Back to positions

Forensics Analyst (SME)

Remote role Full-time Open position

About Us: At RELI Group, our work is grounded in purpose. We partner with government agencies to solve complex challenges, improve public health, strengthen national security, and make government services more effective and efficient. Our team of over 500 professionals brings deep expertise and a shared commitment to delivering meaningful outcomes. Behind every solution is a group of experts who care deeply about impact—whether we’re supporting data-driven decisions, modernizing systems or safeguarding critical programs. Position Summary: RELI Group is seeking a highly experienced Forensics Analyst Subject Matter Expert (SME) to support Task 8 of the Information Security and Privacy Services (ISPS), part of the Marketplace System Security and Privacy Support Services (MSSPSS) contract. The Forensics Analyst SME will provide expert-level support for investigating cybersecurity incidents, conducting digital forensics, and assisting with evidence collection and chain-of-custody procedures across CMS systems. This role involves close collaboration with the SOC, incident response, and threat intelligence teams to ensure comprehensive analysis, containment, and remediation of threats while aligning with CMS, FISMA, and federal forensics standards. Responsibilities:

  • Lead forensic analysis activities in response to cybersecurity incidents, including malware analysis, disk imaging, memory analysis, and log correlation
  • Support incident response teams by identifying root causes and delivering actionable forensic findings
  • Preserve evidence in accordance with federal chain-of-custody requirements and support legal or regulatory inquiries
  • Prepare detailed technical reports, after-action reviews, and executive summaries of forensic investigations
  • Collaborate with SOC, ISSO, and threat intelligence teams to provide insight into ongoing risks and incidents
  • Develop and maintain forensics procedures and toolkits aligned with CMS, NIST, and OMB guidance
  • Advise CMS stakeholders on digital forensics best practices, forensic readiness, and incident preparedness
  • Support training and exercises related to forensics, IR, and data breach response
  • Bachelor’s degree in Cybersecurity, Digital Forensics, Computer Science, or a related field
  • 8+ years of experience performing digital forensics and supporting federal incident response activities
  • Proficiency with forensic tools such as EnCase, FTK, Volatility, X-Ways, and open-source solutions
  • Strong understanding of incident response, log analysis, and malware reverse engineering
  • Knowledge of NIST 800-61, FISMA, and federal privacy and security incident handling requirements
  • Excellent written communication skills and the ability to produce clear, defensible forensic reports Preferred Qualifications:
  • Experience supporting CMS, HHS, or ACA-related cybersecurity programs
  • Certifications such as GCFA, GCIH, CHFI, EnCE, or CISSP
  • Familiarity with cloud forensics in AWS or Azure environments
  • Knowledge of Zero Trust Architecture and advanced persistent threats (APTs)
  • Experience testifying or preparing materials for regulatory investigations or legal proceeding EEO Employer: RELI Group is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation. HUBZone: We encourage all candidates who live in a HUBZone to apply. You can check to see if your address is located in a HUBZone by accessing the SBA HUBZone Map. The annual salary range for this position is $130,000.00 to $205,000.00. Actual compensation will depend on a range of factors, including but not limited to the individual’s skills, experience, qualifications, certifications, location, other business and organizational needs, and applicable employment laws. The estimate displayed represents the typical salary range for this position and is just one component of the total compensation package for employees. RELI Group provides a variety of additional benefits to its employees. For additional details on the benefits that RELI Group offers click here Apply tot his job

Apply tot his job Apply To this Job

Further positions

Senior Cyber Defense Forensic Analyst - Mid-Atlantic region (Remote - EST)

Remote role Full-time

Director of Forensics & Restoration (copy)

Remote role Full-time

Associate Forensic Analyst

Remote role Full-time

Analyst, Digital Investigations

Remote role Full-time

Advisory Forensic and Restructuring Manager

Remote role Full-time

Senior Consultant, Digital Forensic and Incident Response; DFIR; Remote

Remote role Full-time

Associate Forensic Analyst

Remote role Full-time

Forensic Scientist IV

Remote role Full-time

Consultant - Forensic Delay Analysis

Remote role Full-time

Online Fraud Investigator Remote, NC (SSC) 4932

Remote role Full-time

UN Women: International Evaluation Consultant, Home-Based, International Consultant

Remote role Full-time

Remote Client Engagement Coordinator

Remote role Full-time

Experienced Customer Support Representative - Remote Phone Support at blithequark

Remote role Full-time

Online Writer

Remote role Full-time

Remote AL Audiologist

Remote role Full-time

Experienced Remote Customer Service Representative – Delivering Exceptional Support and Enhancing Customer Experience at arenaflex

Remote role Full-time

Walgreens Data Entry (Remote, Part/Full Time) $80000/Year

Remote role Full-time

Experienced Call Center Representative/Customer Service Specialist – Data-Driven Solutions

Remote role Full-time

Account Manager - Cybersecurity | Remote, North Florida

Remote role Full-time

13684 - VP, Client Workforce Strategy & Tech Advisory (Virtual)

Remote role Full-time