DFIR Analyst - Incident Response & Threat Hunting

Peraton; Reston (VA); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to support our Corporate Cybersecurity Operations Center (CSOC). You will conduct large-scale cyber data analytics, lead the use of detection technologies, perform advanced threat hunting, and provide technical review of team member work.

The DFIR Analyst works closely with the CSOC Manager to deliver detailed security event analysis, support business units, and foster collaboration across IT teams.

Qualifications

• Bachelor's Degree or 4 additional years of experience in a cybersecurity-related field in lieu of degree, or equivalent Security Operations work experience.
• Experience with Splunk Enterprise Security or Splunk Certified Power User. Advanced Splunk certification is a plus.
• DFIR experience using Endpoint Detection and Response (EDR) technologies.
• Experience performing forensic analysis on various evidence types including disk, memory, network, and cloud artifacts.
• Proficient with common scripting and programming languages.
• Experience with Risk Management Frameworks.
• In-depth understanding of common security controls for Windows, Linux, and network equipment.
• Strong attention to detail, time-management skills, and a professional demeanor.
• US Citizenship.

Responsibilities

• Protect the organization's IT assets as a member of the Cybersecurity Operations Center (CSOC).
• Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
• Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response efforts.
• Prepare CSOC reports documenting security incidents from discovery through remediation.
• Support vulnerability and cyber risk management by continuously monitoring threats and exposures.
• Test and evaluate technology solutions in preparation for both small and large-scale deployments.
• Participate in periodic on-call rotations supporting 24/7 cybersecurity operations.

Skills

Forensic analysis

Scripting & programming

Risk management frameworks

Windows/Linux/network security

Education

Bachelor's Degree or equivalent in cybersecurity

Tools

Splunk Enterprise Security

Endpoint Detection and Response (EDR)

Job description

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to support our Corporate Cybersecurity Operations Center (CSOC). You will conduct large-scale cyber data analytics, lead the use of detection technologies, perform advanced threat hunting, and provide technical review of team member work.

The DFIR Analyst works closely with the CSOC Manager to deliver detailed security event analysis, support business units, and foster collaboration across IT teams.