← All roles

Digital Forensics and Incident Analyst (Active Top Secret Required)

Agile Defense· Cybersecurity – IA and Compliance
Apply on company site
Washington, DCRegularPosted 3mo ago

About the role

Digital Forensics & Incident Analyst supporting Threat Analysis & Investigations (TA&I) in analyzing digital evidence and investigating computer security incidents to support vulnerability mitigation, incident response, and advanced analysis within the enterprise SOC and allied centers.

Responsibilities

  • Analyze log files, evidence, and other information to determine the best methods for identifying the perpetrator(s) of a network intrusion. (T0027)
  • Confirm what is known about an intrusion and discover new information via dynamic analysis. (T0036)
  • Provide technical summaries of findings in accordance with established reporting procedures, and deliver written analysis reports to requesting customers. (T0075)
  • Examine recovered data for information relevant to the matter at hand. (T0103)
  • Perform file signature analysis (T0167) and file system forensic analysis across implementations such as NTFS, FAT, and EXT. (T0286)
  • Collect and analyze intrusion artifacts (e.g., source code, malware, system configuration) and use discovered data to enable mitigation of potential cyber defense incidents. (T0432)
  • Conduct malware analysis to identify obfuscation techniques and interpret debugging results to ascertain adversary TTPs
  • Determine the extent of threats and recommend countermeasures to mitigate risk; analyze crises for protection of people and resources.
  • Identify data concealment methods (e.g., encryption, steganography) and conduct memory dumps to extract information.
  • Conduct security event analysis and correlation using enterprise tooling; apply network security architecture concepts to forensic analysis.
  • Determine physical computer components and architectures; conduct physical disassembly and modify/manipulate system components within Windows, Unix, or Linux.
  • Apply system administration, network, and OS hardening techniques; use virtualization environments for analysis.
  • Conduct hashing for chain-of-custody and preserve evidence integrity.
  • Support the full evidence lifecycle and interpret insider-threat investigations, reporting, tools, and applicable laws/regulations.
  • Provide legal governance related to admissibility and advise on applicable laws and standards.
  • Provide risk-management recommendations and apply knowledge of laws and ethics as they relate to cybersecurity and privacy.
  • Support forensic application updates, contingency planning, and case management growth; assist with A&A and pilot components for limited users.

Qualifications

  • U.S. citizenship and an active Top Secret (TS) security clearance.
  • Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Systems, or a related field (additional experience may substitute for degree).
  • 7 years of hands-on digital forensics and incident response (DFIR) experience, ideally in federal or regulated environments.
  • Required certifications: CFIA and CFIH.
  • Proven expertise with forensic and analysis tools (e.g., EnCase, FTK, Autopsy/The Sleuth Kit, X-Ways, Volatility, Wireshark, YARA, Ghidra or IDA Pro).
  • Strong command of Windows, Unix, and Linux internals; file systems (NTFS, FAT, EXT); virtualization; and SIEM/event-correlation platforms.
  • Working knowledge of NICE Framework, NIST guidance, MITRE ATT&CK, chain-of-custody standards, and Rules of Evidence.
  • Excellent technical writing and ability to present findings to legal, oversight, and investigative authorities.

Skills

Required:Top Secret clearanceDFIR toolingOperating systems

Benefits

  • Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
  • May involve AI-assisted parts of the hiring process; final decisions by humans.
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Agile Defense

Always Evolving

Agile Defense delivers advanced capabilities and solutions tailored to the most critical national security and civilian missions.

national securitycivilian missionsinnovationcapabilitiessolutions
Company profileWebsite

More open roles at Agile Defense