U.S. Citizenship is required due to sensitive information access.
Top Secret/Sensitive Compartmented Information (TS/SCI) clearance with Full Scope Poly required.
High School Diploma or equivalent is necessary.
Minimum two years' experience as a Cyber Forensics Analyst.
Two years of experience with at least two forensic tool suites such as EnCase, FTK, or Axiom.
Three years of experience with Windows and Linux operating systems as a system administrator or in software development (DevOps).
Compliance with DoD 8570 certification requirements including IAT Level I/II and relevant CE certifications is mandatory.
GCFA or GCFE certification required.
Responsibilities
Create and maintain chain-of-custody documentation for evidence tracking.
Summarize technical findings aligned with established reporting standards.
Conduct file system and device analysis, including recovery of hidden/deleted content.
Analyze log files and other evidence as part of forensic investigations.
Utilize data decryption tools for retrieving information.
Execute forensic incident handling tasks in support of Incident Response Teams.
Identify and counter anti-forensics techniques employed by adversaries.
Full Job Description
Essential Job Functions
Create and maintain chain-of-custody documentation.
Provide technical summary of findings in accordance with established reporting procedures.
Perform comprehensive file system and device analysis to include recovery of hidden and deleted content.
Perform initial analysis of log files, evidence and other information.
Utilize data decryption tools.
Perform forensic incident handling tasks (such as forensic collections, host analysis, intrusion correlation and tracking, threat analysis, and direct system remediation) as part of flyaway Incident Response Teams (IRTs).
Detect anti-forensics techniques.
Minimum Required Qualifications
Due to the nature of this position and the information that employees will be required to access, U.S. Citizenship is required.
Required Security Clearance: TS/SCI with FS Poly.
Required High School Diploma.
Two years of experience as a Cyber Forensics Analyst.
Two years of demonstrated experience using at least two different forensic tool suites similar to EnCase, Sleuthkit, FTK, X-WAYS, REKALL or Axiom.
Three years of demonstrated experience working with Windows and Linux operating systems as a system administrator, or in software development and IT systems (DevOps).
Requires DoD 8570 compliance with Cybersecurity Service Provider (CSSP) Analyst baseline certification, Information Assurance Technical (IAT) Level I or Level II certification, and Computing Environment (CE) certification.
Requires Global Information Assurance Certification Forensic Analyst (GCFA) or Global Information Assurance Certification Forensic Examiner (GCFE).
