Cyber Security Analyst III - Digital Forensics and Incident Response

OSC Global; Richland (WA); On-site; USD 100,000 - 161,000; Full time

Benefits offered by this job

Paid holidays

Paid time off

401k with employer match

Health insurance plans through FEHB

Life and disability benefits

Job summary

OSC Technical Solutions seeks a Cyber Security Analyst III for Digital Forensics and Incident Response at the Hanford Site in Richland, WA. You will investigate endpoints, monitor events, and help remediate confirmed incidents while mentoring junior staff.

The role blends hands-on forensics with process improvement and incident handling leadership, supporting enterprise security operations and audits.

Qualifications

• Bachelor's degree and 5+ years in cyber security or equivalent
• Ability to pass a pre-employment background check and drug screening
• Must have DOE access authorization (HSPD-12 PIV)
• Hands-on incident response or digital forensics experience preferred

Responsibilities

• Conduct forensic investigations on target endpoints
• Monitor, analyze, and respond to security events across the network
• Gather data/artifacts, write incident reports, and coordinate containment actions
• Support cyber security audits, assessments and investigations
• Mentor junior analysts and review their work
• Participate in disaster recovery exercises and tool maintenance

Skills

Cyber security framework

Prioritization

Communication skills

Team player

Customer service

Education

Bachelor's Degree

GCFA

GCIH

GNFA

CySA+

CEH

Tools

SIEM

NIDS

SOAR

Endpoint Protection

Firewalls

DLP

Email Filtering

Scanners

PCAP

Job description

Cyber Security Analyst III - Digital Forensics and Incident Response

Position Overview

OSC Technical Solutions is seeking a Cyber Security Analyst III Digital Forensics and Incident Response to support incident response for the cybersecurity program at the U.S. Department of Energy Hanford Site in Richland, Washington. The Analyst conducts forensic investigations on target endpoints, monitors and responds to security events across the enterprise, and contributes to remediation and reporting for confirmed incidents. This is a mid-level role that combines hands‑on technical investigation with growing responsibility for process improvement and for mentoring junior analysts.

Major Activities (Typical Duties/Responsibilities)

• Utilize digital forensics tools to conduct forensic investigations on target endpoints.
• Utilize a range of security tools (e.g., SIEM, NIDS, SOAR, Endpoint Protection, Firewalls, DLP, Email Filtering, Scanners, PCAP) to monitor, analyze, and respond to security events on the network.
• Follow established procedures to identify reportable security incidents; act as an incident handler by gathering data and artifacts, performing analysis, writing incident reports, reporting to management, and carrying out mitigating actions to contain and recover from cyber-attacks.
• Monitor and respond to reports and threat intelligence from various sources.
• Distribute threat advisories, vulnerability reports, and official directives to customers and leadership.
• Participate in disaster recovery exercises and events.
• Support operation and maintenance of security tools.
• Support cyber security audits, assessments, data calls, and investigations.
• Manage projects and processes independently with limited supervision.
• Coach and review the work of lower-level professionals.
• Serve as a technical mentor and trainer for junior analysts.
• Perform other duties as appropriate and as assigned.

Knowledge/Skills/Abilities

• Working knowledge of a cyber security compliance framework, such as the National Institute of Standards and Technology (NIST), Center for Internet Security (CIS) Critical Security Controls, or ISO 27001/27002.
• Ability to set and manage priorities judiciously.
• Excellent written and verbal communication and interpersonal skills.
• Ability to work cooperatively in a team environment.
• Strong customer service orientation.

Physical Abilities

• Sufficient fine motor skills for the use of computers, calculators with an ability to withstand repetitive keyboarding for extended periods of time.
• Visual and communications ability adequate to perform the essential functions of the job.
• Ability to kneel, bend and twist at the waist on an occasional basis.
• Ability to reach below shoulder height with regular frequency (desk position) and at or above shoulder height on occasion.
• Ability to push, pull, carry and lift objects weighing up to 10 pounds on a regular basis, and greater weights on an occasional basis.
• Ability to travel by vehicle or aircraft, and ability to safely operate a motor vehicle.

Minimum Requirements

• Bachelor's Degree and 5 or more years of experience, or an equivalentcombination of education, training and experience
• Ability to pass a pre-employment background check and drug screening.
• Must have identification compliant with the REAL ID Act at time of hire.
• Must be able to obtain and maintain a Department of Energy access authorization (HSPD-12 PIV credential); this requires a successful federal background investigation.

Preferred Qualifications

• Bachelor's Degree in Cyber Security, Computer Science or related field
• Experience in cyber security, information technology, systems analysis, or a similar role, including hands‑on incident response or digital forensics experience.
• Certifications such as GCFA, GCIH, GNFA, CySA+, or CEH.
• Experience with industrial control system (ICS) / operational technology (OT) security or other federal FISMA-regulated environments.

Pay Range

$100,457.00- $161,384.00

Benefits

OSC Technical Solutions offers excellent benefits for eligible employees. Benefits include paid holidays, paid time off, 401k with employer match, dental, vision, health insurance plans through the Federal Employee Health Benefits (FEHB) program, as well as life and disability benefits.

Equal Employment Opportunity

OSC Technical Solutions does not discriminate, and the company provides equal employment opportunity for all employees and applicants without regard to race, religion, color, sex, gender, sexual orientation, national origin, citizenship status, age, marital status, pregnancy or parenthood, handicap or disability, genetics, veteran status or any other legally protected characteristic. OSC Technical Solutions adheres to all federal, state and local laws regarding equal employment opportunity and will not discriminate against you in violation of these laws. OSC Technical Solutions reserves the right to apply CIRI Shareholder preference to qualified Shareholders in employment and advancement opportunities.

E-Verify

OSC Technical Solutions participates in E-Verify. We will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee's Form I-9 to confirm work authorization.

Reasonable Accommodation

OSC Technical Solutions will provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities. In compliance with the ADA Amendments Act (ADAAA), if you have a disability and would like to request an accommodation in order to apply for a position with OSC Global, LLC or any of its subsidiaries, please email [e-mail].

Important Employment Notice: Federal Contract & RCW 49.44.240

Due to our status as a federal contractor operating within the State of Washington, all applicants and employees must adhere to federal law, which classifies cannabis as a Schedule I controlled substance.

While Washington States RCW 49.44.240 (which generally prohibits employers from discriminating against an applicant based on their lawful use of cannabis off-site and during working hours) is state law, it does not supersede federal requirements.

Zero-Tolerance Policy and Disqualification

• Prohibition: The use, possession, or distribution of cannabis is strictly prohibited for all employees, regardless of state law.
• Testing: Applicants will be subject to pre-employment drug screening that includes testing for cannabis.
• Disqualification: A positive test result for cannabis will result in immediate disqualification from consideration for employment, as mandated by our federal contract obligations.

All applicants must be able to comply with all federal regulations, including those concerning controlled substances, as a condition of employment.

In compliance with Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Hanford Field Office (HFO) direction, employees issued initial badges on or after September 1st, 2025, are required to obtain and maintain a HSPD-12 Personal Identity Verification (PIV) Credential. To obtain this credential, new employees must successfully complete and pass a federal background check investigation. This investigation encompasses multiple areas of eligibility and includes a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last year. This includes marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.

PI287321776