Forensic Focus

Belkasoft X is a comprehensive digital forensics tool that supports evidence from five source categories: computers, mobile devices, cloud services, vehicles, and drones. Because mobile evidence often accounts for the largest share in modern investigations, mobile forensics is a major focus of the platform.

★ Featured Job Arizona State University Arizona Faculty Associate/Instructional Professional role teaching undergraduate digital and computer forensics at Arizona State University’s School of Interdisciplinary Forensics. Responsibilities include developing and delivering undergraduate course content, providing practical instruction in digital forensic methods and technologies, supporting student learning and assessment, and contributing subject matter expertise in computer and digital forensics.

Oversees digital forensics and incident response cases from start to finish, managing quality, budgets, and timelines while acting as the main client contact. Combines hands-on forensic work with mentoring analysts and leading scoping discussions for new engagements. Requires over six years in DFIR, including some leadership experience, with proficiency in tools such as FTK, EnCase, X-Ways, KAPE, Velociraptor and Zimmerman utilities. Certifications like GCFA, GCFE, GNFA, CCE or CFCE are preferred.

← All jobs · More in this country State of Oklahoma Oklahoma County, OK Onsite · Junior · Full-time This position supports criminal investigations into child exploitation by performing field previews of computers and phones, conducting full mobile device examinations, collecting and preserving digital evidence, producing technical reports, and testifying in court.

KPMG US Albany, NY Onsite · Lead/Principal · Full-time This senior position leads end-to-end investigations into major cyber incidents, analysing disks, memory, logs and network traffic across on-premise and multicloud environments. The role involves reconstructing attack timelines, advising leadership during breaches, implementing containment measures, and building automated triage and detection capabilities.

This position involves managing and performing forensic investigations into cybersecurity incidents, including network intrusions, malware attacks and data breaches. Responsibilities include evidence preservation, host and network analysis, producing detailed reports, and acting as an expert witness when required. Candidates need strong DFIR experience across Windows, macOS, Linux, iOS and Android systems, plus certifications such as SANS GCFA/GCIH or CREST CPIA/CRIA.

← All jobs · More in this country Deloitte Sydney, New South Wales Hybrid · Lead/Principal · Full-time This leadership position involves directing digital forensic engagements across industries such as financial services, healthcare and government. Responsibilities include managing investigations into fraud, misconduct, insider threats and cyber incidents, advising on evidence preservation, overseeing engagement budgets, and supporting litigation and regulatory responses.

Magnet Forensics’ Christopher Vance tackles the biggest roadblocks in mobile forensics, from keeping a seized phone isolated, powered and safe… 3 min read See how MD-LIVE’s Block Hash Scan helps investigators identify known… Today: Passware Kit Mobile 2026 v5 decrypts 24 Samsung Galaxy… Passware Kit Mobile 2026 v5 expands mobile forensics with Samsung… 3 min read Discover what agencies should expect from a digital forensics partner… Turn CCTV footage into usable evidence faster with S21...

Why does on-site triage still depend on the lab? Where do full-file hash comparison and manual review break down in the field? How does Block Hash Scan in MD-LIVE change the cost of identifying a file? And when a scan returns zero detections, what does that result tell you? Investigators need to judge at the scene whether a device is relevant to a case. The results needed to judge relevance arrive after the device is seized, imaged and reviewed in the lab.

This role involves leading forensic investigations into malware infections, ransomware attacks, and data breaches. Responsibilities include disk and memory forensics, evidence acquisition and preservation, timeline reconstruction, root cause analysis, and producing detailed reports with proper chain-of-custody documentation. Candidates need strong hands-on experience with Windows and Linux forensics, memory analysis, malware investigation, and threat hunting.