Digital Forensics and Incident Response Analyst - Atlanta, GA

Job Description A leading enterprise organization is seeking a Digital Forensics & Incident Response Analyst to support cybersecurity investigations, digital evidence collection, incident response operations, and eDiscovery initiatives. This role is ideal for a security professional who enjoys conducting complex investigations, analyzing forensic artifacts, and partnering with legal, compliance, and security stakeholders to address high-impact security events.
The successful candidate will have a strong foundation in digital forensics, cyber defense, and investigative processes, with experience preserving evidence, performing forensic analysis, and supporting enterprise incident response efforts. This position offers the opportunity to work across a wide range of investigations involving endpoints, mobile devices, security incidents, and compliance matters.
This is a remote position located in Georgia. Required Skills & Experience

• 6+ years of experience in Information Technology, Cybersecurity, Digital Forensics, Incident Response, or a related field
• 2+ years of experience in Information Security, Network Security, Cyber Defense, or Digital Forensics
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline
• Experience conducting digital forensic investigations involving computers, mobile devices, and electronic media
• Strong understanding of chain of custody procedures and evidence preservation requirements
• Knowledge of forensic best practices and legal admissibility standards
• Experience supporting Windows, macOS, and iOS environments
• Strong analytical, investigative, documentation, and communication skills
• One of the following certifications:
  • EnCE
  • GCFA
  • GCFE
  • GCIH

Desired Skills & Experience

• Experience supporting legal, compliance, HR, or internal investigations
• Background in criminal investigations or corporate investigative functions
• Experience with forensic imaging, timeline analysis, artifact analysis, and data recovery
• Experience using:
  • FTK
  • Magnet AXIOM
  • Cellebrite
  • Nuix
  • Microsoft Purview
  • CrowdStrike
  • Splunk
  • OpenText
  • Exterro
• Experience developing incident response procedures and playbooks
• Background working within healthcare, regulated, or large enterprise environments

What You Will Be Doing Daily Responsibilities

• Conduct forensic imaging and preservation of digital evidence
• Collect, document, and maintain electronic evidence in accordance with chain of custody standards
• Perform forensic examinations, artifact analysis, timeline reconstruction, and data recovery activities
• Investigate security incidents and identify indicators of compromise
• Analyze malicious activity, security alerts, and forensic artifacts
• Support incident response activities and cyber defense initiatives
• Assist with eDiscovery matters throughout the case lifecycle
• Prepare investigative findings and reports for technical and non-technical stakeholders
• Partner with Legal, Compliance, HR, and Security teams during investigations
• Maintain investigation records and evidence inventories
• Contribute to process improvements, documentation, and incident response procedures
• Mentor junior team members and share technical knowledge across the team

The Offer

• Competitive contract opportunity
• Fully remote within Georgia
• Highly visible role supporting enterprise cybersecurity operations
• Opportunity to work on digital forensics, incident response, eDiscovery, and compliance investigations
• Collaborative environment with exposure to Security, Legal, HR, and Compliance teams

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.