Host Based Systems Analyst III
Core
Front-line Host Forensics Analyst providing digital forensics and incident response (DFIR) support for government clients, including onsite data collection, malicious code analysis, and incident tracking.
Role type
Senior IC digital forensics analyst (DFIR)
Builds
Forensic reports, incident response documentation, and executive summaries for government agencies
Domain
Cybersecurity / Digital Forensics / Incident Response
Deliverable
client delivery
Required skills
Host/digital forensics investigation, forensic imaging, cyber attack analysis, chain of custody protocols, technical reporting, stakeholder liaison, onsite coordination
Preferred skills
All-source research, proficiency with EnCase, SIFT, X-Ways, Volatility, Wireshark, Sleuth Kit/Autopsy, Magnet Axiom, Snort, SIEM tools (Splunk, ArcSight, LogRhythm, Elastic), EDR tools (CrowdStrike, MDE, Trellix)
Technologies
EnCase, SIFT, X-Ways, Volatility, Wireshark, Sleuth Kit, Autopsy, Magnet Axiom, Snort, Splunk, ArcSight, LogRhythm, Elastic, CrowdStrike, MDE, Trellix
Responsibilities
Coordinate data collection and acquisition operations for forensic teams, analyze suspected malicious code, write in-depth forensic and executive reports, mentor junior personnel on analysis techniques, track and document onsite incident response activities, serve as technical liaison to stakeholders
Seniority
Senior, hands-on IC