Cyber Investigations Analyst - Mid

Dunhill Professional Search & Government Solutions; Ashburn (VA); Sur place; USD 98 000 - 118 000; Plein temps

Résumé du poste

Dunhill Government Solutions in Ashburn, VA, seeks a Cyber Investigations Analyst to support a federal agency's internal investigations unit. You will secure IT networks used to detect and investigate cybercrime and policy violations, spanning security engineering for the forensic network and SIEM support.

The role involves hands-on digital forensics across Windows, Linux, Mac and cloud, developing procedures, and acting as SME on evidence preservation and chain of custody, with on-site hours

Qualifications

• Bachelor's degree in CS, engineering or related technical field.
• 5+ years in system administration, database administration, network engineering, software engineering or software development with a concentration in cyber security.
• 3+ years of professional digital media forensic analysis, static malware disassembly/analysis and/or runtime malware analysis.
• Ability to work on site in Ashburn, VA (no telework), core hours 8:30 AM - 5:00 PM, with on‑call support.

Responsabilités

• Advise on and help maintain and engineer the forensic network infrastructure across its lifecycle; manage priorities and service requests through the ticketing and change-request process
• Administer, configure, tune and secure the unit's tool suite, devices and sensors; review network security architecture and recommend improvements to leadership
• Maintain SIEM infrastructure collecting IDS, firewall, proxy, DLP, antivirus and vulnerability-scanner data
• Monitor data-loss-prevention (DLP) solutions in near real time and recommend spillage response and sanitization per NIST 800-88
• Build and deploy custom forensic platforms for triage, imaging and advanced analysis; perform endpoint (Windows, Linux, Mac, cloud) and network forensic analysis
• Support formal digital forensic investigations and document findings in investigation reports; process email‑misuse cases in the case management system
• Serve as subject‑matter expert on evidence preservation and chain of custody, and on advanced extraction techniques (encryption bypass, mobile‑device unlocking, board‑level repair)
• Manage cyber investigations from creation to closure, escalate cases per policy, and author and update standard operating procedures

Connaissances

Cyber security

Digital forensics

Security incident response

Formation

Bachelor's degree

Outils

SIEM

DLP

Forensic tools

Description du poste

Dunhill Government Solutions is hiring a Cyber Investigations Analyst to support the internal investigations unit of a federal agency, securing the IT networks used to detect and investigate cybercrime and internal policy violations. The role spans security engineering for the unit's forensic network, ISSO-adjacent support for its tool suite and SIEM, and hands‑on digital forensics.

Responsibilities:

• Advise on and help maintain and engineer the forensic network infrastructure across its lifecycle; manage priorities and service requests through the ticketing and change-request process
• Administer, configure, tune and secure the unit's tool suite, devices and sensors; review network security architecture and recommend improvements to leadership
• Maintain SIEM infrastructure collecting IDS, firewall, proxy, DLP, antivirus and vulnerability-scanner data
• Monitor data-loss-prevention (DLP) solutions in near real time and recommend spillage response and sanitization per NIST 800-88
• Build and deploy custom forensic platforms for triage, imaging and advanced analysis; perform endpoint (Windows, Linux, Mac, cloud) and network forensic analysis
• Support formal digital forensic investigations and document findings in investigation reports; process email‑misuse cases in the case management system
• Serve as subject‑matter expert on evidence preservation and chain of custody, and on advanced extraction techniques (encryption bypass, mobile‑device unlocking, board‑level repair)
• Manage cyber investigations from creation to closure, escalate cases per policy, and author and update standard operating procedures

Required qualifications:

• Bachelor's degree in Computer Science, Engineering or another technical discipline, or equivalent relevant experience
• 5+ years in system administration, database administration, network engineering, software engineering or software development with a concentration in cyber security
• 3+ years of professional digital media forensic analysis, static malware disassembly/analysis and/or runtime malware analysis
• Ability to work on site in Ashburn, VA (no telework), core hours 8:30 AM - 5:00 PM, with on‑call support

Preferred: CISSP or CompTIA Security+; GCFE, GCFA or EnCE.

Compensation: $98,000 - $118,000 per year

US Citizenship (no dual citizenship) and the ability to pass a federal background investigation in order to be granted access to sensitive information.