Forensics Analyst II

Essential Job Functions

• Create and maintain chain-of-custody documentation.
• Providetechnicalsummary of findings in accordance with established reporting procedures.
• Performcomprehensivefile systemand deviceanalysis to include recovery of hidden and deleted content.

• Perform initial analysis of log files,evidenceand other information.
• Utilize data decryption tools.
• Perform forensic incident handling tasks (such as forensic collections, host analysis, intrusion correlation and tracking, threat analysis, and direct system remediation) as part of flyaway Incident Response Teams (IRTs).
• Detect anti-forensics techniques.

• Due to the nature of this position and the information that employees will be required to access, U.S. Citizenship is required.
• Required Security Clearance: TS/SCI with FS Poly.
• Required High School Diploma.
• Two years of experience as a Cyber Forensics Analyst.
• Two years of demonstrated experience using at least two different forensictool suitessimilar toEnCase,Sleuthkit, FTK, X-WAYS, REKALL or Axiom.
• Three years of demonstrated experience working with Windows and Linux operating systems as a system administrator, or in software development and IT systems (Dev Ops).
• Requires DoD 8570 compliance with Cybersecurity Service Provider (CSSP) Analyst baseline certification, Information Assurance Technical (IAT) Level I or Level II certification, and Computing Environment (CE) certification.
• Requires Global Information Assurance Certification Forensic Analyst (GCFA) or Global Information Assurance Certification Forensic Examiner (GCFE).