Digital Forensics Analyst Jobs

Digital Forensics Analyst

Solution One Industries, Inc. (Solution One), our employees are our greatest asset. As a Service-Disabled Veteran-Owned Small Business (SDVOSB), we are committed to delivering innovative, mission-focused solutions that strengthen our nation's defense and support those who serve. Our success is built on integrity, accountability, teamwork, and a relentless commitment to excellence. For more than two decades, Solution One Industries has provided engineering, logistics, maintenance, information technology, and professional support services to the U.S. Department of Defense and other federal agencies.

We foster a collaborative work environment that encourages innovation, professional growth, continuous learning, and leadership development while empowering employees to make meaningful contributions to critical national security missions. As a member of the Solution One Industries team, you will have the opportunity to work alongside highly skilled professionals supporting the U.S. Special Operations Command (USSOCOM) on the Special Operations Forces
- Global Logistics Support Services (SOF GLSS) contract. This program provides worldwide logistics, maintenance, engineering, and sustainment services that directly enhance the operational readiness of America's Special Operations Forces. We offer competitive compensation, comprehensive benefits, career development opportunities, and a culture that recognizes performance, values diversity, and rewards innovation. If you are passionate about solving complex technical challenges and supporting those who protect our nation, Solution One offers a rewarding career where your work truly makes a difference.

Solution One Industries, Inc. is seeking an experienced Digital Forensics Analyst to support the U.S. Special Operations Command (USSOCOM) Special Operations Forces
- Global Logistics Support Services (SOF GLSS) contract. The Digital Forensics Analyst performs forensic triage, examination, and technical exploitation of digital media recovered through sensitive site exploitation and captured enemy material in support of the supported organization's intelligence requirements. The analyst is responsible for rapidly processing mobile devices, computers, removable media, and other digital storage; recovering and validating relevant data; and producing clear, accurate, and timely reporting that places forensic findings in operational and analytical context.

Work is performed in a fast-paced environment supporting current and future operations, and may include deployed and OCONUS support.

• Serve as a digital forensic examiner supporting the collection, handling, triage, and technical exploitation of digital media and captured enemy material.
• Conduct forensically sound acquisition, preservation, and examination of mobile devices, computers, servers, removable media, and other digital storage.
• Perform advanced logical, file system, and physical extractions, including handling of locked, damaged, or encrypted devices using approved methods.
• Recover, analyze, and report on artifacts such as user contacts, call and message logs, internet and browser history, chat and third-party application data, geolocation data, images, multimedia, and timeline activity.
• Conduct malware triage and identify indicators of compromise or malicious software present on exploited media, referring items for deeper analysis as required.
• Maintain strict chain of custody, evidence handling, labeling, and accountability procedures in accordance with organizational policy and forensic best practices.
• Produce timely, accurate forensic examination reports and analytical products that directly answer standing and ad hoc intelligence requirements.
• Provide analytic context and assessments derived from exploitation findings, and respond to associated requests for information.
• Support link, pattern, and timeline analysis in coordination with intelligence analysts and mission partners.
• Validate and quality-check forensic findings, tool output, and reporting prior to dissemination.
• Maintain, configure, update, and validate forensic hardware, software, licensing, and write-blocking equipment.
• Develop and maintain standard operating procedures, examination checklists, and technical documentation for exploitation workflows.
• Provide training and technical guidance to operators and junior examiners on evidence handling, device collection, and exploitation procedures.
• Deploy in support of forward operations and provide on-site exploitation support when required.

Demonstrated experience in the following areas:

• Mobile device forensics and computer/media forensics in an operational or law enforcement environment
• Commercial forensic suites such as Cellebrite (UFED, Physical Analyzer, Inseyets), Magnet AXIOM, Open Text EnCase, X-Ways Forensics, Oxygen Forensic Detective, MSAB XRY/XAMN, or FTK
• Forensically sound imaging, hashing, verification, and write-blocking procedures
• Windows, macOS, Linux, Android, and iOS file systems…