Cyber Forensics Analyst

About the Team

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value attracting and developing top talent and high-performing teams, fostering a culture that is engaging, accountable, and mission-driven.

About the Role

ECS is seeking a Cyber Forensics Analyst to join our team in our Portland, OR office. Please note: This position is contingent upon contract award.

The Forensics Analyst Mid performs hands-on forensic analysis and malware investigation activities in support of SOC security investigations, incident response, routine memory checks, and advanced threat hunting. This role uses industry-standard forensic tools and strong investigative skills to collect, analyze, and document technical evidence.

The ideal candidate has solid cybersecurity experience, strong written communication skills, and the ability to operate resourcefully and independently while coordinating with SOC teams, data centers, and senior forensic personnel during investigations. You will contribute to repeatable forensic procedures, knowledge sharing, and continuous process improvement, applying strong investigative, research, and problem-solving skills to ambiguous technical issues.

Equal Opportunity

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law.

Join Us

Meet the challenge. Make a difference with Everforth ECS!

Work location

Work model: On-site

Morrison Bridge, Downtown, Portland, Multnomah County, Oregon, 97204, United States

Portland, Oregon

Key Responsibilities

check_circlePerform forensic analysis using industry-standard tools and open-source DFIR utilities
check_circleAssist with investigations involving endpoints, servers, malware, and cyber incidents
check_circleAnalyze Windows Registry, Linux artifacts, file system data, logs, and memory artifacts
check_circleAnalyze malware in a lab environment using standard analysis techniques
check_circleCreate IOCs based on forensic and malware findings for security teams
check_circleAssist the SOC with security investigations and incident response activities
check_circleConduct routine memory checks on Linux and Windows servers
check_circleCreate clear investigation reports, forensic summaries, and supporting documentation
check_circleCommunicate findings effectively to SOC analysts, incident responders, and leadership
check_circle

Requirements

verified5 to 8 years of experience in cybersecurity, digital forensics, incident response, or related cyber investigation work
verifiedExperience performing forensic analysis using industry-standard forensic tools and open-source tools
verifiedFamiliarity with Windows Registry, Windows System Calls, Linux operating systems, and Java code de-obfuscation
verifiedHands-on experience with Volatility or other memory forensics tools, FTK, and Wireshark
verifiedAbility to create IOCs based on forensic analysis and share them with other security teams
verifiedAbility to analyze malware in a lab environment using standard malware analysis techniques
verifiedExperience performing or supporting forensic investigations and incident response activities
verifiedGCFE, GCFA, EnCE, FOR508, Security+, GREM, CEH, or CSFA certification preferred

Nice to Have

Experience with EnCase (OpenText), Autopsy, Axiom, Zimmerman tools, and other DFIR tools. Experience supporting a U.S. Government civilian agency, enterprise SOC, or regulated environment. Experience with OllyDbg, IdaPro, or comparable reverse-engineering tools. Knowledge of X86 Intel Assembly Language. Possession of certifications such as GCFE, GCFA, EnCE, FOR508, Security+, GREM, CEH, or CSFA.

Frequently asked questions about Cyber Forensics Analyst at Electronic Consulting Services Inc

What does a Cyber Forensics Analyst at Electronic Consulting Services Inc do?expand_more

A Cyber Forensics Analyst at Electronic Consulting Services Inc is responsible for the following: Perform forensic analysis using industry-standard tools and open-source DFIR utilities; Assist with investigations involving endpoints, servers, malware, and cyber incidents; Analyze Windows Registry, Linux artifacts, file system data, logs, and memory artifacts; and Analyze malware in a lab environment using standard analysis techniques.

What are the requirements for this Cyber Forensics Analyst role?expand_more

Electronic Consulting Services Inc is looking for candidates who meet the following requirements: 5 to 8 years of experience in cybersecurity, digital forensics, incident response, or related cyber investigation work; Experience performing forensic analysis using industry-standard forensic tools and open-source tools; Familiarity with Windows Registry, Windows System Calls, Linux operating systems, and Java code de-obfuscation; Hands-on experience with Volatility or other memory forensics tools, FTK, and Wireshark; Ability to create IOCs based on forensic analysis and share them with other security teams; and Ability to analyze malware in a lab environment using standard malware analysis techniques.

Where is the Cyber Forensics Analyst role at Electronic Consulting Services Inc located?expand_more

Cyber Forensics Analyst at Electronic Consulting Services Inc is based in Morrison Bridge, Downtown, Portland, Multnomah County, Oregon, 97204, United States. This is a on-site role.

Is this Cyber Forensics Analyst job remote, hybrid, or on-site?expand_more

Electronic Consulting Services Inc has listed this Cyber Forensics Analyst role as on-site.

How much experience is required for this Cyber Forensics Analyst role?expand_more

Cyber Forensics Analyst at Electronic Consulting Services Inc typically requires 5–8 years of relevant experience at the senior level.

What skills do you need for the Cyber Forensics Analyst role at Electronic Consulting Services Inc?expand_more

Key skills for Cyber Forensics Analyst at Electronic Consulting Services Inc include Cybersecurity; Digital Forensics; Incident Response; Forensic Analysis; Malware Analysis; Memory Forensics; Ioc Creation; and Reverse-Engineering.

What category does the Cyber Forensics Analyst role belong to?expand_more

Cyber Forensics Analyst at Electronic Consulting Services Inc is part of the it job category on Recrutus.