Digital Forensics Analyst (Cyber Analyst III) TS/SCI

Akima, LLC•Fort Bragg, CA

5d•Onsite

About The Position

Akima Technical Solutions seeks an experienced Digital Forensics Analyst to support the U.S. Special Operations Command (USSOCOM). In this role, you will conduct forensic examinations and digital exploitation in support of sensitive military, intelligence, and counterintelligence missions. You will help preserve, analyze, and present digital evidence that directly enables operational decision-making. To join our team of outstanding professionals, apply today!

Requirements

Must be a U.S. citizen
Active TS/SCI Clearance
Minimum 6 Years of experience with Digital Forensics or Incident Response
Static Analysis Security Testing (SAST)
Dynamic Analysis Security Testing (DAST)
Network Analysis
Reverse Engineering (e.g. IDA Pro, Ghidra, Radare, Binary Ninja)
Hands-on experience in mobile device and computer forensics within operational, military, law enforcement, or intelligence environments.
Proficiency with commercial forensic tools such as Cellebrite UFED/PA/Inseyets, Magnet AXIOM, EnCase, X-Ways, Oxygen, MSAB XRY/XAMN, or FTK.
Thorough understanding of forensically sound imaging, hashing, and verification procedures.
Strong knowledge of Windows, macOS, Linux, Android, and iOS file systems and artifact locations.
Experience with digital exploitation workflows and supporting intelligence processes.
Clear, concise technical writing and briefing skills.
Ability to work independently in fast-paced environments and collaboratively in small teams.

Nice To Haves

Prior support to USSOCOM, USASOC, TSOCs, or other Joint SOF organizations.
Experience in deployed or expeditionary exploitation environments.
Background in military, law enforcement, or forensic laboratory operations.
Expertise in password recovery, encryption bypass, chip-off, or other advanced acquisition techniques.
Familiarity with DOMEX and biometric-enabled intelligence.
Scripting experience (Python, PowerShell) for automation and artifact parsing.
Experience in malware analysis, reverse engineering, or network forensics.
Familiarity with intelligence analysis tools and reporting standards.

Responsibilities

Analyzes, retrieves, catalogs, and safeguard digital data related to cybercrime investigations.
Researches and evaluates equipment and software that helps in recovering necessary data.
Tests new software to ensure functionality.
Documents artifacts and deliverables according to set standards.
Conducts complex and high-profile, non-destructive evaluations of computer systems to determine operating and file systems.
Analyzes computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data.
Provides detailed examination reports to government agencies.
Configure, install, and maintain Network Intrusion Detection systems and Network Forensic Analysis Tools.
Performs work under minimal supervision.
Handles complex issues and problems and refers only the most complex issues to higher-level staff.
Conduct forensically sound acquisition, preservation, and examination of mobile devices, computers, servers, removable media, and other digital storage.
Rapidly process digital media to recover, validate, and analyze relevant data in time-sensitive operational environments.
Perform advanced logical, file system, and physical extractions, including handling locked, damaged, or encrypted devices using approved techniques.
Analyze and report on artifacts such as communications logs, browser history, third‑party applications, geolocation data, images, and timeline activity.
Conduct malware triage and identify indicators of compromise; coordinate deeper analysis when required.
Maintain strict chain-of-custody procedures and evidence-handling standards.
Produce accurate and timely forensic reports that clearly convey findings to both technical and nontechnical audiences.
Provide analytic context that links forensic findings to intelligence requirements.
Collaborate with intelligence analysts on link, pattern, and timeline analysis.
Validate forensic results and ensure quality and accuracy before dissemination.
Maintain and configure forensic hardware, software, licensing, and write‑blocking equipment.
Develop and update SOPs, checklists, and documentation for exploitation workflows.
Train operators and junior examiners on device collection and evidence-handling best practices.
Deploy forward in support of special operations missions when required.