Mid-Level Forensics Analyst

Cybervance, Inc.

Mid-Level Digital Forensics Analyst conducting digital forensic investigations involving cybersecurity incidents at Cybervance. Seeking candidates with strong forensic experience and attention to detail for a full-time position.

Posted 6/5/2026full-timePortland • Oregon • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxPython

About the role

Key responsibilities & impact

Conduct forensic analysis on endpoints, servers, and removable media.
Acquire, preserve, and analyze digital evidence in accordance with forensic best practices.
Perform disk, memory, and artifact analysis to identify user activity, malware, or unauthorized access.
Support investigations involving security incidents, insider activity, and data exfiltration.
Assist incident response teams with forensic scoping, timeline creation, and root cause analysis.
Analyze forensic artifacts to determine attack vectors, persistence mechanisms, and impact.
Identify indicators of compromise (IOCs) and support remediation efforts.
Maintain proper evidence handling and chain‑of‑custody documentation.
Produce clear forensic notes, findings, and supporting artifacts.
Contribute to forensic and incident reports used by technical, legal, or leadership teams.
Utilize forensic tools for data acquisition, analysis, and reporting.
Perform artifact validation and cross‑verification to ensure analytical accuracy.
Support improvements to forensic workflows and repeatable procedures.
Work closely with senior forensic analysts and incident responders.
Participate in tabletop exercises, incident reviews, and training activities.
Continue skill development in forensic techniques, tools, and emerging technologies.

Requirements

What you’ll need

3–5 years of experience in digital forensics, incident response, or cybersecurity analysis.
Hands‑on experience performing forensic acquisitions and analysis.
Solid understanding of: Windows and Linux operating systems, file systems, logs, and system artifacts, common attacker behaviors and malware indicators.
Strong documentation and written communication skills.
Ability to follow evidence handling and legal defensibility requirements.
Experience with memory forensics, log correlation, or malware triage.
Familiarity with cloud, SaaS, or email forensics (e.g., M365, cloud platforms).
Scripting or automation experience (Python, PowerShell, Bash).
Certifications such as GCFA, GCIH, CHFI, EnCE, or equivalent.
Experience in regulated, enterprise, or government environments.

Benefits

Comp & perks

Health insurance
Professional development opportunities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

forensic analysisdigital evidence analysisdisk analysismemory forensicsartifact analysismalware triagescriptingautomationlog correlationevidence handling

Soft Skills

documentation skillswritten communicationattention to detailteam collaborationproblem-solvinganalytical thinkingorganizational skillstrainingincident responseworkflow improvement

Certifications

GCFAGCIHCHFIEnCE