Intrusion Analyst

This position involves performing forensic examinations of network intrusions, compromised systems, and advanced persistent threats. Duties include developing scripts for artifact triage and timeline reconstruction, identifying indicators of compromise, analyzing digital evidence, maintaining chain of custody, and preparing malware analysis reports.

Requires an active Secret clearance (TS/SCI preferred) and certifications such as GCIH, ECIH, GCFA, or DC3 DFE. A degree in digital forensics or related field is needed, or equivalent hands‑on experience. Expert witness testimony training is also required for certain tasks.

Ideal for cleared digital forensics and intrusion analysis professionals with two to twelve years of experience, comfortable working within government and law enforcement environments on sensitive national security investigations.

We have an opening for a Intrusion Analyst in Linthicum, MD, United States within Finance, IT & Technology.