Job Description

We are seeking a highly methodical, detail-oriented Cyber Security Analyst specializing in Data Sanitization and Spill Cleanup. In this critical role, you will be responsible for managing, executing, and documenting the remediation of classified or sensitive data spills (unauthorized disclosures/data contamination) across various network enclaves. This position demands an exceptional level of precision, a strict adherence to federal and organizational handling procedures, and outstanding communication skills to coordinate containment and recovery efforts with technical teams, affected end-users, and management.

Responsibilities

Key Responsibilities
• Spill Containment & Isolation: Immediately respond to reports of data spills or classified contamination; locate, isolate, and restrict access to affected systems, mailboxes, and network shares to prevent further exposure.
• Data Sanitization & Remediation: Execute rigorous sanitization, purging, and overwriting procedures on storage media, endpoints, and server environments in strict compliance with NIST SP 800-88 guidelines and site-specific policies.
• Incident Investigation & Tracking: Perform detailed forensic tracking to determine the origin, scope, and pathway of the spilled data, compiling meticulous incident timelines and post-cleanup reports.
• Interdepartmental Communication: Work directly with the Security Incident Program Manager during an active spill event to serve as a clear-voiced liaison, translating complex technical containment instructions to non-technical users and providing concise situational updates to leadership.
• Tooling & Log Auditing: Use enterprise search, SIEM tools, and endpoint management consoles to verify that all instances of spilled data have been identified and successfully purged from the environment.
• Policy & Procedure Maintenance: Develop, update, and test standard operating procedures (SOPs) and incident response playbooks for data spill remediation.

Qualifications

Minimum Qualifications:

• BS/BA Cybersecurity, Information Assurance, Computer Science, or equivalent practical experience.
• 4-6 yrs of experience in cybersecurity, system administration, or digital forensics, with a demonstrated focus on media sanitization or security incident remediation.
• Maintain appropriate level government security clearance.
• The candidate must be able to remain calm under pressure, draft highly professional incident reports, and direct staff politely and assertively during high-stress cleanup operations.
• Ability to obtain and maintain an active DOE security clearance
• US Citizenship required
• Complies with all policies and standards.

Preferred Qualifications:

• In-depth knowledge of NIST SP 800-88 (Guidelines for Media Sanitization), data handling standards, and classified spill containment frameworks.
• Digital Forensics & Imaging: Experience with site-funded investigative and forensic imaging tools such as EnCase Forensic / Endpoint Security, FTK (Forensic Toolkit), Magnet Axiom, and FTK Imager to audit, recover, and validate the complete remediation of spilled media.
• Enterprise Search & SIEM: Practical experience utilizing Splunk or other log aggregation platforms to query network, file, and system logs to track file movement.
• Endpoint & File Security: Experience with Microsoft Defender (XDR and Purview/GCC High) or similar endpoint management platforms to locate files, execute remote isolations, and run targeted deletion commands.
• Email & Collaboration Security: Experience navigating email administration consoles (e.g., Exchange Online/M365 Security & Compliance Center, Microsoft Purview, or Proofpoint) to search for, quarantine, and permanently purge unauthorized email content.