Cloud Analyst (Cybersecurity)

Location: McLean, Virginia, USA; remote work is available, with occasional in-person work at a Booz Allen or customer facility possible.

Salary: $86,800–$198,000 annualized USD.

Company

hirify.global provides professional services and technology solutions, including cybersecurity and incident response.

What you will do

• Conduct digital forensics and incident response activities for Business Email Compromise investigations.
• Collect, analyze, and present digital evidence, including Microsoft 365 logs and forensic artifacts.
• Correlate events from multiple sources to create timeline analyses.
• Lead cloud investigations from beginning to end and present forensic findings.
• Prepare executive summary reports and provide written or verbal client updates.
• Work on multiple incidents and participate in an on-call rotation covering evenings, weekends, and holidays.

Requirements

• 3+ years of experience with Digital Forensics and Incident Response, Incident Response, or Business Email Compromise investigations.
• Experience collecting and analyzing Microsoft 365 logs.
• Experience with scripted Business Email Compromise toolsets written in PowerShell.
• Knowledge of common forensic artifacts analyzed during investigations.
• Ability to organize case notes and communicate with clients verbally and in writing.
• Ability to lead fast-paced cloud investigations, create and present forensic findings, and write executive summary reports.
• Ability to work after standard business hours, including evenings, weekends, and holidays; participate in an on-call rotation; and manage more than one incident at a time.
• High school diploma or GED.

Nice to have

• Experience with Microsoft Exchange on-premises logs, Google Workspace Logs, email header analysis, or other email platforms.
• Experience forensically analyzing cloud data in AWS, Azure, or GCP.
• Experience scripting with PowerShell or Python.
• Experience with EnCase, FTK Axiom, Splunk, ELK Stack, and open-source digital forensic applications.
• Ability to prepare detailed technical reports and prioritize work assignments without guidance.
• DFIR or cybersecurity certification such as CCE, EnCE, CFCE, CISSP, CISM, GCIA, GCFE, GCFA, GREM, or GNFA.

Culture & Benefits

• Full-time employees are eligible for health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Full-time and part-time employees working at least 20 hours per week on a regular basis may participate in benefit programs; employees below that threshold receive only select offerings.
• Remote employees are generally expected to keep cameras on during meetings and may occasionally work in person at a Booz Allen or customer facility.
• Identity verification using advanced biometrics is required during hiring; candidates must be on camera during interviews and assessments.
• Use of AI or other tools to assist with interview responses is prohibited unless explicitly permitted.

Hiring process

• Complete the identity verification process, including biometric verification and camera participation during interviews and assessments.
• Do not use artificial intelligence or other tools to assist with interview responses unless permission is explicitly provided.