Job Description:
SCOPE OF SERVICES
The Cyber Command Forensic Analyst will conduct forensic investigations of network intrusions and other cybersecurity incidents to determine the cause, scope, impact, and consequences of potential breaches. The analyst will support cyber incident response efforts and maintain forensic tools and environments essential to investigations.
TASKS & RESPONSIBILITIES
- Research, develop, and implement new methodologies, tools, and procedures to enhance the digital forensics process.
- Produce clear, concise, and high-quality written reports explaining complex technical findings.
- Manage and maintain forensic analysis labs and the investigative toolset.
- Ensure data is collected, preserved, and handled according to industry best practices and evidence-integrity requirements.
- Assist the Cyber Emergency Response Team during critical incidents.
- Perform host-based and network-based forensic analysis of intrusions and related cyber incidents to determine cause and extent of breaches.
MANDATORY SKILLS / EXPERIENCE
(Candidates without these requirements will not be considered.)
- Minimum 4 years of experience in a Threat Management, Digital Forensics, or Incident Response environment.
- Proficiency in digital forensic investigations across multiple platforms and operating systems.
- Deep understanding of digital forensics methodologies, processes, and tools.
DESIRABLE SKILLS / EXPERIENCE
- Hands-on experience with a wide range of forensic tools (e.g., FTK, X-Ways, SIFT, AXIOM, EnCase).
- Experience with memory analysis tools (e.g., Volatility, MemProcFS).
- Strong experience with Linux systems and open-source forensic tools.
- Experience investigating intrusions across Windows, Linux/Unix systems.
- Experience performing forensic collections in cloud environments (AWS, Azure, GCP).
- Knowledge of collecting, accessing, and evaluating evidence from computers and electronic devices.
- Understanding of virtual environments, forensic imaging techniques, and file systems.
- Knowledge of operating system artifacts for Windows, Linux/UNIX, and macOS.
- Strong analytical and problem-solving skills
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.