Security Spec Lead - Digital Forensics Analyst

Job Posting End Date
10-30-2026

Please note the job posting will close on the day before the posting end date.

Job Summary Responsible for large-scale security assignments providing direction to other team members. Responsible for gathering, investigating, and analyzing very complex security requirements, processes, and incidents. Leads analysis of security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Leads the identification and documentation of potential mitigations /remediations and ensures report creation of findings with identified risk response.

Responsible for the conceptual design of implementation strategies on assigned security projects/activities. Leads advanced level implementation, support, and/or usage of technical solutions. Leads others in advanced problem solving, decision-making, and functional area knowledge. Mentors and provides functional/technical work direction to team.

Job Description What You'll Do Essential Job Functions & Tasks Conduct end-to-end investigations of internal and external matters.

Prepare findings reports for HR, Legal, Ethics, Physical Security, and other stakeholders

Develop and maintain Digital Forensics policies and procedures documentation

Support risk-reduction projects, including post-incident lessons learned

Serve as a technical SME for Insider Threat, DLP, and cyber investigations

Produce clear investigative and analytic reports for technical and executive audiences

Maintain tools and technologies pertaining to Digital Forensics collection and analysis

Required Qualifications and Skills Ability to obtain and maintain a U.S. government security clearance

In-depth understanding of Windows, Linux/Unix, MacOS, Android and iOS operating systems and interconnected network devices

Understanding of mobile device forensics and evidence collection techniques

Experience with malware reverse engineering and analysis

Understanding of anomalous user activity monitoring and policy violation investigations

Ability to use internal and external log sources, forensic tools, and established investigative methods to determine incident source and scope

Work independently while maintaining strict confidentiality throughout investigations which sometimes involve high pressure situations or rapidly changing priorities

Communicate clearly, verbally and in writing, with strong analytical and critical-thinking skills

Handle sensitive and confidential material appropriately

Understanding of forensic capture and analysis methodologies and evidence chain of custody procedures

Preferred Qualifications Bachelor's degree or equivalent experience in cybersecurity, digital forensics, computer science, or related field

Experience with standard forensic methods and leading collection and analysis tools

Deep experience conducting technical investigations or root cause analysis in complex environments

Experience identifying insider risk indicators through analytics tools

Understanding and experience with digital forensics in a cloud environment

Understanding of threat actor tactics, techniques, and procedures

Familiarity with electric utility operations, ICS/SCADA, or critical infrastructure protection frameworks such as NERC CIPWorking knowledge of programming languages and Splunk query development

Ability to apply AI to threat detection and analysis

Understanding and experience with security monitoring tools, SIEM platforms, and endpoint detection solutions

Ability to work and lead in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teams

Knowledge of cyber investigations and incident response processes

Experience with case management and evidence handling…