Cyber Defense Forensics Analysts - Mid

Join to apply for the Cyber Defense Forensics Analysts
- Mid role at ECS.

1 day ago Be among the first 25 applicants

Join to apply for the Cyber Defense Forensics Analysts
- Mid role at ECS.

ECS is seeking a Cyber Defense Forensics Analysts
- Mid to work in our Washington, DC office.

ECS Federal is a leading information security and information technology company in Washington, DC. We are looking to hire a mid-level Cyber Defense Forensics Analyst to support a full range of cyber security services on a long-term contract in Washington DC. The position is full time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.

• Active Secret clearance

• Strong written and verbal communication skills.
• Create detections and automation to detect, contain, eradicate, and recover from security threats.
• Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques.
• Perform forensics on network, host, memory, and other artifacts originating from multiple operating systems, applications, or networks and extract IOCs (Indicators of Compromise) and TTPs (Tactics, Techniques, and Procedures).
• Conduct proactive hunts through enterprise networks, endpoints, or datasets to detect malicious, suspicious, or risky activities.
• Solid knowledge of TCP/IP networking, and network services such as DNS, SMTP, DHCP, etc.
• Understanding of attacker tradecraft related to email, app-based, cloud threats, and defensive tactics.
• Good knowledge of operating system internals, OS security mitigations, and security challenges in Windows, Linux, Mac, Android & iOS platforms.
• Experience with forensic tools (e.g., EnCase, Sleuthkit, FTK).
• Ability to analyze malicious code (malware forensics).
• Skill in analyzing code as malicious or benign.
• Knowledge of system and application security threats and vulnerabilities.
• Apply threat hunting and the MITRE ATT&CK framework to identify and develop detection capabilities.

• Bachelor’s degree or higher.
• 5+ years’ experience in cyber threat hunting and forensics support for incident response.
• Active Secret clearance or higher.

$102,600 - $117,500

• Identify threat tactics and methodologies using frameworks like MITRE ATT&CK.
• Perform hypothesis-based or intelligence-based cyber threat hunts.
• Use cloud-native techniques for threat detection and response.
• Research intelligence reports for actionable data.
• Analyze large datasets to uncover attack techniques.
• Investigate and analyze intrusion artifacts.
• Create forensic images and maintain chain of custody.
• Report findings and ensure evidence integrity.
• Extract data using forensic techniques.

• Exposure to Python, Power Shell, or bash.
• Proficiency with SIEM query languages (Splunk, Sentinel).
• Experience producing threat intelligence reports.
• Ability to analyze memory dumps and media forensics.

ECS is an equal opportunity employer and does not discriminate on any protected characteristic.