DIGITAL FORENSICS SPECIALIST

Senior Digital Forensics & OSINT Specialist (Autopsy & Maltego)

Role Overview

We are seeking a deeply technical Digital Forensics & OSINT Specialist with demonstrated, hands‑on mastery of Autopsy and Maltego in real investigations. This role is not training‑oriented. You will be expected to operate autonomously, defend your findings under scrutiny, and produce legally and operationally defensible intelligence.

This position sits at the intersection of digital forensics, cyber investigations, and intelligence analysis, supporting high‑risk cases including fraud, insider threat, cybercrime, and complex attribution efforts.

Key Responsibilities

Digital Forensics (Autopsy)

• Perform end‑to‑end forensic analysis on disk images, removable media, and file systems using Autopsy.
• Conduct timeline reconstruction, artifact correlation, and deleted file recovery.
• Identify evidence of anti‑forensic activity (e.g., timestomp, data wiping, file obfuscation).
• Maintain forensic soundness and chain of custody throughout acquisition and analysis.
• Produce court‑ready forensic reports with repeatable methodology and defensible conclusions.

OSINT & Link Analysis (Maltego)

• Conduct advanced Maltego investigations involving multi‑hop entity resolution.
• Design, customize, and optimize Maltego transforms and workflows for complex investigations.
• Correlate open‑source intelligence across domains, infrastructure, social media, and identifiers.
• Distinguish signal from noise in large‑scale graph‑based investigations.
• Validate OSINT findings to evidentiary or intelligence standards (not assumptions).

Analysis & Reporting

• Translate technical findings into clear, actionable intelligence for non‑technical stakeholders.
• Defend investigative methodology and conclusions under peer review or legal scrutiny.
• Collaborate with legal, compliance, and cybersecurity teams as required.

Mandatory Qualifications (Non‑Negotiable)

• 5+ years of hands‑on experience in digital forensics, OSINT, cyber investigations, or intelligence analysis.
• Demonstrated real‑world use of Autopsy beyond lab or academic exercises.
• Demonstrated real‑world use of Maltego beyond basic transforms or canned demos.
• Strong understanding of file systems (NTFS, FAT, EXT), artifacts, and forensic theory.
• Proven experience documenting investigations to professional or legal standards.
• High tolerance for ambiguity, incomplete data, and adversarial environments.

Strongly Preferred (But Still Expected)

• Experience working on live or high‑stakes investigations (fraud, cybercrime, insider threat, or similar).
• Ability to explain forensic and OSINT decisions under challenge.
• Familiarity with investigative operational security (OPSEC).
• Experience identifying false positives, data poisoning, or OSINT deception techniques.

This role requires thinking like an investigator, not a user of tools.