Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience.
Minimum of 3 years in technical analysis, digital forensics, or similar discipline.
Hands-on experience with evaluation and visualization tools (e.g., Tableau, Encase, Wireshark).
Experience in creating forensic images and extracting data.
Proficient in network traffic analysis and log analysis.
Knowledge of incident response and common cyber-attack methods.
Ability to work in Linux environments and experience with scripting in Python.
Responsibilities
Provide data exploitation support to customers.
Extract information from digital data using various tools and methods.
Create products that inform operations and support customer needs.
Collaborate with data scientists, engineers, and analysts.
Recommend continuous improvements to processes.
Work with team members to enhance organizational capabilities.
Communicate findings clearly to diverse stakeholders.
Benefits
Opportunity to work on challenging and impactful projects.
Collaborative work environment with cross-functional teams.
Access to advanced tools and technologies.
Professional development and continuous improvement focus.
Support for work-life balance and flexible working arrangements.
Full Job Description
At GCI, we solve the hard problems. As a Data Exploiter, a typical day will include the following duties:
A qualified Data Exploiter performs forensic recovery and analysis of data from phones, computers and drives; identifies, preserves, extracts, analyzes, and reports findings on large datasets. Candidate is responsible for supporting operational and analytical requirements.
Activities include review and analysis vulnerability risk assessment within data. The individual will be expected to evaluate information in support of identifying vulnerabilities, and work with internal and external technical stakeholders to identify solutions to enrich analysis. Able to follow the entire targeting life cycle by engaging in data exploitation of requirements collection, data analysis, summary and documentation, report writing and actionable information dissemination.
KEY RESPONSIBILITIES
Provide data exploitation support to the customer.
Use a variety of tools and methods to extract information from digital data to provide actionable intelligence.
Create a range of products that inform operations, drive targeting and collection, contribute to intelligence products, and support multiple customer needs.
Collaborate cross-functionally with data scientists, engineers, developers, targeters, and analysts.
Provide recommendations for continuous improvement.
Work alongside other team members to sustain and advance our organization's capabilities.
Polished and professional communication, verbal and written, amongst a variety of stakeholders
EDUCATION AND EXPERIENCE
Bachelor's degree in Computer Science, Information Technology, or other related discipline, or equivalent combination of education, technical certifications, training, and work/military experience.
Minimum of 3 years' experience in technical analysis, digital forensics, technical targeting or similar relevant technical disciple.
REQUIRED QUALIFICATIONS
Hand on experience with Commercially available evaluation and visualization tools (e.g. Tableau, Encase, X-ways, Wireshark, etc.).
Experience creating forensic images and extracting data
Experience conducting network traffic analysis
Prepare a range of tailored products that embody and explain findings
Ability to sift through large amounts of unstructured data for key data points (i.e., metadata and artifacts)
Demonstrated knowledge if incident response, containment, and mitigation
Knowledge of common cyber-attack methods
Demonstrated experience conducting detailed log analysis and system monitoring to understand system status, detect system breaches, and identify other system anomalies
Demonstrated experience performing vulnerability identification, risk analysis, and remediation
Ability to triage, review, identify, and correlate items of interest from numerous all source datasets
Ability to evaluate worldwide security events to assess system impact and/or risk (e.g., zero-day exploits, hardware failures, and/or cyber-attacks)
Ability to identify and document information that can fill critical gaps
Create new methodologies / algorithms for data analysis and correlation
Create entity / object profiles and derived data sets that enable future opportunities and analytical efforts
Experience with technical collection abilities
Experience scripting or programming using Python or similar
Experience and comfort working in Linux environments
Experience analyzing analytic workflows to identify opportunities for automation and process optimization; design solutions
DESIRED QUALIFICATIONS
Working knowledge of Python and experience using LLM-aided coding functions (Continue, Obsidian, Claude Code)
Working experience with data analysis and visualization
Experience working with cyber threat intelligence, cyber threat hunting, and producing cyber threat reports
Highly preferred: Background and experience in network forensics
Ability to read Chinese language
Strong understanding of VPNs, VLANs, and TCP/IP
Ability to work independently with minimal supervision
Experience with navigating an enterprise security accreditation process
Demonstrated experience and understanding of network monitoring tools (e.g., Splunk, WSUS, Snare, Wireshark, and Solarwinds)
*A candidate must be a US Citizen and requires an active/current TS/SCI with Polygraph clearance.
