Overview In this role you support onsite incident response for a U.S. Government client, leading and coordinating forensic activities to quickly characterize breaches and restore services. You work with federal leads and cross location teams, producing technical analyses and executive summaries. You will mentor peers, define evidence collection approaches, and communicate methodologies to stakeholders. This role offers impact across mission critical cyber investigations and a chance to shape incident response practices.
Responsibilities- Oversee and lead forensic teams at onsite engagements, coordinating evidence collection operations
- Provide technical guidance on digital evidence and forensic techniques
- Write detailed reports and perform quality assurance reviews for junior staff
- Support forensic analysis and mentoring on data collection, analysis, and reporting
- Lead preliminary investigations, planning and directing inventory, examination, and technical analysis of computer evidence
- Translate analytic findings into executive and technical reports
- Serve as a liaison to stakeholders, explaining methodologies and protocols
- Track on-site incident response activities and report updates to leadership
- Evaluate, extract and analyze suspected malicious code
Key requirements- U.S. Citizenship
- Active TS/SCI clearance
- Ability to obtain DHS Suitability
- 8+ years of direct experience in cyber forensic investigations using leading edge technologies and standard tools
- Ability to create forensically sound duplicates of evidence
- Experience with analysis and characterization of cyber attacks
- Experience with evidence handling procedures and chain of custody
- Skill in identifying attack classes and stages
- Knowledge of system and application security threats and vulnerabilities
- Knowledgeable in proactive system and network analysis to assess trust levels of critical resources
- Ability to work collaboratively across physical locations
- Collaborative mindset
- Mentoring and guidance to others
- Strong written and verbal communication
- EnCase
- FTK
- SIFT
