{"id":2407365,"url":"https://alion.io/job/cybercentaurs-senior-digital-forensic-examiner","title":"Senior Digital Forensic Examiner","company":{"id":4423312,"name":"Cyber Centaurs","domain":"cybercentaurs.com","url":"https://alion.io/company/cybercentaurs","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":183000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Windows","optional":false},{"name":"EnCase","optional":true},{"name":"Google Workspace","optional":true}],"status":"live","first_seen_at":"2026-10-13T01:17:23Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-11-06T00:20:56Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"This is a remote position.\nAbout Cyber Centaurs\nCyber Centaurs is a digital forensics and incident response firm serving businesses, law firms, insurers, and other organizations facing complex cyber incidents, employee misconduct, data theft, and litigation-related matters. Our work is guided by a simple principle: Evidence Over Assumption. We use defensible forensic methods, clear reporting, and careful analysis to help clients establish the facts and make informed decisions. Cyber Centaurs is growing, and we are seeking an experienced forensic professional who can take ownership of investigations while helping us continue to develop a disciplined, efficient, and respected digital forensics practice.\nPosition Overview\nThe Senior Digital Forensic Examiner is a senior, hands-on investigative position responsible for independently conducting digital forensic examinations from evidence acquisition through final reporting. This individual will manage assigned matters, examine computers and other digital evidence, document findings, prepare clear and defensible reports, and communicate directly with attorneys, executives, clients, and other stakeholders. The examiner may also support affidavits, depositions, hearings, and expert-witness engagements. The successful candidate must be comfortable performing detailed technical work while also contributing to quality assurance, process development, examiner training, and the continued growth of the forensic practice. The position offers a potential advancement path into a future Forensics Practice Lead or Director of Digital Forensics role as the team and service line continue to grow.\nPrimary Responsibilities\nIndependently manage digital forensic investigations from intake through completion.\nAcquire, preserve, process, and examine digital evidence using accepted forensic methods.\nConduct forensic examinations of Windows computers, storage media, cloud data, email, and other relevant data sources.\nInvestigate matters involving insider threats, employee data theft, trade-secret theft, unauthorized access, intellectual-property disputes, fraud, workplace misconduct, and litigation.\nIdentify, interpret, and correlate operating-system artifacts, file activity, external storage usage, cloud synchronization, browser activity, email activity, application usage, and other relevant evidence.\nDevelop defensible timelines based on multiple forensic data sources.\nDetermine the meaning, reliability, and limitations of forensic artifacts.\nMaintain complete case notes, examination records, chain-of-custody documentation, and supporting exhibits.\nPrepare clear, accurate, and technically defensible forensic reports.\nExplain technical findings in plain language to attorneys, executives, clients, and other nontechnical audiences.\nParticipate in client meetings, attorney conferences, findings presentations, and case-strategy discussions.\nSupport the preparation of declarations, affidavits, deposition testimony, hearing testimony, and expert reports when required.\nPreserve the distinction between established facts, reasonable interpretations, and matters that cannot be determined from the available evidence.\nReview the work of junior personnel or evidence technicians as the forensic team expands.\nAssist with quality-control reviews of reports, exhibits, timelines, and forensic conclusions.\nHelp develop and improve forensic procedures, examination workflows, reporting templates, and quality standards.\nIdentify opportunities for responsible automation and more efficient evidence processing.\nMaintain awareness of changes in operating systems, applications, cloud platforms, forensic artifacts, and industry practices.\nProtect confidential, privileged, personally identifiable, and legally sensitive information.\nMeet case deadlines and communicate promptly when scope, evidence volume, or technical conditions may affect delivery.\nTravel periodically for evidence collection, client meetings, depositions, hearings, or other case requirements.\nRequirements\n At least five years of professional experience conducting digital forensic examinations or closely related investigations.\nDemonstrated ability to manage forensic matters independently with limited supervision.\nStrong knowledge of Windows forensic artifacts and file-system analysis.\nExperience examining computers, storage media, email, cloud data, and user activity.\nExperience investigating at least several of the following:\nInsider threats\nEmployee data theft\nTrade-secret or intellectual-property theft\nUnauthorized access\nExternal storage and USB activity\nCloud-storage and file-synchronization activity\nEmail-related activity\nFile deletion or attempted concealment\nWorkplace misconduct\nCivil litigation or employment disputes\nStrong understanding of forensic acquisition, evidence preservation, hashing, documentation, and chain-of-custody requirements.\nDemonstrated ability to correlate evidence from multiple sources and build defensible activity timelines.\nStrong analytical judgment and careful attention to detail.\nExcellent written communication skills, including experience preparing formal forensic reports.\nAbility to explain technical findings clearly to nontechnical audiences.\nExperience communicating directly with attorneys, executives, clients, or other senior stakeholders.\nAbility to manage multiple investigations, priorities, and deadlines.\nWillingness to travel when case requirements make travel necessary.\nAbility to pass applicable background screening and comply with confidentiality and evidence-handling requirements.\nLegal authorization to work in the United States.\nPreferred Qualifications\nBachelor’s or master’s degree in digital forensics, cybersecurity, computer science, information technology, criminal justice, or a related discipline.\nOne or more recognized forensic certifications, such as:\nGIAC Certified Forensic Examiner (GCFE)\nGIAC Certified Forensic Analyst (GCFA)\nCertified Forensic Computer Examiner (CFCE)\nEnCase Certified Examiner (EnCE)\nCertified Computer Examiner (CCE)\nCellebrite Certified Mobile Examiner (CCME)\nOther comparable digital forensic credentials\nExperience working for a digital forensics consultancy, incident response firm, law-enforcement laboratory, corporate investigations team, or litigation-support organization.\nExperience preparing expert reports, declarations, or affidavits.\nPrior deposition, hearing, or trial-testimony experience.\nExperience supporting attorneys in employment, trade-secret, intellectual-property, fraud, or other civil disputes.\nExperience with mobile-device forensics.\nExperience with Microsoft 365, Google Workspace, cloud storage, collaboration platforms, or cloud audit records.\nExperience with forensic scripting, data processing, automation, or custom investigative workflows.\nExperience mentoring junior examiners or reviewing the work of other forensic professionals.\nProfessional Qualities\nCareful and methodical without allowing avoidable delays to affect the investigation.\nDependable in meeting deadlines and communicating case status.\nComfortable making independent technical decisions while recognizing when consultation is appropriate.\nPrecise in documentation, reporting, and evidence handling.\nCapable of defending their methods and conclusions under professional or legal scrutiny.\nRespectful of the limits of the available evidence.\nComfortable working in a growing firm where processes continue to be refined.\nInterested in helping develop a high-quality forensic practice rather than only completing assigned technical tasks.\nProfessional and composed when communicating with attorneys, executives, opposing experts, and clients facing stressful situations.\nMeasures of Success\nIndependently progressing assigned forensic matters.\nProducing accurate and defensible work with limited substantive revision.\nMeeting agreed-upon deadlines and communicating risks early.\nMaintaining complete case documentation and evidence records.\nProviding clients and counsel with clear, useful explanations of forensic findings.\nExercising sound judgment concerning forensic conclusions and evidentiary limitations.\nContributing practical improvements to Cyber Centaurs’ examination, reporting, and quality-control processes.\nDeveloping the credibility and case experience necessary to support expert-witness engagements where appropriate.\nWork Arrangement and Travel\nThis position may be performed remotely within the United States. Periodic travel to Cyber Centaurs’ Orlando office, client locations, evidence-collection sites, depositions, hearings, or trials may be required.\nSome investigations may require schedule flexibility due to court deadlines, urgent preservation needs, travel, or time-sensitive client matters.\nBenefits\nProfessional Growth and Leadership\nWork directly with the Managing Principal and experienced forensic investigators.\n\nHelp shape the procedures, quality standards, and future direction of a growing digital forensics practice.\n\nDevelop toward broader technical leadership and potential responsibility for the forensic practice.\n\nMeaningful Investigative Work\nConduct substantive corporate, legal, and litigation-related investigations.\n\nWork on matters involving insider threats, employee data theft, trade-secret theft, unauthorized access, fraud, and workplace misconduct.\n\nTake ownership of investigations from evidence acquisition through analysis, reporting, and presentation of findings.\n\nLitigation and Expert Engagements\nSupport attorneys and clients in complex litigation, employment, trade-secret, intellectual-property, and other contested matters.\n\nPrepare clear and defensible forensic reports, declarations, affidavits, timelines, and supporting exhibits.\n\nParticipate in attorney conferences, depositions, hearings, trials, and other expert engagements when required.\n\nApply existing testimony experience while continuing to expand professional credibility across complex forensic matters.\n\nCulture\nJoin a small, focused, and high-performance team.\n\nWork in an environment that values precision, accountability, sound judgment, and defensible conclusions.\n\nContribute directly to improving investigative workflows, forensic capabilities, and client outcomes.\n\nBenefits\nFlexible paid time off\n\nMedical insurance\n\nPaid holidays\n\nSick leave\n\nAnnual professional-development allowance\n\nCompany-provided computer equipment, business mobile phone, software, and forensic tools\n\nEligibility for applicable performance bonus and growth incentive programs\n\nBenefits and eligibility are governed by applicable plan documents and company policies.","description_format":"text","description_chars":10633,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-13T01:17:23Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.758,"p_room":0.75,"age_days":23,"expected_fill_days":29,"reasons":["conf:2","win:late"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/cybercentaurs-senior-digital-forensic-examiner","json_url":"https://alion.io/job/cybercentaurs-senior-digital-forensic-examiner.json","meta":{"generated_at":"2026-11-06T04:03:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6930,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423312},"rest":"https://alion.io/mcp/rest/get_company?id=4423312"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcybercentaurs-senior-digital-forensic-examiner"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcybercentaurs-senior-digital-forensic-examiner"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcybercentaurs-senior-digital-forensic-examiner"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cybercentaurs-senior-digital-forensic-examiner\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcybercentaurs-senior-digital-forensic-examiner"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2407365}},{"tool":"search_jobs","arguments":{"company":"cybercentaurs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2407365},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}