> Markdown version of [/jobs/ext/1893017-senior-digital-forensics-analyst-python-splunk-arcsight](https://www.wearedevelopers.com/jobs/ext/1893017-senior-digital-forensics-analyst-python-splunk-arcsight). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Digital Forensics Analyst ( Python, Splunk, Arcsight)

- **Company:** BAE Systems
- **Location:** Falls Church, VA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $132,962.0 - $226,035.0
- **Contract:** Permanent contract
- **Skills:** Data Retrieval, Digital Forensics, Python (Programming Language), ArcSight SIEM Tool, Forensic Toolkit, Information Technology, Splunk
- **Published:** August 2, 2026
- **Apply:** https://www.clearancejobs.com/jobs/8895968/senior-digital-forensics-analyst-python-splunk-arcsight

## About the Role

Must be eligible to possess a final US Secret Security Clearance. Minimum of one industry recognized technical certification.

Demonstrated experience in the following skills:

 * Written and verbal communications.
 * Professional and technical report writing.
 * Ability to make recommendations to senior leadership in all matters involving digital forensics.
 * Ability to work independently as well as in a team environment.
 * Demonstrated knowledge of current digital forensic techniques and procedures.
 * Knowledge of the forensic laboratory accreditation process.
 * Creative problem solving abilities.
 * Ability to anticipate and respond to changing priorities in a professional manner (triage, prioritization, multi-tasking, project scheduling).

 * Ability to collaborate with and provide support to internal and external customers.
 * Case tracking and investigation management.

Experience with the following tools/languages:

 * Forensic Toolkit (FTK)
 * Microsoft Purview
 * Python
 * Splunk

 * Arcsight

At least one of the following certifications:

 * EnCase® Certified Examiner (EnCE)
 * GIAC Certified Forensic Examiner (GCFE)
 * GIAC Certified Forensic Analyst (GCFA)
 * GIAC Certified Intrusion Analyst (GCIA)
 * GIAC Certified Enterprise Defender (GCED)
 * GIAC Certified Incident Handler (GCIH)
 * Access Data Certified Examiner (ACE)
 * Certified Ethical Hacker (CEH)
 * Certified Computer Examiner (CCE)

Preferred Education, Experience, & Skills

 * 8+ Years Digital Forensics experience.
 * 5+ years incident response and handling experience.
 * Bachelor's Degree in Criminal Justice, Digital Forensics, Computer Science, or a related discipline.
 * Relevant forensics or incident handling certification.

#LI-DM2
#LI-Remote

## Description

BAE Systems has a job opening for a Digital Forensics Analyst. The Forensics Analyst will conduct digital media acquisition and analysis, team leadership and mentoring, and incident response analysis in an enterprise network environment. The candidate will have the ability to perform deep dive analysis of preserved and collected digital evidence to restore deleted files, determine usage patterns, Internet history, USB analysis, data carving/recovery, and other advanced analytical processes to recover evidence and artifacts in support of a variety of case types. The candidate will be familiar with Incident Response and Handling best practices in accordance with NIST SP documentation (800-61, etc.). Digital forensic and incident handling case types may include: advanced malware, digital media misuse, insider threat, and potential criminal conduct. This position requires ongoing proficiency in digital and mobile forensic tools, practices, and procedures, as well as emerging threats to
networks and systems. Additionally, this role is responsible for producing and managing automation improvements in the Python scripting language.


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Building a Friendly Kotlin SDK to Connect to JetBrains Space](https://www.wearedevelopers.com/videos/128-building-a-friendly-kotlin-sdk-to-connect-to-jetbrains-space)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Knowledge graph based chatbot](https://www.wearedevelopers.com/videos/754-knowledge-graph-based-chatbot)
- [DALL·E Flow: when neural search meets generative art](https://www.wearedevelopers.com/videos/389-dall-e-flow-when-neural-search-meets-generative-art)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)