> Markdown version of [/jobs/ext/1052111-host-forensics-analyst](https://www.wearedevelopers.com/jobs/ext/1052111-host-forensics-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Host Forensics Analyst - **Company:** NewGen Technologies - **Location:** Arlington, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Computer Engineering, Computer Forensics, Digital Forensics, ArcSight SIEM Tool, Security Information and Event Management, Wireshark, Forensic Toolkit, Snort (Software), Software Security, Information Technology, Encase, Splunk - **Published:** June 30, 2026 - **Apply:** https://www.clearancejobs.com/jobs/8921851/host-forensics-analyst ## About the Role * US Citizenship * Active TS/SCI Clearance * Must be able to obtain DHS Suitability * BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma and 10+ years of host or digital forensics experience * 8+ years of directly relevant experience in cyber forensics investigations, using leading edge technologies and industry standard forensic tools * Ability to create forensically sound duplicates of computer systems (forensic images) * Able to write cyber investigative reports documenting digital forensics findings * Experience with the analysis and characterization of cyber attacks * Experience with proper digital asset collection and preservation procedures and chain of custody protocols * Skilled in identifying different classes of attacks and attack stages * Knowledge of system and application security threats and vulnerabilities * Knowledgeable in proactive analysis of systems and networks, to include creating trust levels of critical resources * Must be able to work collaboratively across physical locations ## Description Our Partner serves as a prime contractor in a federal program, performing investigations to develop a preliminary diagnosis of the severity of breaches. They provide remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Contract personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunt for malicious cyber activity. They are seeking Host Forensics Analysts to support this critical customer mission., * -Assist Federal leads with overseeing and leading forensic teams at onsite engagements by coordinating data collection/acquisition operations * Provide technical assistance on data collection techniques and forensic investigative techniques to appropriate personnel when necessary * Write in-depth reports, supports with peer reviews and provides quality assurance reviews for junior personnel * Support forensic analysis and mentoring/providing guidance to others on data collection, analysis and reporting in support of onsite engagements * Assist with leading and coordinating forensic teams in preliminary investigation * Plan, coordinate, and direct the inventory, examination and comprehensive technical analysis of computer systems and digital artifacts * Distill analytic findings into executive summaries and in-depth technical reports * Serve as technical forensics liaison to stakeholders and explaining investigation details to include forensic methodologies and protocols * Track and document on-site incident response activities, and provide updates to leadership throughout the engagement * Travel to incident response locations in the United States, Territories & Possessions * Evaluate, extract, and analyze suspected malicious code, * Experience with or knowledge of two or more of the following tools: + EnCase + SIFT + X-Ways + Volatility + WireShark + Sleuth Kit/ Autopsy + Magnet Axiom Cyber + Snort + Splunk or other SIEM Tools (ArcSight, LogRythm, Elastic, etc.) + Other EDR Tools (Crowdstrike, MDE, Trellix, etc.) * Proficiency with conducting all-source research * Desired Certifications: GCFA, GCFE, EnCE, CCE, CFCE, CISSP ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [How I saved 200K/yr in direct costs writing 0 code lines in K8s](https://www.wearedevelopers.com/videos/1055-how-i-saved-200k-yr-in-direct-costs-writing-0-code-lines-in-k8s) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Let’s write an exploit using AI](https://www.wearedevelopers.com/videos/1004-let-s-write-an-exploit-using-ai) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)