Job Description

Job Description

Job Description

Digital Forensics Investigator

Location: Remote
Duration: 1–2 Weeks 

Position Overview

We are seeking a skilled Digital Forensics Investigator to conduct forensic investigations involving potentially compromised computers, servers, and storage devices . The role will focus on identifying security incidents, unauthorized access, fraudulent activity, and other digital evidence while following established forensic and chain-of-custody procedures.

The ideal candidate will have strong hands-on experience with industry-standard forensic tools and be capable of performing both disk and memory analysis across Windows and Linux environments.

Key Responsibilities

• Conduct digital forensic investigations related to:
  • Security incidents
  • Unauthorized access
  • Fraud
  • Potential system compromise
• Acquire, preserve, and analyze forensic images and digital evidence.
• Perform disk and filesystem analysis .
• Analyze Windows artifacts, including:
  • Registry
  • Event logs
  • Browser activity
  • User activity
• Perform email and communication artifact analysis where applicable.
• Conduct memory forensics and analyze volatile system data.
• Perform forensic investigations across Windows and Linux environments.
• Establish detailed timelines of attacker and/or user activity.
• Identify indicators of compromise and relevant forensic artifacts.
• Document investigative procedures, evidence, findings, and conclusions.
• Prepare detailed and defensible forensic investigation reports.
• Maintain proper chain-of-custody and evidence-handling procedures.
• Support legal, compliance, security, and internal investigative activities.
• Communicate technical findings clearly to both technical and non-technical stakeholders.

Required Technical Skills

• EnCase
• FTK (Forensic Toolkit)
• Autopsy
• Magnet AXIOM
• Cellebrite
• Volatility
• Windows forensics
• Linux forensics
• Disk and filesystem analysis
• Memory analysis
• Incident response
• Digital evidence acquisition and preservation

Required Qualifications

• Demonstrated experience conducting digital forensic investigations .
• Strong understanding of forensic evidence acquisition, preservation, and analysis.
• Hands-on experience with disk, filesystem, registry, browser, email, and memory artifacts.
• Experience investigating compromised systems and determining the scope and timeline of activity.
• Strong understanding of incident response and forensic investigation methodologies .
• Ability to maintain accurate chain-of-custody documentation.
• Strong technical writing and forensic reporting skills.
• Ability to work independently in a remote environment.

Job Tags

Similar Jobs