Q

Quantum Sky

Secure, AI-enabled, quantum-ready defense tech

Tier 3 Digital Forensics and Incident Response Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeWashington, DC, USA

About the Job

Requirements

  • A bachelor's degree or an equivalent combination of formal education and experience is required.
  • At least eight years of experience, including six years of general experience and three years of relevant functional experience performing digital forensics, is required.
  • Demonstrated competency with forensic tools such as EnCase and Wireshark is required.
  • Core competencies in computer forensics, computer networking, and operating systems are required.
  • Experience with operational security, including a security operations center (SOC), incident response, malware analysis, or intrusion detection and prevention system (IDS/IPS) analyses is required.
  • Understanding of scripting languages such as Python and regular expressions is required.
  • Knowledge of Windows, Linux, and command lines is required.
  • An active TS/SCI clearance is required.

Responsibilities

  • Lead cross-functional teams in the in-depth analysis and investigation of high-priority cybersecurity incidents.
  • Use security tools to analyze, investigate, and triage security alerts.
  • Coordinate monitoring of customer environments, including cloud and software-as-a-service (SaaS) solutions, for evidence of adversarial activity.
  • Use advanced digital forensics or malware analysis tools to identify incident root causes, scope, and impact.
  • Collaborate with cyber threat hunting and cyber threat intelligence teams.
  • Serve as the primary incident point of contact for law enforcement, third-party vendors, and other external parties.
  • Conduct post-incident analysis and lessons learned to identify improvement opportunities.
  • Develop or tune detection rules or signatures to improve security monitoring effectiveness, and collaborate with engineering teams to implement them.
  • Document triage findings accurately and intake reports of external cybersecurity events from SOC customers by phone or email in the SOC's Incident Management System (IMS).
  • Learn new open-source and closed-source investigative techniques.
  • Research emerging threats and vulnerabilities to aid prevention and mitigation.
  • Assist in developing and implementing initiatives to enhance SOC performance, such as standard operating procedures, playbooks, and capability deployments.
  • Escalate SOC performance issues or risks to management.
  • Provide guidance and mentorship to Tier 1 and Tier 2 SOC analysts to enhance their skills and capabilities.

Desired Qualifications

  • One of the following certifications is desired: Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Forensic Examiner (GCFE), or GIAC Reverse Engineering Malware (GREM).

About the Company

Quantum Sky

Secure, AI-enabled, quantum-ready defense tech

Quantum Sky provides secure, AI-enabled, and quantum-ready technology for U.S. defense, intelligence, and federal civilian agencies. Its Project 137 translates emerging tech into fielded capabilities across Infrastructure & Platform Operations, Cyber, Decision Advantage, and Quantum, including AI-enabled operations, autonomous cybersecurity, secure cloud, and quantum-informed sensing and algorithms. The company differentiates itself with a government-focused portfolio and a disciplined path from research to mission-ready systems, backed by major federal contracts. Its goal is to help federal agencies modernize critical systems, protect mission data, and win faster against cyber and AI-driven threats through end-to-end mission technology.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Reston, VA
Founded
2018

Recently Posted Jobs

Explore more opportunities at Quantum Sky

See more jobs