Назад
Company hidden
2 дня назад

Host Forensics Analyst (Cybersecurity)

Формат работы
remote (только USA)/onsite
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Host Forensics Analyst (Cybersecurity): Performing digital forensics and incident response (DFIR) for DHS's Hunt and Incident Response Team with an accent on host-based analysis, data acquisition, and breach diagnosis. Focus on leading forensic teams during onsite engagements, analyzing malicious code, and producing executive-level technical reports.

Location: Remote and onsite; Must be a US Citizen with an active TS/SCI clearance and be able to travel within the United States.

Company

hirify.global is a small business specializing in IT and cybersecurity services for Federal, State, and Local agencies.

What you will do

  • Lead forensic teams at onsite engagements and coordinate data collection/acquisition operations.
  • Perform comprehensive technical analysis of computer systems and digital artifacts.
  • Evaluate, extract, and analyze suspected malicious code.
  • Write in-depth technical reports and distill findings into executive summaries for stakeholders.
  • Serve as a technical forensics liaison, explaining methodologies and protocols.
  • Track and document on-site incident response activities and provide updates to leadership.

Requirements

  • U.S. Citizenship and active TS/SCI clearance required.
  • Must be able to obtain DHS Suitability.
  • 8+ years of experience in cyber forensic investigations using industry-standard tools.
  • Proficiency in creating forensically sound duplicates of computer systems.
  • Experience with digital asset collection, preservation, and chain of custody protocols.
  • BS in Computer Science, Cybersecurity, or related degree (or HS Diploma + 10 years of forensics experience).

Nice to have

  • Experience with tools: EnCase, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, or Magnet Axiom Cyber.
  • Experience with SIEM tools (Splunk, ArcSight, LogRythm, Elastic) or EDR tools (Crowdstrike, MDE, Trellix).
  • Certifications: GCFA, GCFE, EnCE, CCE, CFCE, or CISSP.
  • Proficiency with conducting all-source research.

Culture & Benefits

  • Extremely competitive salary and profit sharing.
  • Comprehensive health coverage: 95% employer-paid medical, dental, and vision.
  • 100% employer-paid life, short-term, and long-term disability insurance.
  • 401k with company match.
  • Flexible Spending Account (FSA) for health and dependent care.
  • 11 standard holidays and 3 weeks of annual leave.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →