[Hiring] Digital Forensic Analyst @Koniag Government Services, LLC

Role Description

Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced Digital Forensics Analyst to support cybersecurity operations and incident response activities for a federal government client. This position requires an active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations prior to performing work. Specific clearance requirements will be confirmed at time of offer. Primary work will be performed at the client site in Washington, DC and approved remote/telework locations.

This role serves as a critical technical function responsible for the collection, preservation, examination, and analysis of digital evidence in support of cybersecurity incident investigations, insider threat inquiries, litigation holds, and other forensic examination requirements across a complex, geographically distributed federal IT enterprise environment.

The Digital Forensics Analyst will serve as the program's primary technical expert for all digital forensics activities, supporting:

• Cybersecurity incident investigations
• Insider threat inquiries
• E-discovery and litigation hold support
• Malware analysis
• Forensic examination of digital media

This individual is responsible for ensuring all forensic activities are conducted in accordance with established forensic methodologies, chain of custody requirements, applicable Federal regulations, and client policies, producing thorough, well-documented, and legally defensible forensic examination reports and evidentiary findings.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Digital Forensics, Information Technology, Information Systems, or a related field from an accredited college or university. Equivalent combination of education and directly relevant experience may be considered.
• Minimum of 5 years of hands-on experience in digital forensics, cybersecurity incident response, or a closely related discipline within a federal government IT contracting or law enforcement environment.
• Demonstrated hands-on experience conducting forensic examinations of Windows and Linux-based systems, including disk forensics, memory forensics, log analysis, and forensic timeline reconstruction.
• Experience conducting forensic investigations in cloud environments, including Microsoft 365, Azure, or AWS.
• Experience maintaining chain of custody and producing legally defensible forensic examination reports suitable for submission to legal or law enforcement authorities.
• Active security clearance or the ability to obtain and maintain a government background investigation and all requisite IT access authorizations.

Requirements

• Exceptional analytical and critical thinking skills with demonstrated ability to conduct thorough, methodical, and well-documented forensic examinations across a diverse range of digital evidence types, platforms, and investigation scenarios.
• Deep technical proficiency with industry-standard digital forensics tools, including one or more of the following: Magnet AXIOM, EnCase, FTK (Forensic Toolkit), Cellebrite UFED, Volatility, Autopsy, X-Ways Forensics, or equivalent platforms.
• Strong proficiency in forensic acquisition techniques, including disk imaging, memory acquisition, network traffic capture, and cloud evidence collection.
• Demonstrated experience in Windows forensic artifact analysis, including NTFS file system forensics, Windows registry analysis, Windows event log analysis, prefetch and LNK file analysis, and browser artifact examination.
• Experience with Linux and/or macOS forensic artifact analysis, including file system forensics, log analysis, and user activity reconstruction.
• Proficiency in memory forensics, including volatile memory acquisition and analysis using tools such as Volatility or equivalent platforms.
• Experience with log analysis and correlation across diverse log sources, including Windows event logs, Sysmon, network device logs, web server logs, and cloud platform audit logs.
• Familiarity with malware analysis techniques, including static analysis and dynamic analysis.
• Experience with network forensics, including PCAP analysis using tools such as Wireshark or equivalent platforms.
• Knowledge of cloud forensics techniques and evidence sources across Microsoft 365, Azure, and/or AWS environments.
• Strong chain of custody documentation skills with demonstrated ability to maintain accurate and complete evidence logs and produce professionally formatted, legally defensible forensic examination reports.
• Excellent written and verbal communication skills.
• Familiarity with applicable Federal forensic and cybersecurity standards.
• Proficiency with scripting languages for forensic automation, data parsing, and analysis workflow development.

Benefits

• Competitive compensation
• Health, dental, and vision insurance
• 401K with company matching
• Flexible spending accounts
• Paid holidays
• Three weeks paid time off
• And more

Company Description

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services, and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward-leaning technical, professional, and operational solutions.

KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities.