ZipRecruiter

Log In

1

Senior Forensic Analyst Jobs in Springfield, VA (NOW HIRING)

AnaVation

Digital Forensics SME

Washington, DC · Remote

In this role, you will operate as a senior member of a multidisciplinary investigative and cyberoperations team, collaborating closely with forensic developers, cryptocurrency analysts, and mission ...

AnaVation

Digital Forensics SME

Washington, DC · Remote

In this role, you will operate as a senior member of a multidisciplinary investigative and cyber‑operations team, collaborating closely with forensic developers, cryptocurrency analysts, and ...

JFL Consulting, LLC

SOC Analyst Tier 3

Springfield, VA · On-site

$140K - $180K/yr

Brief senior leadership during active high priority incidents * Mentor Tier 1 and 2 analysts in ... Experience with EDR, endpoint forensics, memory analysis, and network forensics tools * Deep ...

BAE Systems

IT Sys Sec Eng Sr Prin

Falls Church, VA · On-site

$132K - $226K/yr

The Forensics Analyst will conduct digital media acquisition and analysis, team leadership and ... Ability to make recommendations to senior leadership in all matters involving digital forensics.

Pondurance

Senior Incident Response Consultant

Mclean, VA · Remote

$110K - $136K/yr

Senior Incident Response Consultant REMOTE About the Role At Pondurance, we help organizations ... Disk and memory forensics * Network traffic analysis * Experience with EDR platforms such as ...

Pondurance

Senior Incident Response Consultant

Mclean, VA · On-site +1

$110K - $136K/yr

Senior Incident Response Consultant REMOTE About the Role At Pondurance, we help organizations ... Disk and memory forensics * Network traffic analysis * Experience with EDR platforms such as ...

previous page

Showing results 41-60

All JobsForensic Analyst JobsSenior Forensic Analyst JobsSenior Forensic Analyst Jobs in Springfield, VA

Senior Forensic Analyst information

See Springfield, VA salary details

$56.2K

$115.4K

$149.7K

How much do senior forensic analyst jobs pay per year?

As of Aug 23, 2026, the average yearly pay for senior forensic analyst in Springfield, VA is $115,373.00, according to ZipRecruiter salary data. Most workers in this role earn between $95,100.00 and $143,900.00 per year, depending on experience, location, and employer.

What does a senior forensic analyst do?

A Senior Forensic Analyst is responsible for investigating and analyzing digital evidence from computers, mobile devices, and networks as part of cybercrime or legal investigations. They use specialized tools and techniques to recover, preserve, and interpret data to uncover how an incident occurred. Senior Forensic Analysts often work with law enforcement, legal teams, or private organizations, preparing detailed reports and sometimes providing expert testimony in court. Their expertise helps ensure evidence integrity and supports the resolution of criminal or civil cases.

How does a senior forensic analyst typically collaborate with law enforcement and legal teams during investigations?

Senior Forensic Analysts play a crucial role in bridging the gap between technical findings and legal requirements. They frequently work side-by-side with law enforcement officers to collect, preserve, and analyze digital evidence, ensuring that all procedures comply with legal standards. Additionally, they prepare detailed reports and may be called upon to testify as expert witnesses in court, explaining complex digital evidence in a clear and understandable manner. Effective communication and teamwork with both technical and non-technical stakeholders are essential for ensuring that investigations proceed smoothly and that evidence is admissible in legal proceedings.

What are the key skills and qualifications needed to thrive as a senior forensic analyst, and why are they important?

To thrive as a Senior Forensic Analyst, you need expertise in digital forensics, evidence handling, and investigative protocols, typically supported by a degree in computer science, cybersecurity, or a related field. Familiarity with forensic tools such as EnCase, FTK, and Cellebrite, as well as certifications like CFCE or GCFA, is highly valued. Strong analytical thinking, attention to detail, and clear report writing are essential soft skills for this role. These skills and qualifications are crucial to ensure accurate evidence collection, effective investigations, and credible testimony in legal proceedings.

What is the difference between Senior Forensic Analyst vs Forensic Investigator?

AspectSenior Forensic AnalystForensic Investigator
CredentialsBachelor's degree in criminal justice, forensic science, or related field; certifications like CFCE or CFSS often preferredBachelor's degree in criminal justice, forensic science, or related field; certifications like CFCE or CFSS are common
Work EnvironmentLaboratories, offices, and sometimes crime scenes; focus on analysis and report writingCrime scenes, laboratories, courts; focus on evidence collection and investigation
Employer & IndustryLaw enforcement agencies, forensic labs, government agenciesLaw enforcement agencies, private investigation firms, government agencies

While both roles require a background in forensic science and similar certifications, Senior Forensic Analysts primarily focus on analyzing evidence in labs and preparing reports, whereas Forensic Investigators are more involved in evidence collection at crime scenes and initial investigations. The roles often overlap but differ in daily responsibilities and work environment.

Are senior forensic analysts in demand?

Senior forensic analysts are in high demand due to increasing cybercrime and digital investigations across various industries. Their expertise in analyzing digital evidence, using tools like EnCase or FTK, and obtaining relevant certifications such as CFCE or GCFA can enhance job prospects in law enforcement, cybersecurity firms, and corporate security teams.

What are the most commonly searched types of Forensic Analyst jobs in Springfield, VA?

The most popular types of Forensic Analyst jobs in Springfield, VA are:

What are popular job titles related to Senior Forensic Analyst jobs in Springfield, VA?

For Senior Forensic Analyst jobs in Springfield, VA, the most frequently searched job titles are:

What job categories do people searching Senior Forensic Analyst jobs in Springfield, VA look for?

The top searched job categories for Senior Forensic Analyst jobs in Springfield, VA are:

What cities near Springfield, VA are hiring for Senior Forensic Analyst jobs?

Cities near Springfield, VA with the most Senior Forensic Analyst job openings:

Senior Forensic Analyst jobs near you
Infographic showing various Senior Forensic Analyst job openings in Springfield, VA as of August 2026, with employment types broken down into 1% Internship, 81% Full Time, 11% Part Time, and 7% Contract. Highlights an 81% Physical, 9% Hybrid, and 10% Remote job distribution, with an average salary of $114,899 per year, or $55.2 per hour.

Threat Hunt Analyst - High - Digital Forensics

Koniag, Inc.

Washington, DC • On-site

$155K - $180K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted 9 days ago

Job description

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Threat Hunt Analyst - High - Digital Forensics to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced Senior Threat Hunt Analyst with advanced Digital Forensics capabilities to support the U.S. Small Business Administration (SBA). The ideal candidate is a highly skilled cybersecurity professional with deep expertise in proactive threat hunting, advanced digital forensics investigation, and incident response within complex federal IT environments. This individual will play a pivotal role in identifying and neutralizing advanced persistent threats (APTs) and sophisticated adversaries targeting SBA's critical systems and data, leveraging cutting-edge forensic techniques, threat intelligence, and adversary emulation knowledge to stay ahead of the evolving threat landscape facing the agency.
The Senior Threat Hunt Analyst will serve as a highly experienced cybersecurity professional responsible for designing and leading proactive threat hunting programs and conducting advanced digital forensics investigations in support of SBA's cybersecurity mission. This individual will bring deep technical expertise in adversary TTPs, forensic analysis, and malware reverse engineering to proactively identify hidden threats, support complex incident investigations, and continuously strengthen SBA's defensive capabilities.
Principal responsibilities will include but are not limited to:
  • Design, develop, and lead proactive threat hunting programs and targeted hunting campaigns across SBA's enterprise IT environment, including on-premises, cloud, and hybrid infrastructures, leveraging advanced analytical techniques, behavioral analytics, and threat intelligence to identify hidden adversaries, undetected malicious activity, and emerging threats before they impact SBA operations.
  • Apply expert-level knowledge of threat actor tactics, techniques, and procedures (TTPs) and the MITRE ATT&CK framework to develop, prioritize, and execute hypothesis-driven threat hunts targeting high-priority adversary behaviors, attack patterns, and threat vectors relevant to SBA's mission and threat landscape.
  • Conduct advanced digital forensics investigations in response to cybersecurity incidents and threat hunt findings, including the forensically sound acquisition, preservation, and analysis of digital evidence from endpoints, servers, network devices, cloud environments, and mobile platforms, in strict accordance with federal forensic standards and chain of custody requirements.
  • Perform advanced malware analysis, including both static analysis techniques (e.g., disassembly, decompilation, string analysis, import analysis) and dynamic analysis techniques (e.g., behavioral sandbox analysis, API monitoring, network traffic analysis), to fully characterize the capabilities, behaviors, persistence mechanisms, and indicators of compromise (IOCs) associated with malicious code identified within SBA's environment.
  • Conduct in-depth analysis of network traffic captures, memory artifacts, disk images, log data, and endpoint telemetry to reconstruct detailed attack timelines, identify root causes, characterize adversary TTPs, and determine the full scope and impact of security incidents and threat hunt findings.
  • Develop and maintain a comprehensive library of threat hunting hypotheses, hunt playbooks, and forensic investigation procedures, ensuring they remain current with the evolving threat landscape, emerging adversary TTPs, and changes to SBA's operational IT environment.
  • Produce detailed, high-quality forensic examination reports, threat hunt reports, and after-action reviews (AARs) documenting investigation methodologies, findings, evidence analysis, attack timelines, and actionable recommendations for SBA leadership, stakeholders, and inter-agency partners.
  • Collaborate closely with the SOC team, Cybersecurity Operations Technical Lead, Cybersecurity Architect, and SBA security leadership to share threat hunt findings, integrate newly identified IOCs, detection signatures, and behavioral analytics into SOC monitoring tools, and drive continuous improvement of SBA's detection and response capabilities.
  • Operationalize threat intelligence from government and commercial sources, including US-CERT, CISA, ISACs, and commercial threat intelligence platforms, to inform and prioritize threat hunting campaigns, guide forensic investigations, and enhance SBA's overall cyber defense posture.
  • Provide senior technical expertise and support during significant cybersecurity incidents, leading forensic investigation activities and coordinating with US-CERT, CISA, and other federal partners as needed to support effective incident response and inter-agency coordination.
  • Develop and tune SIEM detection rules, correlation logic, and behavioral analytics based on threat hunt findings and forensic investigation results to improve the SOC's ability to detect and respond to identified and emerging adversary TTPs targeting SBA systems.
  • Conduct vulnerability research and exploitability analysis to assess the real-world risk of vulnerabilities affecting SBA systems, informing remediation prioritization and supporting the understanding of potential adversary exploitation paths.
  • Deliver expert technical briefings and presentations to SBA leadership, stakeholders, and inter-agency partners on threat hunt findings, forensic investigation results, emerging threats, and recommendations for strengthening SBA's cybersecurity posture.
  • Mentor and provide advanced technical guidance to SOC analysts and junior threat hunt and forensics team members, elevating team capabilities in threat hunting methodologies, digital forensics techniques, and malware analysis practices.
  • Support the continuous improvement of SBA's threat hunting and digital forensics program, including the evaluation and recommendation of new tools, technologies, and methodologies to enhance program effectiveness and efficiency.

Education and Experience:
Required:
  • Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Technology, or a related field from an accredited college or university.
  • 8+ years of progressive experience in cybersecurity operations, with at least 4 years of dedicated, hands-on experience in threat hunting, digital forensics, and/or malware analysis in a senior or lead capacity within a SOC, CSIRT, or dedicated threat hunting team.
  • Demonstrated experience conducting advanced digital forensics investigations and proactive threat hunting operations within a federal government or large enterprise IT environment.
  • One or more of the following certifications:
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Forensic Examiner (GCFE)
  • GIAC Reverse Engineering Malware (GREM)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Enterprise Defender (GCED)
  • EnCase Certified Examiner (EnCE)
  • Certified Forensic Computer Examiner (CFCE)
  • Offensive Security Certified Professional (OSCP)
  • Certified Information Systems Security Professional (CISSP)

Desired:
  • Master's degree in Cybersecurity, Digital Forensics, Computer Science, or a related field.
  • 10+ years of cybersecurity experience with a strong and demonstrated focus on threat hunting, digital forensics, and malware analysis within a federal government or defense contracting environment.

Required Skills and Competencies:
  • Exceptional communication skills in English - both written and oral - with the ability to clearly and effectively articulate complex forensic findings, threat hunt results, malware analysis outputs, and technical recommendations to both technical and non-technical audiences, including senior SBA leadership and inter-agency partners.
  • Advanced expertise in proactive threat hunting methodologies, including hypothesis-driven hunting, behavioral analytics-based hunting, and intelligence-driven hunting, with demonstrated ability to apply the MITRE ATT&CK framework to identify, characterize, and respond to adversary activity within complex enterprise environments.
  • Deep proficiency in digital forensics tools and techniques across multiple forensic disciplines, including disk forensics, memory forensics, network forensics, and cloud forensics, utilizing industry-standard platforms such as EnCase, FTK, Autopsy, Volatility, Magnet AXIOM, X-Ways Forensics, or equivalent tools.
  • Strong expertise in malware analysis, including both static analysis (e.g., disassembly using IDA Pro or Ghidra, decompilation, string extraction, import analysis, and PE header analysis) and dynamic analysis (e.g., behavioral analysis in controlled sandbox environments using Cuckoo Sandbox, Any.run, or equivalent, including API call monitoring, network traffic analysis, and registry activity tracking).
  • Advanced proficiency in log analysis and cross-source data correlation, with the ability to analyze and correlate data across diverse sources including Windows Event Logs, Syslog, cloud platform logs, application logs, and network flow data to reconstruct detailed attack timelines and support thorough forensic investigations.
  • Hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, ArcSight, or similar) and demonstrated ability to develop advanced queries, custom detection rules, and behavioral analytics to support threat hunting campaigns and improve SOC detection capabilities based on hunt findings.
  • Strong knowledge of network security concepts and protocols, including TCP/IP, DNS, HTTP/S, and demonstrated ability to analyze packet captures and network traffic flows using tools such as Wireshark, Zeek, NetworkMiner, or similar to support threat hunting and forensic investigations.
  • Proficiency with endpoint detection and response (EDR) platforms and demonstrated ability to leverage advanced EDR telemetry, including process trees, memory artifacts, and behavioral data, for sophisticated threat hunting and forensic investigation activities.
  • Demonstrated ability to operationalize threat intelligence from multiple government and commercial sources, including US-CERT, CISA, ISACs, and commercial TIPs, to drive threat hunting priorities, guide forensic investigations, and enhance SBA's detection and response capabilities.
  • Deep understanding of adversary TTPs, kill chain methodologies, and threat actor groups relevant to federal civilian agencies, including nation-state actors, financially motivated cybercriminal organizations, and insider threats, and the ability to apply this knowledge to threat hunting and forensic investigation activities.
  • Experience conducting digital forensics investigations in strict compliance with federal evidence handling standards, chain of custody requirements, and applicable legal and regulatory frameworks governing the use of digital evidence
  • Strong knowledge of federal cybersecurity frameworks and compliance requirements, including NIST SP 800-53, NIST SP 800-61, NIST SP 800-86, FISMA, and CISA guidance and directives, and their application to threat hunting and digital forensics activities within a federal civilian agency environment.
  • Ability to obtain and maintain a Public Trust Clearance.

Desired Skills and Competencies:
  • Prior experience supporting SBA or other federal civilian agency cybersecurity programs, particularly in a threat hunting or digital forensics capacity, with demonstrated knowledge of SBA's IT environment and threat landscape.
  • Advanced experience with cloud forensics and threat hunting in AWS, Azure, or GCP environments, including in-depth familiarity with cloud-native logging, monitoring, and forensic investigation capabilities such as AWS CloudTrail, Azure Activity Logs, Microsoft Defender for Endpoint, and Google Cloud Logging.
  • Experience with Security Orchestration, Automation, and Response (SOAR) platforms and proficiency in scripting languages such as Python, PowerShell, or Bash for the development of automated threat hunting workflows, forensic analysis scripts, and IOC enrichment tools.
  • Familiarity with deception technologies, including honeypots, honeynets, and enterprise deception platforms, and experience leveraging deception capabilities to support threat hunting operations, adversary identification, and intelligence collection.
  • Experience with threat intelligence platforms (TIPs) such as MISP, ThreatConnect, Anomali, or similar, and demonstrated familiarity with structured threat intelligence formats and sharing standards, including STIX/TAXII.
  • Knowledge of Zero Trust Architecture (ZTA) principles and their implications for threat hunting, forensic investigation, and adversary detection within a federal IT environment undergoing Zero Trust transformation.
  • Familiarity with the CDM (Continuous Diagnostics and Mitigation) program tools, data feeds, and operational requirements, and experience leveraging CDM data to support threat hunting and forensic investigation activities within a federal civilian agency environment.
  • Experience supporting or leading digital forensics investigations in response to nation-state or advanced persistent threat (APT) actor activity targeting federal civilian agencies.
  • GIAC Network Forensic Analyst (GNFA) or GIAC Cloud Forensics Responder (GCFR) certification.
  • Experience with mobile device forensics, including the forensically sound acquisition and analysis of mobile device artifacts using industry-standard tools such as Cellebrite UFED, Oxygen Forensic Detective, or equivalent platforms.
  • Experience working within FedRAMP authorized cloud environments and familiarity with FedRAMP boundary definitions, security requirements, and forensic investigation considerations as they relate to cloud-based evidence collection and threat hunting activities.
  • Familiarity with adversarial machine learning (ML) concepts and th
Koniag logo

About Koniag

Sourced by ZipRecruiter

Industry

Investment management and consulting services

Company size

501 - 1,000 Employees

Headquarters location

Kodiak, AK, US

Year founded

1972

Social media

Facebook

View All Koniag Jobs

Apply