Senior Digital Forensics Engineer

Description

SME Digital Forensics Examiner / Malware Analyst supporting the DISA GSM-O program onsite in Alexandria, VA.

An active Top Secret security clearance and demonstrated advanced technical ability in Digital Forensics and Malware Analysis is required. This position provides support to the J6 Pentagon Security Operations Center in conducting Forensic Investigations and Malware Analysis. Activities that this position performs include comprehensive analysis of computer-related evidence and information stored on a device(s) in support of an investigation. This can include performing Malware Analysis if malicious code is suspected to be involved.

The investigative tasks will culminate with written reports written in plain business language that detail the findings of analysis. This analysis feeds into implementing defensive measures to prevent future risks to the enterprise.

• Conducts examinations and performs comprehensive technical analysis of computer-related evidence and information during the conduct of an investigation.
• Conducts detailed analysis of potentially infected or confirmed-infected computer systems, including identification of threat vectors, indicators of compromise for future detection, and compromise attribution.
• Prepares detailed Forensic or Malware Analysis reports based on analysis of devices in question of the investigation.
• Provides technical support to the Incident Handling lifecycle, including proper documentation, triage, containment, eradication, and analysis of network and host-based security events

• Active Top Secret clearance or higher (program can support up to TS/SCI)
• Current DoD 8570/8140 IAT-II certification.
• Current DoD 8570/8140 CSSP IR certification.
• Bachelor's degree and 12+ years of prior experience in Digital Forensics, Malware analysis, or Incident Response work. Additional work experience or Cyber courses/certifications may be substituted in lieu of degree.
• Demonstrated advanced understanding of various commercial and open-source analysis tools used for digital forensics and malware analysis.
• Demonstrated experience with cyber security related technologies (e.g., NIDS, HIDS, IPS, and IDS);
• Cybersecurity experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization.
• Demonstrated understanding of the life cycle of cybersecurity threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures (TTPs).
• Strong analytical and troubleshooting skills.
• Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings.

• IAT-III certification
• Demonstrated experience with reverse engineering practices
• BA/BS degree in Computer Science, Information Assurance, or Information Systems
• Experience with malware analysis concepts and methods.
• Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or MITRE ATT&CK framework.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus.

The noise level in the work environment is usually low to moderate.

Northern Technologies Group is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, age, or any other protected status under federal, state, or local law.

Travel

10%

Shift

Normal office hours that align with the core hours of the customer

Note

The company is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.