Cyber Investigations Analyst: Forensics & SIEM Specialist

Dunhill Professional Search & Government Solutions; Ashburn (VA); Presencial; USD 98 000 - 118 000; Tempo integral

Resumo da oferta

Dunhill Government Solutions in Ashburn, VA, seeks a Cyber Investigations Analyst to support a federal agency's internal investigations unit. You will secure IT networks used to detect and investigate cybercrime and policy violations, spanning security engineering for the forensic network and SIEM support.

The role involves hands-on digital forensics across Windows, Linux, Mac and cloud, developing procedures, and acting as SME on evidence preservation and chain of custody, with on-site hours

Qualificações

• Bachelor's degree in CS, engineering or related technical field.
• 5+ years in system administration, database administration, network engineering, software engineering or software development with a concentration in cyber security.
• 3+ years of professional digital media forensic analysis, static malware disassembly/analysis and/or runtime malware analysis.
• Ability to work on site in Ashburn, VA (no telework), core hours 8:30 AM - 5:00 PM, with on‑call support.

Responsabilidades

• Advise on and help maintain and engineer the forensic network infrastructure across its lifecycle; manage priorities and service requests through the ticketing and change-request process
• Administer, configure, tune and secure the unit's tool suite, devices and sensors; review network security architecture and recommend improvements to leadership
• Maintain SIEM infrastructure collecting IDS, firewall, proxy, DLP, antivirus and vulnerability-scanner data
• Monitor data-loss-prevention (DLP) solutions in near real time and recommend spillage response and sanitization per NIST 800-88
• Build and deploy custom forensic platforms for triage, imaging and advanced analysis; perform endpoint (Windows, Linux, Mac, cloud) and network forensic analysis
• Support formal digital forensic investigations and document findings in investigation reports; process email‑misuse cases in the case management system
• Serve as subject‑matter expert on evidence preservation and chain of custody, and on advanced extraction techniques (encryption bypass, mobile‑device unlocking, board‑level repair)
• Manage cyber investigations from creation to closure, escalate cases per policy, and author and update standard operating procedures

Conhecimentos

Cyber security

Digital forensics

Security incident response

Formação académica

Bachelor's degree

Ferramentas

SIEM

DLP

Forensic tools

Descrição da oferta de emprego

Dunhill Government Solutions in Ashburn, VA, seeks a Cyber Investigations Analyst to support a federal agency's internal investigations unit. You will secure IT networks used to detect and investigate cybercrime and policy violations, spanning security engineering for the forensic network and SIEM support.

The role involves hands-on digital forensics across Windows, Linux, Mac and cloud, developing procedures, and acting as SME on evidence preservation and chain of custody, with on-site hours