{"id":1127404,"url":"https://alion.io/job/code-hub-digital-forensic-analyst","title":"Digital Forensic Analyst","company":{"id":945908,"name":"Code.Hub","domain":"codehub.gr","url":"https://alion.io/company/codehub-gr","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":{"grade":"C","score":69,"open_postings":64,"ghost_share":0.516,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Thessaloniki, Greece"],"countries":["GR"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":28000,"max":30000,"currency":"EUR","period":"year","gross":null,"usd_annual":34405},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"EnCase","optional":false},{"name":"FTK","optional":false},{"name":"GDPR","optional":false},{"name":"SIEM","optional":false},{"name":"X-Ways Forensics","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-07-20T00:00:00Z","employer_posted_date":"2026-07-20","last_verified_at":"2026-09-22T22:28:05Z","board_verified":false,"closed_at":null,"days_open":88,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":88},"description":"We are seeking an experienced Digital Forensics & Insider Threat (DFIT) Analyst to join the DFIT team within our client’s Global Cyber Defense organization. The ideal candidate will be at the forefront of protecting the company’s most critical digital assets, leading investigations and responding to insider threat alerts on a global scale. They will also bring deep expertise in digital forensic analysis, security investigations and the ability to operate with precision and confidence across complex business and technical environments.\nWe are the 1st Hub for Developers! Our motto is “From Developers to Developers”! Our vision is to provide real career opportunities for candidates that want to take the next step in their career. Code.Career is the first process that you will speak with developers (only!) and tech (freak) experts!\nOur client is one of the world’s leading biopharmaceutical companies, dedicated to discovering, developing, and delivering innovative medicines and vaccines that improve and extend patients’ lives. With a presence in more than 100 countries and a history spanning over 175 years, our client combines cutting-edge science, technology, and global expertise to address some of the world’s most challenging healthcare needs. The company fosters a culture of innovation, collaboration, and continuous learning, empowering its people to drive breakthroughs that make a meaningful impact on global health.\nOur client’s Global Cyber Defense team is responsible for safeguarding digital assets and infrastructure through proactive threat detection, incident response and risk mitigation across on-premises, cloud and hybrid environments.\nThe Digital Forensics & Insider Threat (DFIT) Analyst will join DFIT team within our client’s Global Cyber Defense organization. They will be at the forefront of protecting the company’s most critical digital assets, leading investigations and responding to insider threat alerts on a global scale. The Digital Forensics & Insider Threat (DFIT) Analyst will also bring deep expertise in digital forensic analysis, security investigations and the ability to operate with precision and confidence across complex business and technical environments.\nKey Responsibilities\nCollaborate with internal customers to plan and execute forensic support for investigations, ranging from simple to complex cases.\nCollect, process, and analyze electronically stored information (ESI) from various digital sources, including networks, cloud platforms, and end-user devices, adhering to forensic industry standards and maintaining chain of custody.\nProduce accurate, repeatable case documentation and deliver clear written and verbal reports and status updates to customers.\nParticipate in the Forensic Investigation Triage process, prioritizing new requests and alert tickets to ensure timely response and resolution.\nUse of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways and Oxygen).\nLeverage SOC tooling including SIEM platforms and SOAR solutions to detect, investigate, and respond to security incidents and insider threat alerts in a timely and effective manner, including risks arising from enterprise AI use and emerging AI-driven threat vectors.\nApply data protection and insider threat technologies to monitor, investigate, and remediate potential data loss and policy violations across the enterprise.\nUtilize Agile methodology to plan, manage, and execute projects, ensuring efficient workflow, timely delivery, and high-quality results.\nManage multiple concurrent investigations and projects with minimal supervision, prioritizing tasks effectively while working both independently and collaboratively across teams, and setting clear expectations with key stakeholders.\nConduct peer reviews of findings and work products from other examiners to ensure accuracy and quality.\nRespond to investigative requests at short notice, which may require domestic and international travel, and working during extended hours. In exceptional instances this may include weekends and holidays.\nAs part of a global team there may be times that require working outside normal business hours to attend meetings, case activities and complete projects.\nMaintain forensic certifications to ensure continued professional standing.\nRequired Qualifications\nBachelor’s Degree, preferably in Computer Science, Information Security, Cyber Security, Computer Forensics or commensurate professional experience.\n3+ years of experience in Digital Forensics within Law Enforcement or within a corporate environment.\nOne or more of the following certifications: EnCE, CFCE, GCFE, GASF or GCFA.\nStrong understanding of industry standard digital forensic tools (such as EnCase, FTK, NUIX, Axiom, Cellebrite, X-Ways, Oxygen).\nExperience using physical, local, and remote acquisition tools across multiple OS systems.\nProficiency with industry-standard SOC tooling, including SIEM and SOAR platforms, to support threat detection, investigation, and incident response.\nDemonstrated experience with data protection and insider threat technologies, with a strong understanding of cloud security, data loss prevention, and user activity monitoring solutions across enterprise environments.\nFamiliarity with AI-generated risk and the ability to investigate and respond to AI tool usage within an enterprise environment.\nUnderstanding of European General Data Protection Regulation (GDPR) or European/Global Privacy laws and related laws in APAC region.\nOutstanding communication skills, including the ability to write and verbally articulate industry terminology to interact at a technical level, management level and senior executive level.\nExperience in effective and efficient time and resource management.\nApply appropriate technologies across diverse examinations while driving continuous improvements in service delivery efficiency and consistency.\nMobile device and memory forensic analysis experience would be beneficial.\nDemonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.\nNice-to-Have Skills\nExperience with cloud-native forensic investigations across Microsoft Azure, AWS, and Google Cloud Platform (GCP).\nHands-on scripting or automation experience using Python, PowerShell, or Bash to streamline forensic workflows and evidence collection.\nExposure to threat hunting, malware analysis, or advanced incident response within enterprise Security Operations (SOC) environments.\nExperience supporting cross-border investigations involving legal, compliance, HR, or regulatory stakeholders in multinational organizations.\nKnowledge of eDiscovery platforms, email forensics (e.g., Microsoft 365 Exchange), and large-scale data review processes.\nAdditional industry certifications such as GCIA, GCIH, CISSP, CISM, Azure Security Engineer, or AWS Security Specialty would be considered an advantage.\nUpon further discussion with our client.","description_format":"text","description_chars":7035,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Education","Professional Services","Incident Response"],"lifecycle":[{"event":"open","at":"2026-09-22T22:28:05Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.365,"p_room":0.28,"age_days":88,"expected_fill_days":30,"reasons":["conf:559","stale_co","urgency","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":34405,"is_top_pay":false},"html_url":"https://alion.io/job/code-hub-digital-forensic-analyst","json_url":"https://alion.io/job/code-hub-digital-forensic-analyst.json","meta":{"generated_at":"2026-10-16T23:35:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5549,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":945908},"rest":"https://alion.io/mcp/rest/get_company?id=945908"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcode-hub-digital-forensic-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcode-hub-digital-forensic-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcode-hub-digital-forensic-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/code-hub-digital-forensic-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcode-hub-digital-forensic-analyst"}]}