Cloud Forensics Analyst — Incident Response Specialist

Nightwing; Arlington (VA); On-site; USD 122,000 - 253,000; Full time

Benefits offered by this job

Medical, Vision, Dental insurance

401k plan

Job summary

Nightwing is seeking a Cloud Forensics Analyst to support a U.S. Government client with onsite incident response, evidence collection and forensic analysis across cloud and on-prem environments.

You will triage devices, image systems, document state information, and produce forensic write-ups for inclusion in official reports. The role requires US citizenship and an active TS/SCI clearance, with extensive cyber forensics experience.

Qualifications

• Must have US citizenship and an active TS/SCI clearance.
• Experience in cyber forensics investigations using leading edge technologies and industry standard tools.
• Strong understanding of cloud environments (SaaS/PaaS/IaaS) and evidence handling procedures.

Responsibilities

• Acquire/collect computer artifacts in support of onsite engagements.
• Triage devices and assess evidentiary value.
• Correlate forensic findings to network events and intrusion narratives.
• Document system state information prior to imaging.
• Perform forensic triage to determine scope and urgency.
• Track and document forensic analysis from start to finish.
• Collect, process, preserve, analyze and present evidence.
• Coordinate with Government staff to validate findings.
• Produce forensic write-ups for reports and written products.
• Assist with publishing CND guidance and incident findings.

Skills

US Citizenship

Active TS/SCI clearance

Cloud forensics

SaaS/PaaS/IaaS knowledge

Evidence handling

Digital forensics reporting

Windows/Linux expertise

Forensic tools experience

Education

BS in Computer Science/Cybersecurity/Engineering

Tools

Forensic tools

Job description

Nightwing is seeking a Cloud Forensics Analyst to support a U.S. Government client with onsite incident response, evidence collection and forensic analysis across cloud and on-prem environments.

You will triage devices, image systems, document state information, and produce forensic write-ups for inclusion in official reports. The role requires US citizenship and an active TS/SCI clearance, with extensive cyber forensics experience.