1099 consultant · ~120–600 hrs per funded award · $55–$90/hr · Remote (U.S.)

Incident Response and Digital Forensics Analyst

Respond when something goes wrong: contain the incident, collect the evidence properly, find the root cause and write the report the agency needs.

About Precision Federal

Precision Federal is a small business building AI, data and software systems for government agencies. The company was founded on Christian faith and is run on its principles: every number we publish is real, every claim we make is verifiable, and the work is done with excellence as service to God.

How this role works

You join the bench. You apply with your hourly rate, weekly hours and start time, and we may name you on proposals that match this role. If we don't win, you owe nothing.
A contract is awarded. The award funds the team named in the proposal. Your engagement begins at the hourly rate we agreed on.
You work remote, paid from the contract. ~120–600 hrs per funded award — and if no award ever funds, you owe nothing and lose nothing.

What you'll do

Lead triage, containment and recovery during security incidents
Collect and analyze disk, memory, log and cloud evidence with chain of custody
Write incident reports and root-cause findings
Build response playbooks and run tabletop exercises

Required qualifications

3+ years in incident response, digital forensics or a SOC
Hands-on with forensic and EDR tools
Clear written reporting
U.S. citizen or lawful permanent resident (U.S. person)
Willing to be named on a federal proposal with a one-page resume, and to sign a short letter of commitment

Preferred qualifications

GCIH, GCFA, GCFE, EnCE or CySA+
CJIS, state or federal incident reporting
Ransomware response experience

Compensation & structure

1099 consulting engagement. $55–$90 per hour; you tell us the rate you are asking when you apply. Hours are funded by federal contract awards — this seat is scoped at roughly 120–600 hours per funded award, fully remote. Work and pay begin only if the contract is awarded — no award, no hours, no obligation.

Join the bench — Incident Response and Digital Forensics Analyst

Every application is read.

This is a bench, not a job offer. Work starts when we win a contract that needs you.
We may name you on proposals. If that contract is awarded, you do the role at the rate and hours we agree on.
Paid hourly as a 1099 contractor; full-time roles may be W-2. If your background fits, we will email you.

First name *

Last name *

Email *

Phone *

Work authorization *

LinkedIn or portfolio link

Resume (PDF or Word) *

Four questions

Answer from your own experience. A few sentences each is plenty; be specific and tell us what you did yourself.

1. Cover letter. In your own words, tell us about yourself: your background, the work you do best, the values that guide your work, and why this role interests you. *

2. Describe the incident most like this role that you worked: what happened, what evidence you collected, what you found and how it was closed. *

3. Which have you used hands-on, and for how long: CrowdStrike or Defender, Splunk or Sentinel, EnCase, FTK, Autopsy, Volatility, Velociraptor, cloud audit logs? Which could you be tested on? *

4. What government, law-enforcement or regulated organizations have you responded for? Name the organization and your role. None yet is a fine answer. *

Rate and availability

The hourly rate you are asking for this work (USD) *

Hours per week you could give on an awarded contract *

If you are named and we win in the next 12 months, how soon could you start? *

May we name you on proposals for this role, and if we win, will you do the work at the rate we agree on? *

Precision Federal was founded on Christian values, and faith is welcome and openly shared in our workplace. Taking part in any faith activity is always voluntary. Are you comfortable working in that setting? *

Questions? careers@precisionfederal.com · See all open roles