Digital Forensic Examiner

Booz Allen Hamilton

. Assist with scoping calls of potential new matters .

Posted 9/17/2026full-timeWarrenton • District of Columbia • United StatesJunior💰 $112,900 - $257,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Incident Response and Digital Forensics, with strong capabilities in analyzing systems for Indicators of Compromise (IOCs) and preparing detailed technical reports. Proficient in utilizing forensic tools and scripting languages to manage complex investigations and communicate findings effectively.

Highest-signal resume keywords

Incident ResponseDigital ForensicsForensic AnalysisPowerShell ScriptingEnCase Tool Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Forensic AnalysisLog AnalysisMalware AnalysisTimeline AnalysisScriptingIncident Response MethodologyData EntryCase ManagementTechnical ReportingCybersecurity

Soft Skills

Effective CommunicationDetail OrientationCollaborationPrioritizationIndependent Work

Tools & Technologies

EnCaseFTKAxiomSplunkElk StackSentinelOneOpen-Source Forensic ToolsWindows SystemsMac SystemsLinux Systems

Certifications & Qualifications

CCEEnCECFCEACECISSPGIAC Certified Intrusion Analyst (GCIA)GCFEGCFAGREMGNFA

Industry Keywords

CybersecurityIncident ResponseDigital ForensicsMalwareUnauthorized AccessData ExfiltrationIndicators of Compromise (IOCs)Mobile Device ForensicsEndpoint Detection and ResponseComplex Investigations

Tech Stack

Tools & technologies

Cyber SecurityLinuxPythonSplunk

About the role

Key responsibilities & impact

Assist with scoping calls of potential new matters
Generate necessary paperwork and data entry for new matters
Manage cyber incident response investigations requiring forensic, malware, and log analysis
Collect and analyze forensic images and triage datasets to identify malware and actions taken
Collect and analyze malware and logs from various types
Determine whether unauthorized access or data exfiltration occurred
Analyze systems to identify Indicators of Compromise (IOCs)
Provide analysis results for senior-level review through written and verbal communications
Provide analysis results verbally to clients
Prepare detailed technical reports in an understandable manner
Perform other duties as assigned

Requirements

What you’ll need

Experience with full lifecycle case management of large-scale and complex investigations
Experience working with Microsoft Windows and non-Windows systems such as Mac or Linux
Scripting or programming experience such as PowerShell or Python
Experience in forensic and incident response methodology
Ability to take detailed notes, write reports, and effectively communicate with counsel, client leadership, and high-level management
Ability to prioritize work assignments and work independently in highly collaborative team environments
Ability to correlate events from multiple sources to create a timeline analysis
Ability to perform log analysis of multiple types
Ability to identify misuse, malware, or unauthorized activity through forensic or log analysis
Bachelor’s degree
1+ years of experience with Incident Response or Digital Forensics
Experience with digital forensic tools, including EnCase, FTK, Axiom, Splunk, Elk Stack, and open-source applications
Experience working with mobile devices
Experience with endpoint detection and response tools such as SentinelOne
CCE, EnCE, CFCE, ACE, CISSP, GIAC Certified Intrusion Analyst (GCIA), GCFE, GCFA, GREM, or GNFA certification
Bachelor's degree in Cybersecurity preferred; Master’s degree in Cybersecurity a plus

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program
Identity verification and fraud prevention process
Camera-on expectation during interviews, assessments, and virtual meetings