Digital Forensics Analyst

SAIC; Chantilly (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

SAIC in Chantilly, Virginia is seeking a Digital Forensics Analyst to join their cybersecurity program. The role involves conducting forensic analysis on a variety of digital and cloud media, requiring an active TS/SCI with Polygraph security clearance.

The successful candidate will have at least a Bachelor's degree with 14 years of experience or equivalent education and experience, and expertise in forensic tools such as Axiom and Cellebrite. Proficiency in communication and writing is essential.

Qualifications

• Requires active TS/SCI with CI Poly security clearance.
• 14 years of experience with a Bachelor's degree, or 12 years with a Master's, or 9 years with a PhD/JD.
• 3-5 years experience with forensic tools.

Responsibilities

• Conduct forensic acquisition and analysis on various digital media.
• Review evidentiary data to assess threats and misclassified data.
• Generate analytical reports detailing forensic actions.

Skills

Forensic tools

Communication skills

Data analysis

RAM data capture

Malicious intrusions identification

Education

Bachelor's degree with 14+ years of experience

Master's degree with 12+ years of experience

PhD or JD with 9+ years of experience

Tools

Axiom

Cellebrite

EnCase

Forensics Toolkit (FTK)

Job description

Description

Seeking a Digital Forensics Analyst, to serve as a member of an organizational cybersecurity program. This position requires an active TS/SCI with Polygraph.

Key Responsibilities

• Conduct forensic acquisition and analysis on computer, mobile, IOT, digital media devices, AWS/cloud instances and any other unidentified or non-standard media.
• Ability to capture volatile data including RAM, running processes, network states, etc.
• Review evidentiary data (log files, file system artifacts, metadata, memory captures, etc.) to determine presence of misclassified data, data spills, insider threats, identify malicious intrusions, and assess the threat to the organization.
• Generate analytical reports detailing forensic actions taken, acquisition of items of interest found in evidence, integrity checks, and suggested security actions determined from the evidence provided for both technical responders and executive stakeholders.
• Conduct research and technical reviews on forensic products proposed for consideration for the organizational product (software and hardware) listing.
• Support maintenance of digital forensic tools and systems, including testing and validation in accordance with SWGDE/NIST guidelines, and support security authorization and accreditation activities for organizational forensic systems.
• Conduct routine research to recommend areas of improvement to existing digital forensic tools, processes, and procedures.

Required Education

• Bachelor's and fourteen (14) years or more experience; Master's and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience.

Other Qualifications

• Active TS/SCI with CI Poly security clearance.
• Candidates with an active security clearance at the TS/SCI level are required to pass a counter-intelligence polygraph.
• Relevant degrees and/or 3-5 years of experience.
• Active certification and working experience with one or more of the following forensic tools: Axiom, Cellebrite, EnCase, Forensics Toolkit (FTK).
• Proficient communication, briefing and writing skills.

EEO AA M/F/Vet/Disability