Cyber Network Forensic Analyst III (Cybersecurity)

Location: Arlington, VA; onsite incident response engagements

Salary: $99,000–$206,000 per year

Company

hirify.global provides cyber, data operations, systems integration, intelligence mission support, and software modernization services for government, defense, civil, commercial, and intelligence customers.

What you will do

• Coordinate with Government leads and support preliminary onsite incident response investigations.
• Interface with customers during engagements and help determine response actions for anomalous network activity.
• Assess network topologies, device configurations, and security weaknesses, then recommend mitigation and security best practices.
• Collect and analyze intrusion artifacts, including PCAP files, domains, URIs, certificates, and network device integrity data.
• Reconstruct malicious attacks, identify exploited weaknesses and effects, and support intrusion correlation, threat analysis, and system remediation.
• Write and publish Computer Network Defense guidance and incident findings.

Requirements

• U.S. citizenship and an active TS/SCI clearance are required; DHS Suitability must be obtainable.
• 8+ years of directly relevant network investigations experience.
• In-depth knowledge of Computer Network Defense policies, procedures, regulations, TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, Wi-Fi networking, and network topologies.
• Substantial knowledge of Splunk or other SIEM platforms, MITRE ATT&CK, defense-in-depth principles, and network security architecture.
• Experience analyzing network traffic and metadata, reconstructing malicious activity, and examining data flows across network topologies.
• BS in Computer Science, Cyber Security, Computer Engineering, or a related field, or a high school diploma with 10+ years of network investigations experience.

Nice to have

• Network device integrity, Wireshark, PCAP carving and extraction, command-and-control traffic, and evidence preservation experience.
• Experience designing cybersecurity systems in Linux or Windows environments and working with virtualized environments.
• DoD 8140.01 certifications, including IAT Level II, IASAE II, CSSP Analyst, GCIA, GCIH, CEH, or CSSP Incident Responder.
• SANS GIAC GNFA certification.

Culture & Benefits

• Work supports critical cyber defense and incident response missions for U.S. Government customers.
• Medical, vision, and dental insurance.
• 401(k) plan, paid time off, and holidays.
• Additional insurance coverage.