{"schemaVersion":"jobsearcher.job.v1","id":"5ef3f99c8ed1aacfdd9ca444","url":"https://jobsearcher.com/jobs/5ef3f99c8ed1aacfdd9ca444","canonicalUrl":"https://jobsearcher.com/jobs/5ef3f99c8ed1aacfdd9ca444","title":"HHS - Digital Forensics Analyst","description":"cFocus Software seeks a Digital Forensics Analyst to join our program supporting the Department of Health and Human Services (HHS) This position is remote. This position requires the ability a Public Trust clearance.\nQualifications:\nBachelor’s degree in Cybersecurity, Digital Forensics, Information Technology, or related field.\nMinimum 5–8 years of experience performing digital forensic investigations.\nHands-on experience with endpoint, server, network, and cloud forensics.\nStrong knowledge of forensic acquisition, analysis, and evidence handling procedures.\nExperience supporting enterprise incident response and breach investigations.\nFamiliarity with federal incident response and reporting requirements.\nStrong analytical, documentation, and communication skills.\nActive GCFA, GCFE, EnCE, or GCIH (preferred).\nDuties:\n\nConduct digital forensic investigations following cybersecurity incidents, data breaches, and suspected malicious activity.\nPerform forensic acquisition and analysis of endpoints, servers, cloud workloads, network traffic, logs, and removable media.\nPreserve digital evidence in accordance with chain-of-custody and evidentiary handling requirements.\nIdentify incident origin, timeline, scope, and extent of compromise using forensic methodologies.\nAnalyze malware artifacts, scripts, and suspicious files to determine functionality and impact.\nSupport reverse engineering and de-obfuscation of malicious content when required.\nCorrelate forensic findings with SIEM, EDR, network, and cloud telemetry.\nProduce detailed forensic reports documenting methodology, findings, evidence, and recommendations.\nSupport incident containment, eradication, and recovery activities through forensic insight.\nAssist with investigations involving PII, PHI, and other sensitive data in coordination with HRSA Privacy and Legal teams.\nSupport FOIA searches, OGC litigation holds, and OIG criminal investigations as required.\nMaintain forensic toolsets, images, and procedures in accordance with HRSA SOPs.\nParticipate in cyber exercises, tabletop exercises, and after-action reviews.\nProvide expert guidance to SOC Analysts, Incident Responders, and Threat Hunters.\nEnsure compliance with NIST SP 800-61, NIST SP 800-86, and HHS incident response guidance.\n\nKALcHyzRul","company":"Cfocus Software","rawCompany":"cfocus software","city":"Remote","state":"OR","isRemote":false,"isActive":false,"createdAt":"2026-04-14T11:03:55.590Z","occupations":[{"code":"15-1299.06","title":"Digital Forensics Analysts","slug":"digital-forensics-analysts"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"HHS - Digital Forensics Analyst","description":"cFocus Software seeks a Digital Forensics Analyst to join our program supporting the Department of Health and Human Services (HHS) This position is remote. This position requires the ability a Public Trust clearance.\nQualifications:\nBachelor’s degree in Cybersecurity, Digital Forensics, Information Technology, or related field.\nMinimum 5–8 years of experience performing digital forensic investigations.\nHands-on experience with endpoint, server, network, and cloud forensics.\nStrong knowledge of forensic acquisition, analysis, and evidence handling procedures.\nExperience supporting enterprise incident response and breach investigations.\nFamiliarity with federal incident response and reporting requirements.\nStrong analytical, documentation, and communication skills.\nActive GCFA, GCFE, EnCE, or GCIH (preferred).\nDuties:\n\nConduct digital forensic investigations following cybersecurity incidents, data breaches, and suspected malicious activity.\nPerform forensic acquisition and analysis of endpoints, servers, cloud workloads, network traffic, logs, and removable media.\nPreserve digital evidence in accordance with chain-of-custody and evidentiary handling requirements.\nIdentify incident origin, timeline, scope, and extent of compromise using forensic methodologies.\nAnalyze malware artifacts, scripts, and suspicious files to determine functionality and impact.\nSupport reverse engineering and de-obfuscation of malicious content when required.\nCorrelate forensic findings with SIEM, EDR, network, and cloud telemetry.\nProduce detailed forensic reports documenting methodology, findings, evidence, and recommendations.\nSupport incident containment, eradication, and recovery activities through forensic insight.\nAssist with investigations involving PII, PHI, and other sensitive data in coordination with HRSA Privacy and Legal teams.\nSupport FOIA searches, OGC litigation holds, and OIG criminal investigations as required.\nMaintain forensic toolsets, images, and procedures in accordance with HRSA SOPs.\nParticipate in cyber exercises, tabletop exercises, and after-action reviews.\nProvide expert guidance to SOC Analysts, Incident Responders, and Threat Hunters.\nEnsure compliance with NIST SP 800-61, NIST SP 800-86, and HHS incident response guidance.\n\nKALcHyzRul","datePosted":"2026-04-14T11:03:55.590Z","dateModified":"2026-04-14T11:03:55.590Z","hiringOrganization":{"@type":"Organization","name":"Cfocus Software","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote","addressRegion":"OR","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"5ef3f99c8ed1aacfdd9ca444"},"url":"https://jobsearcher.com/jobs/5ef3f99c8ed1aacfdd9ca444"}}