Digital Forensics Analyst (Cyber Analyst III) TS/SCI

Akima Technical Solutions seeks an experienced Digital Forensics Analyst to support the U.S. Special Operations Command (USSOCOM). In this role, you will conduct forensic examinations and digital exploitation in support of sensitive military, intelligence, and counterintelligence missions. You will help preserve, analyze, and present digital evidence that directly enables operational decision-making., * Analyzes, retrieves, catalogs, and safeguard digital data related to cybercrime investigations. Researches and evaluates equipment and software that helps in recovering necessary data.

• Tests new software to ensure functionality.
• Documents artifacts and deliverables according to set standards.
• Conducts complex and high-profile, non-destructive evaluations of computer systems to determine operating and file systems.
• Analyzes computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data.
• Provides detailed examination reports to government agencies.
• Configure, install, and maintain Network Intrusion Detection systems and Network Forensic Analysis Tools.
• Performs work under minimal supervision.
• Handles complex issues and problems and refers only the most complex issues to higher-level staff., * Conduct forensically sound acquisition, preservation, and examination of mobile devices, computers, servers, removable media, and other digital storage.
• Rapidly process digital media to recover, validate, and analyze relevant data in time-sensitive operational environments.
• Perform advanced logical, file system, and physical extractions, including handling locked, damaged, or encrypted devices using approved techniques.
• Analyze and report on artifacts such as communications logs, browser history, third-party applications, geolocation data, images, and timeline activity.
• Conduct malware triage and identify indicators of compromise; coordinate deeper analysis when required.
• Maintain strict chain-of-custody procedures and evidence-handling standards.
• Produce accurate and timely forensic reports that clearly convey findings to both technical and nontechnical audiences.
• Provide analytic context that links forensic findings to intelligence requirements.
• Collaborate with intelligence analysts on link, pattern, and timeline analysis.
• Validate forensic results and ensure quality and accuracy before dissemination.
• Maintain and configure forensic hardware, software, licensing, and write-blocking equipment.
• Develop and update SOPs, checklists, and documentation for exploitation workflows.
• Train operators and junior examiners on device collection and evidence-handling best practices.
• Deploy forward in support of special operations missions when required.

• Active TS/SCI Clearance
• Minimum 6 Years of experience with Digital Forensics or Incident Response
• Static Analysis Security Testing (SAST)
• Dynamic Analysis Security Testing (DAST)
• Network Analysis
• Reverse Engineering (e.g. IDA Pro, Ghidra, Radare, Binary Ninja)
• Hands-on experience in mobile device and computer forensics within operational, military, law enforcement, or intelligence environments.
• Proficiency with commercial forensic tools such as Cellebrite UFED/PA/Inseyets, Magnet AXIOM, EnCase, X-Ways, Oxygen, MSAB XRY/XAMN, or FTK.
• Thorough understanding of forensically sound imaging, hashing, and verification procedures.
• Strong knowledge of Windows, macOS, Linux, Android, and iOS file systems and artifact locations.
• Experience with digital exploitation workflows and supporting intelligence processes.
• Clear, concise technical writing and briefing skills.
• Ability to work independently in fast-paced environments and collaboratively in small teams.

Preferred Qualifications:

• Prior support to USSOCOM, USASOC, TSOCs, or other Joint SOF organizations.
• Experience in deployed or expeditionary exploitation environments.
• Background in military, law enforcement, or forensic laboratory operations.
• Expertise in password recovery, encryption bypass, chip-off, or other advanced acquisition techniques.
• Familiarity with DOMEX and biometric-enabled intelligence.
• Scripting experience (Python, PowerShell) for automation and artifact parsing.
• Experience in malware analysis, reverse engineering, or network forensics.
• Familiarity with intelligence analysis tools and reporting standards.

Akima Technical Solutions (ATS), an Akima company, is not just another federal technical solutions contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At ATS, the work you do every day makes a difference in the lives of our 15,000 Iupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, ATS provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, ATS delivers a full spectrum of logistics and supply chain services that meet our customers’ most stringent mandates and metrics.

As an ATS employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.