Host Based Analyst IV

Responsibilities

• Aiding federal leads in overseeing and leading forensic teams at onsite engagements by coordinating evidence collection operations.
• Providing technical assistance on digital evidence matters and forensic investigative techniques to appropriate personnel when necessary.
• Writing in-depth reports, supporting with peer reviews, and providing quality assurance reviews for junior personnel.
• Serving as a mentor and providing guidance to others on data collection, analysis, and reporting in support of onsite engagements.
• Assisting with leading and coordinating forensic teams in preliminary investigation.
• Planning, coordinating, and directing the inventory, examination, and comprehensive technical analysis of computer-related evidence.
• Distilling analytic findings into executive summaries and in-depth technical reports.
• Serving as a technical forensics liaison to stakeholders and explaining investigation details, including forensic methodologies and protocols.
• Tracking and documenting on-site incident response activities and providing updates to leadership throughout the engagement.
• Evaluating, extracting, and analyzing suspected malicious code.

Requirements

• U.S. Citizenship
• Active TS/SCI clearance
• Ability to obtain DHS suitability
• 8+ years of directly relevant experience in cyber forensic investigations using leading-edge technologies and industry-standard forensic tools.
• Able to create forensically sound duplicates of evidence (forensic images).
• Experience with the analysis and characterization of cyber attacks.
• Experience with proper evidence handling procedures and chain of custody protocols.
• Knowledge of system and application security threats and vulnerabilities.
• Skilled in identifying different classes of attacks and attack stages.
• Knowledgeable in proactive analysis of systems and networks, to include creating trust levels of critical resources.
• Able to work collaboratively across physical locations.

Qualifications

• BS in Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience.

Skills

• Desired Certifications: GCFA, GCFE, EnCE, CCE, CFCE, CISSP
• Desired Skills: Experience with or knowledge of two or more of the following tools: EnCase, FTK, SIFT, X-Ways Volatility, WireShark, Sleuth Kit/Autopsy, Splunk, Snort, other EDR tools (Crowdstrike, Carbon Black, etc.)
• Proficiency with conducting all-source research.

Benefits

• Health, Dental, Vision, and Flexible Spending Account
• Paid Time Off (PTO)
• 11 paid holidays
• Tuition Education Assistance
• Professional Development
• 401(k) retirement plan
• Life insurance and short- and long-term disability insurance
• Employee Referral Program
• Marketing Incentive Plans