Cyber Host Forensic Analyst IV (Cybersecurity)

TL;DR

Cyber Host Forensic Analyst IV (Cybersecurity): Conducting advanced host-based cyber incident response and threat-hunting investigations for government agencies and critical infrastructure with an accent on breach analysis, vulnerability assessment, and remediation planning. Focus on leading complex investigations, developing technical solutions, and translating analytic findings into executive summaries and detailed technical reports.

Location: Arlington, Virginia, with physical presence in the National Capital Region required for at least one week of training and orientation; subsequent work is primarily supported outside the NCR. U.S. citizenship and an active TS/SCI clearance are required.

Salary: $122,000–$253,000 annually, depending on qualifications, relevant experience, and expertise.

Company

hirify.global provides cyber operations, data operations, systems integration, intelligence mission support, vulnerability research, technical surveillance, and software modernization services for government, defense, civil, intelligence, and commercial customers.

What you will do

• Serve as a hunt and incident response subject matter expert supporting DHS HIRT surge operations.
• Conduct host- and network-based investigations to characterize cyber breaches and attack stages.
• Provide technical direction and develop mitigation and remediation plans for complex incidents.
• Analyze systems and networks proactively, including assessing trust levels of critical resources.
• Distill findings into executive summaries and detailed technical reports.
• Guide incident response activities and collaborate across distributed physical locations.

Requirements

• U.S. citizenship, an active TS/SCI clearance, and eligibility to obtain DHS Suitability are required.
• At least 8 years of directly relevant experience, or a high school diploma with at least 10 years of technical experience in the area of expertise.
• Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related field; the experience-based education alternative may apply.
• Knowledge of operational threat environments, system and application vulnerabilities, attack classes, and attack stages.
• Proficiency with common operating systems, including Linux/Unix and Windows.
• Ability to travel domestically on short notice, work independently, communicate effectively, and collaborate across locations.

Nice to have

• Experience leading and mentoring technical teams.
• Knowledge of Computer Network Defense policies, procedures, and regulations.
• Experience with Wireshark, Splunk, or Snort.
• DoD 8140.01 certifications, CSSP Analyst or Incident Responder credentials, and SANS GIAC certifications such as GNFA, GRID, GICSP, or GCIP.

Culture & Benefits

• Medical, vision, and dental insurance.
• 401(k) plan and additional insurance coverage.
• Paid time off and company holidays.
• Support for work across distributed physical locations and domestic incident-response travel.