forensic analyst

CGS Federal (Contact Government Services)

<div>
 Digital Forensic Analyst
 
 
 Employment Type: Full-Time, Mid-Level
 
 
 Department: Forensics
 
 
 CGS is seeking a Digital Forensic Analyst whose primary focus will be on the preservation &amp; collection of mobile device and cloud-stored data. This candidate should be fluent in a broad range of forensic technologies and interested in taking on a primary role in a quickly expanding forensics department. This position will include travel for on-site collection efforts as well as an in-office presence at the primary firm office which includes the forensics lab and data center. This firm prioritizes a lean-team approach and a very employee-centric culture that encourages professional growth and active roles for all team members.
 
 
 CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.
 
 
 Skills and attributes for success:
 
 
 
 <ul>
 <li>
 Perform forensic data collection and basic forensic analysis in both on-site and remote capacity
 </li>
 <li>
 Coordinate directly with legal teams/client IT departments to understand project scope
 </li>
 <li>
 Maintain forensic tool set by staying current on version updates and new options in the market
 </li>
 <li>
 Work closely with project management and other team members on completing complex projects in a fast pace, deadline-driven environment
 </li>
 <li>
 Assist in developing, documenting, and refining procedures to accomplish discovery process requirements
 </li>
 <li>
 Manage all chain of custody best practices associated with the rules of evidence
 </li>
 <li>
 Consistently adhere to standard operating procedures
 </li>
 <li>
 Perform quality checks on work products prior to delivering to the client
 </li>
 <li>
 Complete additional duties assigned by the manager including general IT functions
 
 
 
 
 
 </li>
 </ul>
 Qualifications:
 
 
 
 <ul>
 <li>
 Minimum of an undergraduate degree, preferably in Digital Forensic Science or Computer Science/Engineering
 </li>
 <li>
 1+ years of relevant experience in where the analyst understands the forensic lifecycle and can properly perform scoping activities, evidence acquisitions on a range of devices, and execute forensic analysis at an intermediate level
 </li>
 <li>
 Experience using industry standard forensic tools such as:
 </li>
 <li>
 EnCase
 </li>
 <li>
 Cellebrite
 </li>
 <li>
 Oxygen
 </li>
 <li>
 FTK Imager
 </li>
 <li>
 MacQuisition
 </li>
 <li>
 X1 Social Discovery
 </li>
 <li>
 Logicube Falcon
 </li>
 <li>
 General understanding of Mac/Windows filesystems, mobile devices, and encryption
 </li>
 <li>
 Experience preserving desktops, laptops, mobile devices/tablets, servers, both cloud and on-premise email implementations, nontraditional cloud data sources, social media, etc. in a forensically sound manner
 </li>
 <li>
 Ability to communicate effectively and tactfully in both verbally and in written format to team members and technical/non-technical clients
 </li>
 <li>
 Ability to work extended hours when necessary to ensure client deadlines are met
 </li>
 <li>
 Ability to demonstrate superior organizational skills with acute attention to detail
 </li>
 <li>
 Must be willing to travel regularly on short notice; must have a valid passport for occasional international travel
 </li>
 <li>
 Must be an energetic self-starter who can work within a team environment but also independently as the situation requires
 </li>
 <li>
 Ability to document forensic workflows based on sound industry practice
 </li>
 <li>
 Willingness to develop/train other team members to increase the group&rsquo;s overall knowledge base as well as cultivate secondary resources to assist in larger collection events
 </li>
 <li>
 Strong troubleshooting skills coupled with the ability to solve on the fly to solve complex problems
 
 
 
 
 
 </li>
 </ul>
 Ideally, you will also have:
 
 
 
 <ul>
 <li>
 Understanding of the electronic discovery reference model (EDRM)
 </li>
 <li>
 Possess at least one industry-standard certification (EnCE, CCE, CCFE, GCFE, GCFA, CCO, CCPA, CCME, etc.)
 </li>
 <li>
 General knowledge of litigation support applications (e.g. Relativity, Concordance, Nuix, LAW PreDiscovery, etc.)
 </li>
 <li>
 Experience working with structured data exported from various platforms including analysis, custom scripting, and data manipulation to develop reports for client use
 </li>
 <li>
 Understanding of (Robo/Rich) copy tools, BAT (PowerShell) scripting, and Active Directory
 </li>
 <li>
 Experience with scripting, programming/coding, and database languages (SQL, VB, HTML, Access)
 
 
 
 
 
 </li>
 </ul>
 Our Commitment:
 
 
 Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems.
 
 
 For the past seven years, we&rsquo;ve been growing our government-contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.
 
 
 Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come.
 
 
 We care about our employees. Therefore, we offer a comprehensive benefits package.
 
 
 
 <ul>
 <li>
 Health, Dental, and Vision
 </li>
 <li>
 Life Insurance
 </li>
 <li>
 401k
 </li>
 <li>
 Flexible Spending Account (Health, Dependent Care, and Commuter)
 </li>
 <li>
 Paid Time Off and Observance of State/Federal Holidays
 
 
 
 
 
 </li>
 </ul>
 Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
 
 
 Join our team and become part of government innovation!
 
 
 Explore additional job opportunities with CGS on our Job Board:
 
 
 https://cgsfederal.com/join-our-team/
 
 
 For more information about CGS please visit: https://www.cgsfederal.com or contact:
 
 
 Email: info@cgsfederal.comDigital Forensic Analyst
 
 
 Employment Type: Full-Time, Mid-Level
 
 
 Department: Forensics
 
 
 CGS is seeking a Digital Forensic Analyst whose primary focus will be on the preservation &amp; collection of mobile device and cloud-stored data. This candidate should be fluent in a broad range of forensic technologies and interested in taking on a primary role in a quickly expanding forensics department. This position will include travel for on-site collection efforts as well as an in-office presence at the primary firm office which includes the forensics lab and data center. This firm prioritizes a lean-team approach and a very employee-centric culture that encourages professional growth and active roles for all team members.
 
 
 CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.
 
 
 Skills and attributes for success:
 
 
 
 <ul>
 <li>
 Perform forensic data collection and basic forensic analysis in both on-site and remote capacity
 </li>
 <li>
 Coordinate directly with legal teams/client IT departments to understand project scope
 </li>
 <li>
 Maintain forensic tool set by staying current on version updates and new options in the market
 </li>
 <li>
 Work closely with project management and other team members on completing complex projects in a fast pace, deadline-driven environment
 </li>
 <li>
 Assist in developing, documenting, and refining procedures to accomplish discovery process requirements
 </li>
 <li>
 Manage all chain of custody best practices associated with the rules of evidence
 </li>
 <li>
 Consistently adhere to standard operating procedures
 </li>
 <li>
 Perform quality checks on work products prior to delivering to the client
 </li>
 <li>
 Complete additional duties assigned by the manager including general IT functions
 
 
 
 
 
 </li>
 </ul>
 Qualifications:
 
 
 
 <ul>
 <li>
 Minimum of an undergraduate degree, preferably in Digital Forensic Science or Computer Science/Engineering
 </li>
 <li>
 1+ years of relevant experience in where the analyst understands the forensic lifecycle and can properly perform scoping activities, evidence acquisitions on a range of devices, and execute forensic analysis at an intermediate level
 </li>
 <li>
 Experience using industry standard forensic tools such as:
 </li>
 <li>
 EnCase
 </li>
 <li>
 Cellebrite
 </li>
 <li>
 Oxygen
 </li>
 <li>
 FTK Imager
 </li>
 <li>
 MacQuisition
 </li>
 <li>
 X1 Social Discovery
 </li>
 <li>
 Logicube Falcon
 </li>
 <li>
 General understanding of Mac/Windows filesystems, mobile devices, and encryption
 </li>
 <li>
 Experience preserving desktops, laptops, mobile devices/tablets, servers, both cloud and on-premise email implementations, nontraditional cloud data sources, social media, etc. in a forensically sound manner
 </li>
 <li>
 Ability to communicate effectively and tactfully in both verbally and in written format to team members and technical/non-technical clients
 </li>
 <li>
 Ability to work extended hours when necessary to ensure client deadlines are met
 </li>
 <li>
 Ability to demonstrate superior organizational skills with acute attention to detail
 </li>
 <li>
 Must be willing to travel regularly on short notice; must have a valid passport for occasional international travel
 </li>
 <li>
 Must be an energetic self-starter who can work within a team environment but also independently as the situation requires
 </li>
 <li>
 Ability to document forensic workflows based on sound industry practice
 </li>
 <li>
 Willingness to develop/train other team members to increase the group&rsquo;s overall knowledge base as well as cultivate secondary resources to assist in larger collection events
 </li>
 <li>
 Strong troubleshooting skills coupled with the ability to solve on the fly to solve complex problems
 
 
 
 
 
 </li>
 </ul>
 Ideally, you will also have:
 
 
 
 <ul>
 <li>
 Understanding of the electronic discovery reference model (EDRM)
 </li>
 <li>
 Possess at least one industry-standard certification (EnCE, CCE, CCFE, GCFE, GCFA, CCO, CCPA, CCME, etc.)
 </li>
 <li>
 General knowledge of litigation support applications (e.g. Relativity, Concordance, Nuix, LAW PreDiscovery, etc.)
 </li>
 <li>
 Experience working with structured data exported from various platforms including analysis, custom scripting, and data manipulation to develop reports for client use
 </li>
 <li>
 Understanding of (Robo/Rich) copy tools, BAT (PowerShell) scripting, and Active Directory
 </li>
 <li>
 Experience with scripting, programming/coding, and database languages (SQL, VB, HTML, Access)
 
 
 
 
 
 </li>
 </ul>
 Our Commitment:
 
 
 Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems.
 
 
 For the past seven years, we&rsquo;ve been growing our government-contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.
 
 
 Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come.
 
 
 We care about our employees. Therefore, we offer a comprehensive benefits package.
 
 
 
 <ul>
 <li>
 Health, Dental, and Vision
 </li>
 <li>
 Life Insurance
 </li>
 <li>
 401k
 </li>
 <li>
 Flexible Spending Account (Health, Dependent Care, and Commuter)
 </li>
 <li>
 Paid Time Off and Observance of State/Federal Holidays
 
 
 
 
 
 </li>
 </ul>
 Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
 
 
 Join our team and become part of government innovation!
 
 
 Explore additional job opportunities with CGS on our Job Board:
 
 
 https://cgsfederal.com/join-our-team/
 
 
 For more information about CGS please visit: https://www.cgsfederal.com or contact:
 
 
 Email: info@cgsfederal.com
 
 
 #CJ
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
</div>

Digital Forensic Analyst I

Akima

<div>Company Overview:
<div></div><div>
Work Where it Matters</div><div></div><div> 
Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.</div><div></div><div> 
At Suvi, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.</div><div></div><div> 
For our shareholders, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</div><div></div><div> 
For our government customers, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers&rsquo; missions safely, securely, and efficiently.</div><div></div><div> 
As a Suvi employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</div>
Description:
<div>
Suvi is looking for a Forensic Data Analyst to support our government client and work in Fairfax and Arlington, VA. To join our team of outstanding professionals, apply today!</div>
Responsibilities:
<ul><li>Meet with field users to determine their forensic data requirements.</li><li>
Perform forensic data collection and lawfully access and extract encrypted or inaccessible data from devices.</li><li>
Ensure conformance with Government established Forensics SOPs and regulations.</li><li>
Conduct full physical extractions whenever possible.
</li><li>Ability to testify for assigned investigations.</li><li>
Conduct trial preparation and planning as required.</li><li>
Conform with the high standard of information and evidence handling.</li><li>
Responsible for maintaining physical presence at Government Facilities.</li><li>
Manage Forensic Intake system and conduct examinations in accordance with performance.</li></ul>
Qualifications:
<ul><li>Be a U.S. Citizen and meet High Risk, Law Enforcement Sensitive background, and ability to obtain and maintain a Public Trust clearance.</li><li>
Minimum 3 years of professional experience conducting forensic examinations on mobile devices, and minimum 3 years of experience in a position of testimony-related professional experience.</li><li>
Ability to work embedded with field office and headquarters components of federal law enforcement. This includes having the ability to operate as a member of team in an often-high stress high tempo office environment.</li><li>
Active Cellebrite Certified Mobile Examiner (CCME) certification.</li></ul><div>
Desired Qualifications:</div><ul><li>
Bachelor's degree.</li><li>
Minimum 1 year of experience supporting law enforcement agencies with direct interaction with and support of investigators.</li><li>
GrayKey Operator certification.</li></ul>
Job ID: 2026-22216 Work Type: On-Site</div>

Forensic Data Analyst

Nightwing

<div>Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers&rsquo; most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.
The DHS&rsquo;s Hunt and Incident Response Team (HIRT) secures the nation&rsquo;s infrastructure. HIRT provides DHS&rsquo;s front-line response for cyber incidents and proactive hunting for malicious cyber activity. Nightwing provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. Nightwing provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. Nightwing is seeking Incident Response Experts to support this critical customer mission.
This position will require physical presence in the National Capital Region (NCR) for at least 1 week for training and orientation. Subsequent work will be primarily supported outside the NCR.
Responsibilities:<ul><li>Serves as hunt and incident response subject matter expert (SME), possessing in-depth knowledge on subjects relating to the conduct, activities, or operation of NCCIC HIRT in a surge capacity</li><li>Distills analytic findings into executive summaries and in-depth technical reports</li><li>Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities</li><li>Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives</li><li>Exercises considerable latitude in determining technical objectives of an assignment or task at hand</li><li>Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity</li><li>Guides the completion of hunt and incident response activities</li></ul>
Required Skills:<ul><li>U.S. Citizenship</li><li>Must have an active TS/SCI clearance</li><li>Must be able to obtain DHS Suitability</li><li>8+ years of directly relevant experience in the area of expertise</li><li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])</li></ul>
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)<ul><li>Must be able to travel domestically on short notice</li><li>Ability to think independently</li><li>Demonstrates superior written and oral communication skills</li><li>Must be able to work collaboratively across physical locations</li><li>Skilled in identifying different classes of attacks and attack stages</li><li>Understanding of system and application security threats and vulnerabilities</li><li>Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources</li><li>Proficiency with common operating systems (e,g, Linux/Unix, Windows)</li></ul> 
Desired Skills:<ul><li>Experience leading and mentoring technical teams</li><li>Knowledge of Computer Network Defense policies, procedures and regulations</li><li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])</li></ul>
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)<ul><li>WireShark</li><li>Splunk</li><li>Snort</li></ul> 
Required Education: 
BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma &amp; 10+ years of technical experience in the area of expertise.
Desired Certifications: One or more<ul><li>DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst</li><li>DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder</li><li>DoD 8140.01 CEH, CSSP Analyst</li><li>SANS GIAC GNFA preferred</li><li>SANS GRID, GICSP, or GCIP a plus</li></ul>
At Nightwing, we value collaboration and teamwork. You&rsquo;ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we&rsquo;ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients. 
Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.
Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.</div>

Cyber Host Forensic Analyst IV

HilltopSecurities

<div>HilltopSecurities is looking to hire a FST Analyst. The qualified FST Analyst will join a rapidly growing strategies team by supporting fixed-income analytics and reporting. This on-site role requires meticulous attention to detail, strong financial acumen, and critical thinking to automate workflows, validate data, and deliver professional client materials. The ideal candidate thrives in a fast‑paced, detail‑driven environment, takes ownership of deliverables, and is comfortable supporting senior strategists and external clients with minimal hand‑holding.</div>
 <div><ul><li>Bachelor&rsquo;s in Finance, Accounting, Economics, Math/Stats, Data Science, or related field.
</li><li>Licensing: SIE + Series 7 + Series 63 (or obtained within firm-mandated timeline).
</li><li>Asset/Liability Management and/or Investment Accounting knowledge a plus.
</li><li>Knowledge of fixed-income securities and analytics (yield curve, spread, duration/convexity), balance sheets and income statements.
</li><li>Strong communication skills and ability to work in a team environment with client-facing etiquette &amp; reliable follow-through.
</li><li>Strong Excel skills required, including advanced formulas, data validation, and professional formatting for client deliverables.
</li>Experience with programming language such as Python, R, VBA, .NET, and/or experience with databases (SQL) a plus. 
<li>
</li></ul>The above statements are intended to describe the general nature and level of work being performed by individuals in, or assigned to, the above position and are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required, and may be changed at the discretion of the Company.</div>
 <div><ul><li>Prepare and quality-check daily/weekly portfolio, performance, and exposure reports; log, track, and resolve discrepancies with documented root-cause notes.
</li><li>Processing of Profit/Risk Manager (ALM and Forecasting) and Portfolio Manager (accounting) models for assigned financial institutions, ensuring accurate execution, quality control, and timely delivery of analytics.
</li><li>Support new client onboarding, including data intake, system setup, and walkthroughs of Balance Sheet Strategy.
</li><li>Provide client‑facing support, troubleshooting issues, offering technical guidance, and delivering ongoing assistance.
</li><li>Perform balance sheet and investment portfolio analysis to inform strategy (funding mix, duration positioning, liquidity impacts), and proactively surface insights and risks to internal and external clients.
</li><li>Engage professionally with internal teams and clients: join meetings, capture action items, and follow through on deliverables.
</li><li>Create client-ready slides and memos that present complex topics clearly and professionally; proofread for accuracy, consistency, and target objectives.
</li><li>Collaborate with Financial Strategy Team (FST) Analysts through knowledge‑sharing, training support, recurring team activities, and timely handling of ad‑hoc requests.
</li><li>Contribute to SOPs (standard operating procedures), data dictionaries, and documentation that support scale, onboarding, and handoffs; standardize templates to support team alignment for reports and offer sheets.
</li><li>Build and maintain scripts (Python, R, .NET, VBA) and SQL queries to streamline data ingestion, validation, and transformation; debug issues independently and implement basic unit checks for reliability and accuracy.
</li><li>Monitor key economic indicators and policy developments; summarize implications for fixed-income portfolios and upcoming client discussions.
</li><li>Support recurring team activities: distribute inventory to sales; field ad-hoc requests promptly with documented follow-ups; assist with offer sheet updates, assist in trade and presentation development for senior strategists.</li></ul></div>

FST Analyst

Deloitte

<div>
 
 Cyber Security I Incident Response Tech Lead
 
 
 ,
 
 
 Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 
 Responsibilities
 
 
 
 As a
 
 Digital Forensics Incident Response Tech Lead
 
 , you will be assisting clients with response to Cyber Incidents and getting back to business. This includes data leaks, ransomware, and unusual network traffic caused by cyber criminals, ranging from insider threats to nation-state sponsored hackers. Your role would also include the following responsibilities:
 
 
 <ul>
 <li>
 Technical investigations of cyber incidents: analysis of log files, Windows event logs (windows artifacts), Linux artifacts to correlations in EDR tooling, network monitoring tools and SIEM, example of toolsets that we typically work with are Splunk, Microsoft Security Suite and CrowdStrike Falcon. It&rsquo;s most important that you can apply knowledge about (windows) forensic artifacts in any platform we face at our clients.
 </li>
 <li>
 In-depth analysis of malware, threat intelligence and other relevant sources.
 </li>
 <li>
 Tactical support such as advice on triage, containment, eradication, and broader coordination in cyber incidents.
 </li>
 <li>
 Forensic analysis of systems and networks.
 </li>
 <li>
 Memory forensics.
 </li>
 <li>
 Performing Compromise Assessments and Threat Hunting projects in SIEM and EDR tooling.
 </li>
 <li>
 Creation of custom scripts (using python) for parsing special log files, data sets and images, etc.
 </li>
 <li>
 Creation of complex timelines based on findings and observations.
 </li>
 <li>
 Member of the broader Deloitte Response Team, adding CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
 </li>
 <li>
 Part of the EMEA and Global technical incident responder community to build a strong network and share knowledge base.
 </li>
 <li>
 Flexible working hours to support the customer during high-impact incidents.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 To succeed in this role, you need to have the following:
 
 
 <ul>
 <li>
 Master&rsquo;s or bachelor&rsquo;s degree in computer science (or related field).
 </li>
 <li>
 One or more Forensics Certifications such as GCIH, GCFE, GCFA, GNFA, GREM.
 </li>
 <li>
 At least 3 years of experience in Cyber Incident Response and digital forensics.
 </li>
 <li>
 Minimum 6 years of experience in Cyber Security domain
 </li>
 <li>
 Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
 </li>
 <li>
 Affinity with offensive security work (pentesting etc.) is beneficial.
 </li>
 <li>
 Posses strong passion for ransomware intelligence and work well in challenging situations, you can see both the bigger picture, as well as the smallest traces
 </li>
 <li>
 Experience in systems and/or network administration is a highly advantageous.
 </li>
 <li>
 Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
 </li>
 <li>
 Trust and Confidentiality in handling client sensitive information.
 </li>
 <li>
 Ability to prioritize and take ownership, even when in unchartered territory.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Essential
 
 
 
 <ul>
 <li>
 Strong written, verbal and presentation skills.
 </li>
 <li>
 A willingness to work as part of a diverse team.
 </li>
 <li>
 A commitment to continuous improvement and lifelong learning.
 </li>
 <li>
 A passion for technology and a drive to deliver secure, high-quality solutions.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal abilities.
 </li>
 <li>
 Ability to work effectively in a fast-paced and dynamic environment.
 </li>
 <li>
 Proactive and self-motivated with a keen attention to detail.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Tech Lead, Cairo, Egypt.

Search 3569+ Forensic analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

3569 forensic analyst jobs Near Me

Digital Forensic Analyst I

Digital Forensic Analyst I

Digital Forensic Analyst I

Forensic Data Analyst

Cyber Host Forensic Analyst IV

FST Analyst

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Tech Lead, Cairo, Egypt.