digital forensics investigator

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Digital Forensics Engineer Job Description</h1>
Position Title: Digital Forensics Engineer 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Digital Forensics Engineer supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by providing advanced digital forensics, incident response, cyber investigation, evidence preservation, malware analysis, and e-discovery support services. 
The Digital Forensics Engineer conducts complex forensic examinations involving workstations, servers, cloud platforms, mobile devices, email systems, network traffic, and enterprise applications in support of cybersecurity investigations, incident response activities, insider threat investigations, legal support actions, and enterprise cyber defense operations. The role supports 24x7x365 Security Operations Center (SOC) functions and coordinates closely with federal stakeholders, incident responders, threat hunters, legal teams, privacy personnel, and law enforcement partners.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Perform advanced digital forensic analysis and investigations in support of SBA ECS cybersecurity operations requirements.</li><li>
Support Task Areas 3.5.3 and 3.5.3.6 by conducting forensic examinations related to cybersecurity incidents, insider threats, malware infections, unauthorized access, and data exfiltration.</li><li>
Collect, preserve, analyze, and document digital evidence in accordance with federal forensic standards and chain-of-custody procedures.</li><li>
Perform host-based, network-based, cloud-based, and mobile device forensic investigations across enterprise environments.</li><li>
Conduct forensic acquisition and analysis of Windows, Linux, macOS, cloud, virtualized, and hybrid systems.</li><li>
Analyze endpoint telemetry, security logs, network packet captures (PCAP), SIEM data, and forensic artifacts to identify indicators of compromise (IOCs) and adversary activity.</li><li>
Support incident response activities by reconstructing attack timelines, determining root cause, identifying attack vectors, and assessing operational impact.</li><li>
Perform malware analysis and reverse engineering support activities to identify malicious behaviors, persistence mechanisms, and command-and-control communications.</li><li>
Support e-discovery operations including collection, indexing, preservation, processing, and review of electronically stored information (ESI).</li><li>
Conduct forensic examinations supporting legal, Inspector General (IG), Human Resources (HR), insider threat, privacy, and law enforcement investigations.</li><li>
Utilize forensic and cyber defense tools including EnCase, FTK, Velociraptor, Wireshark, Volatility, Splunk, Microsoft Defender, Sentinel, and endpoint detection and response (EDR) platforms.</li><li>
Perform memory analysis, disk analysis, registry analysis, browser artifact analysis, and log correlation activities.</li><li>
Develop forensic reports, technical findings, evidentiary documentation, executive briefings, and remediation recommendations.</li><li>
Maintain detailed forensic documentation, evidence handling procedures, and chain-of-custody records.</li><li>
Support cybersecurity monitoring, detection, containment, eradication, and recovery activities within the SOC environment.</li><li>
Coordinate with SOC analysts, incident responders, threat hunters, engineers, and federal stakeholders during cyber investigations and breach response activities.</li><li>
Support continuous improvement of forensic methodologies, investigative procedures, and cybersecurity operational capabilities.</li><li>
Assist with the development and maintenance of digital forensic playbooks, standard operating procedures (SOPs), and incident handling guidance aligned with NIST SP 800-61 and NIST SP 800-86.</li><li>
Research emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and evolving forensic technologies.</li><li>
Support federal cybersecurity compliance requirements, reporting activities, and operational readiness initiatives.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Digital Forensics, Information Assurance, Information Technology, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 8 years of experience supporting digital forensics, cyber investigations, incident response, cybersecurity operations, or Security Operations Center (SOC) environments.</li><li>
Hands-on experience conducting enterprise-level forensic investigations and evidence analysis.</li><li>
Experience with forensic acquisition and analysis tools including EnCase, FTK, X-Ways, Velociraptor, Volatility, or equivalent technologies.</li><li>
Experience analyzing Windows, Linux, cloud, mobile, and network forensic artifacts.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting legal hold, e-discovery, insider threat, and regulatory investigation activities.</li><li>
Experience with SIEM, EDR, IDS/IPS, packet analysis, and security monitoring technologies.</li><li>
Strong understanding of NIST cybersecurity standards including NIST SP 800-61 and NIST SP 800-86.</li><li>
Ability to prepare technical forensic reports and present investigative findings to technical and executive stakeholders.</li><li>
Strong analytical, investigative, communication, and technical documentation skills.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
EnCase Certified Examiner (EnCE)</li><li>
Certified Computer Examiner (CCE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA CySA+</li><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul>
6HY6JyRiD8</div>

SBA - Digital Forensics Engineer

Alignerr

<div>
 
 Incident Response Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 We're partnering with leading AI research labs to build the next generation of AI-powered security tools &mdash; and we need experienced incident responders to help make them real.
 
 
 As an Incident Response Analyst, you'll work with realistic security incident data to evaluate, challenge, and improve AI systems designed to detect threats, correlate alerts, and support digital investigations. Your hands-on experience in security operations is exactly what's needed to make AI smarter and more accurate in this domain.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Analyze real-world security events, alerts, and incident cases
 </li>
 <li>
 Identify root cause, assess impact, and determine appropriate remediation steps
 </li>
 <li>
 Evaluate detection rules, alerting pipelines, and investigative playbooks for accuracy and effectiveness
 </li>
 <li>
 Review and validate AI-generated incident analysis to ensure it reflects how real SOC teams operate
 </li>
 <li>
 Provide structured, expert feedback that directly shapes how AI handles security investigations
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 2+ years of hands-on experience in SOC, incident response, or security operations
 </li>
 <li>
 Proficient with SIEM platforms, alert queues, and investigation tooling
 </li>
 <li>
 Skilled at separating meaningful threats from noise in high-volume alert environments
 </li>
 <li>
 Detail-oriented with strong written communication skills
 </li>
 <li>
 Self-motivated and comfortable working independently on async, task-based assignments
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience with threat hunting, digital forensics, or malware analysis
 </li>
 <li>
 Familiarity with frameworks like MITRE ATT&amp;CK or NIST IR
 </li>
 <li>
 Background in cloud security, endpoint detection, or network forensics
 </li>
 <li>
 Prior experience in AI data annotation or evaluation workflows
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work directly on frontier AI systems alongside top research labs
 </li>
 <li>
 Fully remote and flexible &mdash; work on your own schedule
 </li>
 <li>
 Freelance perks: autonomy, variety, and global collaboration
 </li>
 <li>
 Meaningful impact &mdash; your expertise helps define how AI understands cybersecurity
 </li>
 <li>
 Potential for ongoing work and contract extension
 </li>
 </ul>
</div>

Incident Response Analyst

Fortinet

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines. 
</div>Responsibilities:
<ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li>Continue to focus on process improvement for the customer facing incident response services
</li><li>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</li><li>Conduct network forensics and log analysis during IR engagements
</li><li>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</li><li>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</li><li>Develop complete and informative reports and presentations for both executive and technical audience
</li><li>Availability during nights/weekends as needed for IR engagements 
</li></ul>Required Skills:
<ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul>Education:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

Asyad Group

Asyad oversees Oman&rsquo;s logistics ecosystem including ports, shipping, and freight services.As a Cyber Security at Asyad Group - this role focuses on detecting, investigating, and responding to cyber threats to protect an organization&rsquo;s systems, data, and critical infrastructure.Job Description:1. Incident Detection &amp; ResponseMonitor security alerts using SIEM toolsInvestigate suspicious activities and cyberattacksPerform incident triage, analysis, and containment2. Threat Hunting &amp; MonitoringProactively search for hidden threats in systemsAnalyze logs (firewalls, endpoints, network traffic)Use tools like:EDR/XDR (e.g., CrowdStrike, SentinelOne)3. Digital Forensics &amp; InvestigationConduct malware analysis and forensic investigationsIdentify root cause of incidentsAssess scope and impact of breaches4. Containment &amp; RecoveryIsolate affected systemsRemove threats and restore operationsDevelop remediation plans5. Documentation &amp; ReportingCreate incident reports and post-mortem analysisRecommend security improvementsMaintain incident logs and compliance records6. CollaborationWork with:SOC (Security Operations Center) teamsIT and network teamsExternal cybersecurity vendors7. Security ImprovementImprove incident response processesDevelop playbooks and automationStay updated on emerging cyber threatsRequirements:Bachelor&rsquo;s degree in IT, Cybersecurity, or related fieldCertifications (preferred):CISSPCEHCompTIA CySA+ / Security+Experience:2&ndash;5 years (junior-mid)5+ years (senior roles)Job Type: Full-timePay: From RO1,500.000 per monthWork Location: In person

Cybersecurity / Incident Response Specialist (Asyad Group)

Tri-Tech Forensics, Inc.

The Multimedia Marketing Specialist supports the development and execution of visual and digital marketing initiatives across the organization. This role is responsible for producing accurate, compliant, and visually effective materials for medical and forensic product lines, while also contributing to customer engagement through targeted marketing campaigns. This position reports to the Marketing DirectorPrimary Duties<ul><li>Perform basic product photography duties and edit product photos for e-commerce site, catalogs and social media.</li><li>Typeset forms, instruction sheets, envelopes and other custom materials for forensics and medical collection kits.</li><li>Assist with packaging design and compliance, working with the Quality department to ensure labels and packaging meets industry standards and changes are tracked appropriately</li><li>Create collateral for trade shows, training courses, company websites and social media as needed.</li></ul>Additional Marketing Duties<ul><li>Collaborate with content and creative teams to develop compelling email marketing content as needed.</li><li>Use analytics and available tools to personalize and advise on content.</li></ul>Minimum Qualifications<ul><li>Four-Year degree or equivalent.</li><li>2+ years experience in a marketing role or equivalent</li><li>Proficiency in Adobe InDesign, Photoshop and Canva</li><li>Organizational skills and a willingness to learn are essential.</li><li>Proven ability to manage multiple projects simultaneously, completing them on time and within budget.</li></ul>Preferred Qualifications<ul><li>Experience in the first-responder / medical field</li><li>Understanding of and experience with email marketing platforms (Klaviyo, MailChimp, etc.)</li><li>Familiarity with Shopify or other e-commerce platforms</li><li>Project management experience</li></ul>Pay: $52,000.00 - $57,000.00 per yearBenefits:<ul><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Flexible spending account</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Work Location: In person

Graphic Design & Marketing Specialist

Lemieux & Associates

<div>
 Come grow with us! Lemieux &amp; Associates, a national leader in the investigative industry, is seeking experienced Field Investigators in the Brooklyn, NY or surrounding area. This is a part-time position for the right individual. The owners are entrepreneurial, experienced field investigators, each with over 25 years of experience. We understand the job and never forgot our roots in the field. We are dedicated professionals with a motivational management style with proven ability to recruit, develop and direct highly successful teams that consistently excel.
 
 
 
 You must have surveillance experience as a Private Investigator, SIU/Claims investigation experience and reside in the Buffalo or surrounding area. Please submit your resume and complete the questionnaire. If you do not complete the questionnaire, your resume will not be accepted.
 
 
 
 
 Job Classification: Non-Exempt
 
 
 
 
 Position Summary
 
 
 
 A part-time investigator familiar with New York State Insurance Fund surveillance &amp; SIU/Claims investigations is needed to cover the Buffalo and surrounding area. Applicants must be timely with follow-up and have experience conducting surveillance &amp; SIU/Claims investigation specifically for NYSIF. The investigator must also be familiar with NYSIF protocols and be able to follow all directives and policies in place.
 
 
 Note: If an applicant is currently on another agencies NYSIF Personnel Spreadsheet, they must be removed prior to employment with Lemieux &amp; Associates as a NYSIF investigator.
 
 
 
 Essential Job Functions
 
 
 
 <ul>
 <li>
 Conducting surveillance assignments within investigation parameters and special instructions
 </li>
 <li>
 Conducting PDFR's (Alive and Well checks), Beneficiary Field Reviews, Claimant/Employer Interviews, and Forms assignments.
 </li>
 <li>
 The investigator must also be familiar with NYS WCB forms and be able to determine whether the acquired forms are acceptable for submission to the WCB by the client.
 </li>
 <li>
 Investigators are expected to be able to discreetly determine information such as the subject's identity, whereabouts, and any other investigative procedures that may include direct contact as the investigation warrants.
 </li>
 <li>
 Surveillance typically is conducted in four-hour blocks but is subject to change, with multiple blocks worked per day.
 </li>
 <li>
 The investigator is also expected to follow procedures and protocols laid out by Lemieux &amp; Associates as well as the client.
 </li>
 <li>
 Testifies to the facts collected in any hearing or court of law.
 </li>
 <li>
 Other assignments and projects as dictated by business need or management direction.
 
 
 </li>
 </ul>
 
 Required Skills And Abilities
 
 
 
 <ul>
 <li>
 Working Knowledge of Windows, Microsoft Office, Internet Explorer, and Adobe Acrobat
 </li>
 <li>
 Effective written communication skills and report writing
 </li>
 <li>
 Strong organizational and time management skills
 </li>
 <li>
 Demonstrated strong interpersonal communication skills and the ability to effectively build rapport
 </li>
 <li>
 Ability to make timely phone calls as necessary to facilitate an interview
 </li>
 <li>
 Ability to conduct interviews with employers and claimants thoroughly while following procedures and protocols laid out by Lemieux &amp; Associates as well as the client
 </li>
 <li>
 Flexibility to work varied/irregular hours and days including holidays and weekends
 </li>
 <li>
 Able to work well independently
 </li>
 <li>
 Able to travel extensively throughout assigned territory and effectively manage expenses
 </li>
 <li>
 Possess a reliable vehicle, digital camera and computer with Windows Operating
 </li>
 <li>
 Possess a valid state-issued driver's license
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Experience conducting surveillance as a private investigator is a must
 </li>
 <li>
 Bi-lingual is a plus
 </li>
 <li>
 Possess a valid state-issued driver's license
 </li>
 <li>
 Possess a reliable vehicle, digital camera and computer with Windows Operating System, Microsoft Word and Internet connection
 
 
 </li>
 </ul>
 
 Physical Demands And Work Environment
 
 
 
 While performing the duties of this job, the employee is typically in the community. The employee is regularly required to spend long periods of time in an automobile or other location for surveillance purposes. Regularly operates a video camera, computer, and cellular telephone. Communicates on a regular basis with supervisors, clients, and staff via telephone and email. The noise level in the work environment is usually moderate.
 
 
 Salary: $25 - $30 per hour
</div>

Buffalo, NY NYSIF Surveillance & SIU Investigator

The Holding Group of Companies

We are seeking a skilled and proactive Cyber Security Specialist to join our team in Doha, Qatar. The ideal candidate will be responsible for protecting our organization&rsquo;s systems, networks, and data from cyber threats. You will play a key role in identifying vulnerabilities, implementing security measures, and ensuring compliance with security standards.Key Responsibilities:<ul><li>Monitor network traffic and systems for security breaches or suspicious activity</li><li>Identify vulnerabilities and implement appropriate countermeasures</li><li>Conduct regular security assessments, audits, and penetration testing</li><li>Develop and enforce security policies, procedures, and best practices</li><li>Respond to incidents and provide timely resolution and reporting</li><li>Manage firewalls, intrusion detection/prevention systems, and antivirus solutions</li><li>Ensure compliance with local and international cybersecurity standards</li><li>Provide security awareness training to staff</li><li>Stay up to date with the latest cybersecurity trends, threats, and technologies</li></ul>Requirements:<ul><li>Bachelor&rsquo;s degree in Cyber Security, Information Technology, Computer Science, or a related field</li><li>Minimum 2&ndash;3 years of experience in cybersecurity or information security roles</li><li>Strong knowledge of network security, firewalls, VPNs, and IDS/IPS systems</li><li>Familiarity with security frameworks and standards (ISO 27001, NIST, etc.)</li><li>Experience with vulnerability assessment tools and SIEM solutions</li><li>Understanding of operating systems (Windows, Linux) and cloud security is a plus</li><li>Relevant certifications such as CEH, CISSP, CompTIA Security+ are preferred</li><li>Strong analytical and problem-solving skills</li><li>Excellent communication and documentation skills</li></ul>Preferred Skills:<ul><li>Experience in incident response and digital forensics</li><li>Knowledge of scripting or programming (Python, PowerShell, etc.)</li><li>Familiarity with cloud platforms (AWS, Azure, Google Cloud)</li></ul>Benefits:<ul><li>Competitive salary package</li><li>Health insurance</li><li>Professional development and certification support</li><li>Dynamic and collaborative work environment</li></ul>Job Type: PermanentPay: From QAR3,500.00 per monthWork Location: In person

Cyber Security Specialist

Search 7816+ Digital forensics investigator jobs near you this May. New roles added regularly across leading industries. Apply today.