Lead Cyber Defense Forensics Analyst

Harmonia Holdings Group, LLC•Washington, DC

About The Position

The Lead Cyber Defense Forensics Analyst supports leading digital forensic investigations and incident response efforts across enterprise IT environment. This role is responsible for overseeing the collection, preservation, analysis, and reporting of digital evidence related to cyber incidents, insider threats, and compliance requirements. The lead analyst provides technical expertise, mentors team members, and ensures forensic capabilities meet federal standards and best practices.

Requirements

Bachelor’s degree in Information Security, Computer Science, Digital Forensics, or related field.
5+ years of experience in digital forensics, incident response, or cybersecurity operations.
Advanced expertise with forensic tools and platforms (e.g., EnCase, FTK, X-Ways, Volatility, Cellebrite).
Strong knowledge of evidence handling, chain-of-custody, and federal investigative standards.
Experience with malware analysis, memory forensics, and cloud forensics.
Excellent analytical, communication, and report writing skills.
Proven leadership and mentoring abilities.
Ability to pass an MBI (Minimum Background Investigation) clearance.

Nice To Haves

Professional certifications such as GCFA, GCFE, CCE, EnCE, or CISSP.
Experience supporting federal or public sector environments.
Familiarity with e-discovery processes and legal/regulatory requirements.
Exposure to cloud and hybrid infrastructure forensics.

Responsibilities

Lead and coordinate digital forensic investigations involving systems, networks, endpoints, and cloud environments.
Oversee the collection, preservation, and analysis of electronic evidence in support of incident response, legal, HR, and compliance activities.
Perform in-depth forensic analysis of compromised systems, malware, and artifacts to determine root cause, impact, and remediation strategies.
Develop and maintain forensic methodologies, standard operating procedures, and chain-of-custody documentation in accordance with federal guidelines.
Collaborate with SOC, threat intelligence, and incident response teams to support rapid detection, containment, and recovery from cyber incidents.
Prepare detailed forensic reports, executive summaries, and presentations for technical and non-technical audiences, including leadership and external stakeholders.
Support e-discovery, litigation, and regulatory investigations as required.
Mentor and train junior analysts, and contribute to the continuous improvement of forensic and incident response capabilities.
Stay current with emerging threats, forensic tools, and investigative techniques relevant to the federal sector.

Benefits

Traditional and HSA- eligible medical insurance plans w/ Wellness Incentives for employees and family
100% employer-paid dental and vision insurance options
100% employer-sponsored STD, LTD, and life insurance
Veterans Cohort
Gym membership reimbursement
401(k) matching
Dollar-for-dollar 501(c)(3) donation matching
Flexible-schedules and teleworking options
Paid holidays and Flexible Paid Time Off
Adoption Expense Reimbursement
Paid Parental Leave
Professional development and career growth opportunities and paid training days
Employer-sponsored Employee Assistance Program for employee and family
Team and company-wide events, recognition, and appreciation-- and so much more!