings and improve overall organizational cyber resilience.</li></ul>Digital Forensics &amp; Incident Response (DFIR)<ul><li>Investigate and respond to security incidents, breaches, and malware attacks.</li><li>Collect, preserve, and analyze digital evidence in line with forensic best practices.</li><li>Prepare detailed incident reports with timelines, root cause analysis, and corrective actions.</li><li>Support SOC and threat-hunting teams in real-time investigations.</li></ul>Security Posture &amp; Risk Assessment<ul><li>Conduct security posture reviews for IT assets, networks, and cloud environments.</li><li>Evaluate security controls and recommend strategies to reduce attack surface.</li><li>Perform gap analysis against industry standards (ISO 27001, NIST, CIS).</li><li>Support compliance and audit readiness initiatives.</li></ul>Security Research &amp; Development<ul><li>Stay current with emerging threats, exploits, and vulnerability disclosures.</li><li>Develop custom tools or scripts for exploit testing or automation.</li><li>Participate in bug bounty programs, CTFs, or security community contributions.</li></ul>Technical Skills &amp; ToolsVAPT Tools: Burp Suite, Metasploit, Nessus, Nmap, OWASP ZAP, Nikto, SQLMap Forensics Tools: Autopsy, FTK, EnCase, Volatility, Wireshark Red Team Tools: Cobalt Strike, Empire, BloodHound, Mimikatz, Metasploit Frameworks &amp; Methodologies: MITRE ATT&amp;CK, OWASP Top 10, NIST 800-53, CIS Controls Scripting: Python, Bash, PowerShell Cloud Security: Azure, AWS, GCP (optional but preferred) Other: SIEM (Splunk, ELK, QRadar), EDR tools, Threat Intel platformsQualifications &amp; Experience<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Cybersecurity, or a related field.</li><li>3&ndash;6 years of hands-on experience in penetration testing, incident response, or red teaming.</li><li>Strong knowledge of network protocols, system internals, and web technologies.</li><li>Familiarity with MITRE ATT&amp;CK, OWASP, and Kill Chain models.</li></ul>Job Type: Full-timeAbility to commute/relocate:<ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul>Application Question(s):<ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team: 4 years (Required)</li></ul>

Search 10000+ Digital forensics analyst jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 digital forensics analyst jobs NEAR_ME

Digital Forensics Analyst

Cyber Security Analyst

Cyber Defense Forensics Analyst

Forensic Analyst

Senior Digital Forensic Analyst

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)

Cybersecurity Engineer / Analyst (VAPT | DFIR | Red Team | Posture Assessment)