Digital Forensics Analyst

Why AIS?

When you join AIS, you're joining a mission-driven team that's passionate about making a difference. You'll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.

• Employee Ownership
  :
  Your contributions directly impact the company's success, and you share in its achievements.

• Continuous Learning
  :
  Access to resources, training, and mentorship to support your professional growth.

• Inclusive Culture
  : A workplace where diversity is celebrated, and everyone's voice is valued.

• Mission-Driven Work
  :
  Engage in projects that make a meaningful difference for our clients and communities.

At AIS, we're looking for more than just skills - we're looking for driven individuals who are passionate about making a difference, eager to grow, and aligned with our core principles.

This position is contingent upon contract award. We are currently pursuing a proposal and are seeking qualified candidates to include in our submission and identify candidates for future hiring needs on the program once awarded.

• Core Knowledge &
  
  Skills:
  
  Designs secure architectures, leverages advanced threat detection, leads incident response, and implements security automation.

• Work & Complexity: Manages complex incidents, conducts threat analysis, leads audits, and implements process improvements.

• Quality & Independence: Delivers high-quality reports, aligns practices with industry standards, and operates with high autonomy.

• Teamwork & Communication: Leads team projects, collaborates cross-functionally, mentors juniors, and resolves conflicts.

• Consulting & Engagement: Provides strategic consulting, leads improvement initiatives, recommends advanced technologies, and manages vendor relationships.

The Digital Forensics Analyst is responsible for conducting advanced forensic examinations across a wide range of digital systems, environments, and devices. This role performs deep-dive investigations involving endpoint activity, network traffic, malware, cloud platforms, and virtualized environments. The ideal candidate has hands-on experience with digital media acquisition, malware analysis, cloud forensics, and the use of modern security technologies to support threat hunting and investigative operations.

This is a proposal-based position; employment is contingent upon contract award and funding availability.

Digital Forensic Analysis

• Conduct forensic examinations on Windows, Linux, and MacOS systems.

• Perform digital media acquisition, including disk imaging, preservation, and chain-of-custody documentation.

• Execute mobile device acquisition and analysis, including iOS and Android platforms.

• Perform malware analysis to determine behavior, indicators of compromise (IOCs), and impact.

Cloud & Virtual Environment Forensics

• Investigate virtualized environments, including Virtual Machines and associated logs/artifacts.

• Perform cloud-based forensic analysis using:

  • Microsoft 365

  • Azure

  • AWS

• Analyze cloud-native logs such as Cloud Trail, IAM logs, and other platform security telemetry.

Threat Hunting & Investigative Activities

• Utilize EDR, SIEM, and full packet capture tools to examine endpoint behavior, network activity, and anomalous patterns.

• Conduct proactive threat hunting to identify previously undetected malicious activity.

• Correlate forensic data with threat intelligence to support broader investigations.

Tools, Documentation & Reporting

• Leverage industry-standard forensic tools, including EnCase and SANS methodologies.

• Generate detailed forensic reports for technical stakeholders, legal teams, and…