Host Forensics Analyst

About the role

The DHS Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. BCMC, as a contractor to DHS, performs HIRT investigations to develop a preliminary diagnosis of breach severity, providing remote and onsite advanced technical assistance, proactive hunting, rapid incident response, and immediate investigation and resolution using host‑based and network‑based cybersecurity analysis capabilities. BCMC is seeking Host Forensics Analysts to support this critical mission.

Responsibilities

• Assist Federal leads with overseeing and leading forensic teams at onsite engagements by coordinating data collection/acquisition operations.
• Provide technical assistance on data collection techniques and forensic investigative techniques to appropriate personnel when necessary.
• Write in‑depth reports, support peer reviews, and conduct quality‑assurance reviews for junior personnel.
• Support forensic analysis and mentor others on data collection, analysis, and reporting for onsite engagements.
• Lead and coordinate forensic teams in preliminary investigations.
• Plan, coordinate, and direct inventory, examination, and comprehensive technical analysis of computer systems and digital artifacts.
• Distill analytic findings into executive summaries and detailed technical reports.
• Serve as technical forensics liaison to stakeholders, explaining investigation details, methodologies, and protocols.
• Track and document on‑site incident response activities and provide updates to leadership throughout the engagement.
• Travel to incident response locations in the United States, Territories, and Possessions.
• Evaluate, extract, and analyze suspected malicious code.

Required Skills

• U.S. Citizenship
• Active TS/SCI clearance (must be able to obtain DHS Suitability)
• 8+ years of directly relevant experience in cyber forensic investigations using leading‑edge technologies and industry‑standard forensic tools
• Ability to create forensically sound duplicates of computer systems (forensic images)
• Proficiency in writing cyber investigative reports documenting digital forensics findings
• Experience with analysis and characterization of cyber attacks
• Knowledge of proper digital asset collection, preservation procedures, and chain‑of‑custody protocols
• Skill in identifying different classes of attacks and attack stages
• Understanding of system and application security threats and vulnerabilities
• Ability to conduct proactive analysis of systems and networks, including creating trust levels for critical resources
• Capability to work collaboratively across physical locations

Desired Skills

• Experience with or knowledge of two or more of the following tools: EnCase, SIFT, X‑Ways, Volatility, Wireshark, Sleuth Kit/Autopsy, Magnet Axiom, Cyber Snort, Splunk or other SIEM tools (ArcSight, LogRhythm, Elastic, etc.)
• Familiarity with other EDR tools (CrowdStrike, MDE, Trellix, etc.)
• Proficiency in conducting all‑source research

Required Education

BS in Computer Science, Cybersecurity, Computer Engineering, or a related field; or a high school diploma with 10+ years of host or digital forensics experience.

Desired Certifications

• GCFA
• GCFE
• EnCE
• CCE
• CFCE
• CISSP

Company Overview

Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. BCMC employs highly skilled engineers delivering innovative solutions backed by strong past performance. The company is ISO 9001:2015, ISO 27001:2013, ISO 20000:2018, and CMMI Level 3 certified.

Benefits

• Extremely competitive salary
• 95% employer‑paid medical, dental, and vision coverage
• 100% employer‑paid life, short‑term disability, and long‑term disability coverage
• 401(k) with company match and profit sharing
• Flexible Spending Account (FSA) for dependent and health care expenses
• 11 standard holidays and 3 weeks of annual leave