A

Arsiem

IT consulting and cybersecurity for governments

Host Forensics Analyst 4

Full-Time
No salary listed
Senior, Expert
Bachelor's
Arlington County, Arlington, VA, USA
In PersonOn-site work in Arlington, Virginia is required.
CybersecuritySecurity Operations & Incident Response
No H1B Sponsorship
US Top Secret Clearance Required

About the job

Requirements
  • A Bachelor of Science degree in Computer Science, Cybersecurity, or Computer Engineering, or a high school diploma with 10 or more years of host or digital forensics experience.
  • At least 8 years of directly relevant experience in cyber forensic investigations using leading-edge technologies and industry-standard forensic tools.
  • Ability to create forensically sound duplicates of evidence, including forensic images.
  • Ability to write cyber investigative reports documenting digital forensics findings.
  • Experience analyzing and characterizing cyber attacks.
  • Experience with proper evidence-handling procedures and chain-of-custody protocols.
  • Skill in identifying different classes of attacks and attack stages.
  • Knowledge of system and application security threats and vulnerabilities.
  • Knowledge of proactive analysis of systems and networks, including creating trust levels for critical resources.
  • Ability to work collaboratively across physical locations.
  • Active Top Secret/Sensitive Compartmented Information clearance and ability to obtain Department of Homeland Security Entry on Duty Suitability.
Responsibilities
  • Assist Federal leads with overseeing and leading forensic teams during on-site engagements by coordinating evidence-collection operations.
  • Provide technical assistance on digital-evidence matters and forensic investigative techniques to appropriate personnel when necessary.
  • Write in-depth reports, support peer reviews, and provide quality-assurance reviews for junior personnel.
  • Support forensic analysis and mentor or provide guidance to others on data collection, analysis, and reporting for on-site engagements.
  • Assist with leading and coordinating forensic teams during preliminary investigations.
  • Plan, coordinate, and direct the inventory, examination, and comprehensive technical analysis of computer-related evidence.
  • Distill analytic findings into executive summaries and in-depth technical reports.
  • Serve as a technical forensics liaison to stakeholders and explain investigation details, including forensic methodologies and protocols.
  • Track and document on-site incident-response activities and provide updates to leadership throughout the engagement.
  • Evaluate, extract, and analyze suspected malicious code.
Desired Qualifications
  • Experience with or knowledge of at least two of the following tools: EnCase, FTK, SIFT, X-Ways, Volatility, Wireshark, Sleuth Kit/Autopsy, Splunk, Snort, or other endpoint detection and response tools such as CrowdStrike and Carbon Black.
  • Proficiency in conducting all-source research.
  • GCFA, GCFE, EnCE, CCE, CFCE, or CISSP certification.

About the company

A

Arsiem

View
cbWebsite

ARSIEM Corporation provides advanced IT consulting services, specializing in multiple areas including cybersecurity, enterprise architecture and development, and applications development, predominantly for government clients. The firm is distinguished by its deep commitment to cybersecurity and robust IT solutions that ensure enhanced protection and efficient digital infrastructures. This commitment to leveraging cutting-edge technologies in specialized areas of IT makes ARSIEM Corporation an excellent workplace for professionals aiming to actively contribute to significant, high-impact projects within the government sector.

Company Size

11-50

Company Stage

N/A

Total Funding

N/A

Headquarters

Baltimore, Maryland

Founded

2013

Get referred to Arsiem

See people who can refer or advise you