812305 Forensics Engineer $235,000.00

B4Corp; Herndon (VA); On-site; USD 212,000 - 259,000; Full time

Benefits offered by this job

401k with employer match

Medical, dental, vision insurance

Phantom stock program

PTO 7 weeks per year

Referral bonus program

Job summary

B4Corp in Herndon, VA is seeking a Forensics Engineer at Level 2 – Expert to lead detection, containment, and forensic investigations of complex cybersecurity incidents. This role requires TS/SCI with polygraph, and offers core hours 9am-4pm, Monday–Friday, in a high-security environment.

You will perform live memory analysis, disk imaging, analyze logs, map attacker movement, and prepare detailed reports. Strong communication skills and DoD 8570 IAT Level II or higher are essential; SANS/CYSA

Qualifications

• 11+ years of cyber security experience with government programs.
• 2+ years in host/network forensics, threat hunting, or Tier 3 incident response.
• DoD 8570 IAT Level II compliant (or higher).
• 2+ hands-on with forensic suites and EDR/XDR platforms.
• BS in digital forensics, cybersecurity, or related IT discipline; SANS or CYSA certs.

Responsibilities

• Performs live memory analysis, disk imaging, and forensic data acquisition with strict chain-of-custody.
• Analyzes endpoint, cloud, and system logs to map threat actor movement and IOCs.
• Communicates with customers to coordinate immediate threat containment and eradication.
• Conducts proactive and reactive threat hunting across the network for APTs.
• Prepares detailed technical forensics reports and root-cause analyses.
• Advises customers on technical impacts and zero-day vulnerabilities.
• Collaborates with cyber defense teams to deploy countermeasures post-incident.
• Identifies gaps in logging architectures and provides engineering recommendations.

Skills

Written communication

Verbal communication

Threat hunting

Incident response

Forensics analysis

Education

Bachelor's degree in digital forensics or cybersecurity

Tools

Axiom

X-Ways

FTK

EnCase

Volatility

KAPE

EDR/XDR

Job description

Labor Category: Forensics Engineer
Position Title: Forensics Engineer
Position Level: Level 2 – Expert
Salary: Up to $235,000.00 per year
Core Hours: 9am to 4pm
Location: Herndon VA

Description:

Position Requires a Top Secret (TS/SCI) Clearance with a Polygraph.

The Herndon VA-based Digital Forensics & Incident Response (DFIR) Analyst leads the detection, containment, and forensic investigation of complex cybersecurity incidents within the organization. This professional acts as a core responder to active threats, securing volatile evidence, analyzing host and network telemetry, and reconstructing attack timelines to identify root causes. The DFIR Analyst bridges technical forensics with risk mitigation, translating complex indicators of compromise into tactical response actions and enterprise countermeasures. At ManTech, you will help protect our national security while working on innovative projects that offer opportunities for advancement. Your role will be Monday – Friday with Core hours.

Responsibilities include, but are not limited to:

• Performs live memory analysis, disk imaging, and forensic data acquisition across enterprise and cloud endpoints while maintaining strict chain-of-custody protocols
• Analyzes endpoint, cloud, and system log data to map threat actor movement, build comprehensive incident timelines, and isolate indicators of compromise (IOCs)
• Communicates with the customer and affected end users to coordinate immediate threat containment and eradication strategies
• Conducts proactive and reactive threat hunting across the network to uncover advanced persistent threats (APTs) and hidden persistence mechanisms
• Prepares detailed technical forensic reports and root-cause analyses to justify Incident Response remediation, recovery plans, and network modifications
• Advises the customer on technical impacts, zero-day vulnerabilities, and threat trends affecting organizational equities
• Collaborates with cyber defense teams to deploy tactical signature updates, endpoint rules, and enterprise-wide countermeasures post-incident
• Identifies gaps in current logging, visibility, and logging architectures, providing actionable engineering recommendations to mature continuous monitoring capabilities

Details:

Labor Category: Forensics Engineer
Position Title: Forensics Engineer
Position Level: Level 2 – Expert
Salary: Up to $235,000.00 per year
Core Hours: 9am to 4pm
Location: Herndon VA

Mandatory Requirements:

• Developmental (0-2 years’ experience)
• Full Performance (3-5 years’ experience)
• Senior (6-10 years’ experience)
• Expert (11-15 years’ experience)
• SME (16+ years’ experience)
• 11 years of experience in Cyber Security with Government programs, with 2+ years of dedicated experience in host/network forensics, threat hunting, or Tier 3 incident response
• 2+ Hands‑on proficiency with commercial and open‑source forensic suites (e.g., Axiom, X‑Ways, FTK, EnCase, Volatility, or KAPE) and Enterprise Detection & Response (EDR/XDR) platforms
• 2+ Direct experience analyzing host artifacts (MFT, Registry, Event Logs), volatile memory, and network packet captures (PCAP) to reconstruct cyber attacks
• Strong written and verbal communications skills to effectively translate deep technical analysis into brief summaries for non-technical stakeholders
• DoD 8570 IAT Level II Compliant (or higher)

BS (bachelor’s degree in digital forensics, cybersecurity, computer engineering, computer science, or other closely related IT discipline)

SANS or CYSA certifications

B4CORP Company Information

B4Corp is a small defense contracting company that focuses on providing an optimum environment for mission-focused, highly skilled consultants to support the United States of America’s intelligence community and other defense organizations. B4Corp provides a low overhead, highly efficient, high salary environment that allows employees to excel at meeting the client’s needs. B4Corp is looking for information technology professionals that have a high sense of personal responsibility, self-motivation, and mission drive.

B4Corp’s dedication and care for its employees is reflected in our outstanding compensation and benefits package. B4Corp’s benefits reflect the company’s policy of putting the employees first. B4Corp’s maximum flexibility comp / makeup time policy, along with the company’s cafeteria-style benefit plan that allows employees to maximize their Benefit Dollars, reflects B4Corp’s commitment to its employees.

Compensation:

• Outstanding Salaries

Retirement:

• Full Vanguard 401k Plan – Featuring a full scope of investment options
  – 100% employer matched contribution up to 6% of employee’s salary
  – Ability to max out 401k savings $57k ($63.5k if over 50)
• Employees receive B4Corp phantom stock each year (2-year vesting period)

Insurance:

• Medical – United Health Care (UHC) (multiple plan options)
• Dental – United Concordia (UC) Flex Plan
• Vision – Vision Service Plan Insurance Co (VSP) Signature Plans
• Mutual of Omaha short-term disability (60% of salary up to $2,000.00/week)
• Mutual of Omaha long-term disability (60% of salary up to $10,000.00/month)
• Mutual of Omaha life insurance ($200,000.00)

Employee Referral Bonus:

• Refer a friend or a coworker and receive $3,000 per year for every year the person works for B4CORP

Paid Time Off (PTO):

• Seven weeks of leave per year (including ten federal holidays)
• Flexible work schedule with comp time (with customer approval)

B4Corp is an EEO and e-Verify employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or national origin. Please take the time to review and complete these three voluntary identification forms if you choose to do so and email them to [e-mail].