Digital Forensics - Analyst

Immediate need for a talented Digital Forensics - Analyst . This is a 12  months contract opportunity with long-term potential and is located in EST(Remote). Please review the job description below and contact me ASAP if you are interested.

Job ID: 26-23406

Pay Range: $65 - $70/hour.  Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Lead end-to-end digital forensic investigations involving insider threats, intellectual property theft, employee misconduct, fraud, and security incidents.
• Conduct forensic imaging, evidence acquisition, artifact analysis, and timeline reconstruction while maintaining proper chain of custody.
• Support high-severity security incidents through advanced forensic analysis, root cause identification, and attribution.
• Perform investigations using Magnet AXIOM Cyber, Cellebrite Endpoint Collector, Cellebrite Endpoint Investigator, Sumuri Recon, and comparable forensic platforms.
• Conduct eDiscovery collections across Microsoft 365, Exchange Online, cloud platforms, and endpoints to support legal holds and regulatory requests.
• Analyze security telemetry and forensic artifacts using CrowdStrike Falcon, Chronicle (YARA-L), and Splunk (SPL).
• Investigate authentication and access activity across Azure AD, Okta, Zscaler, and enterprise SaaS platforms.
• Develop AI-assisted workflows for forensic triage, log analysis, timeline reconstruction, and investigation reporting.
• Collaborate with Legal, HR, Ethics, and Security teams to communicate findings and support sensitive investigations.
• Prepare comprehensive investigation reports suitable for executive review, litigation, and regulatory proceedings.

Key Requirements and Technology Experience:

• 7 years of experience in digital forensics, cybersecurity investigations, or a closely related discipline.
• Strong experience investigating insider threats, data exfiltration, employee misconduct, and enterprise security incidents.
• Hands-on experience with Magnet AXIOM Cyber, Cellebrite, Sumuri Recon, or comparable forensic tools.
• Expertise in forensic imaging, evidence preservation, hash verification, and chain-of-custody procedures.
• Experience with CrowdStrike Falcon EDR and Microsoft 365 forensic investigations.
• Strong knowledge of Windows and macOS endpoint forensic artifacts.
• Experience investigating cloud and SaaS environments, including authentication logs, access patterns, and audit trails.
• Proficiency with Chronicle (YARA-L) for security investigations and threat hunting.
• Familiarity with JAMF, Intune, or SCCM for device attribution and asset profiling.
• Experience supporting eDiscovery, legal holds, and defensible evidence collection.
• Ability to develop clear, legally defensible technical investigation reports.

• AI & Automation Experience – Required

• Hands-on experience using enterprise AI platforms such as Anthropic Claude, Microsoft Copilot, or similar LLM tools.
• Ability to develop structured prompts, AI-assisted analytical workflows, and investigative automation.
• Experience applying AI to log triage, timeline synthesis, anomaly analysis, or report generation.
• Familiarity with Python, PowerShell, or similar scripting languages for lightweight investigative tooling.
• Ability to critically evaluate AI-generated outputs and maintain human oversight of evidentiary conclusions.

Our client is a leading IT Industry, and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
 
By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.

#san