Node.Digital
Host Forensic Analyst/Host Based Systems Analyst
Arlington, Virginia · Full-time · Posted Oct 20, 2025
- Experience
- 5+ years of directly relevant experience; alternatively, HS Diploma and 7–9 years of host or digital forensics experience for the education requirement.
- Education
- BS in Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 7–9 years of host or digital forensics experience.
About the job
Leads and supports onsite digital forensic investigations, coordinating evidence collection and analysis, documenting incident response, and reporting findings to stakeholders and leadership.
What you'll do
- Coordinate forensic teams, evidence collection, and examination of computer-related evidence during onsite engagements.
- Analyze digital evidence and suspected malicious code; provide technical guidance and mentor others.
- Document incident response and produce, review, and quality-assure executive summaries and technical reports.
What they ask for
- U.S. citizenship, active TS/SCI clearance, and ability to obtain DHS Suitability.
- 5+ years of directly relevant experience in cyber forensic investigations using forensic tools.
- Ability to create forensically sound evidence duplicates and write cyber investigative reports.
- Experience with cyberattack analysis, evidence handling and chain of custody; knowledge of attack types and stages, security threats and vulnerabilities, and proactive system and network analysis.
Nice to have
- Experience with or knowledge of two or more listed tools, such as EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, or EDR tools.
- Proficiency in conducting all-source research; certifications listed include GCFA, GCFE, EnCE, CCE, CFCE, and CISSP.
Tools
EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Splunk, Snort
Model-written summary · the original posting is authoritative