Cyber Host Forensic Analyst III (Cybersecurity)

Location: Onsite in Sterling, VA, with Arlington, VA also referenced

Salary: $99,000–$206,000 annually, based on qualifications, experience, and expertise.

Company

hirify.global provides cyber operations, data operations, systems integration, intelligence mission support, and software modernization services for government, defense, civil, commercial, and intelligence customers.

What you will do

• Support onsite incident response engagements for civilian government agencies and critical asset owners affected by cyber attacks.
• Coordinate evidence collection and assist with leading forensic teams during preliminary and comprehensive investigations.
• Plan and direct the inventory, examination, and technical analysis of computer-related evidence.
• Create executive summaries, in-depth technical reports, peer reviews, and quality assurance reviews.
• Analyze and characterize breaches, attack stages, system vulnerabilities, and suspected malicious code.
• Serve as a technical forensics liaison, explain investigative methodologies, and provide engagement updates to stakeholders and leadership.

Requirements

• U.S. citizenship and an active TS/SCI clearance are required; DHS Suitability must be obtainable.
• 8+ years of directly relevant experience in cyber forensic investigations using industry-standard forensic tools.
• Experience creating forensically sound evidence images and documenting digital forensics findings in investigative reports.
• Experience analyzing and characterizing cyber attacks, identifying attack classes and stages, and assessing security threats and vulnerabilities.
• Knowledge of evidence handling and chain-of-custody protocols, plus proactive analysis of systems and networks.
• BS in Computer Science, Cybersecurity, Computer Engineering, or a related field; alternatively, a high school diploma with 10+ years of host or digital forensics experience.

Nice to have

• Experience with two or more of EnCase, FTK, SIFT, X-Ways, Volatility, Wireshark, Sleuth Kit/Autopsy, Splunk, Snort, or EDR tools such as CrowdStrike and Carbon Black.
• All-source research experience.
• GCFA, GCFE, EnCE, CCE, CFCE, or CISSP certification.

Culture & Benefits

• Medical, vision, and dental insurance.
• 401(k) plan, paid time off, and holidays.
• Additional insurance coverage.
• Work supporting critical cyber incident response and intelligence missions.