Digital Forensics and Incident Response (DFIR) Analyst

Peraton; Herndon (VA); On-site; USD 80,000 - 128,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life insurance

Health savings account

Disability insurance

Employee assistance program (EAP)

Parental leave

401(k)

Job summary

Peraton is hiring a Digital Forensics and Incident Response (DFIR) Analyst to support the Corporate Cybersecurity Operations Center (CSOC) in the United States. The role focuses on large-scale cyber data analytics, threat hunting, and reviewing the work of team members to ensure high-quality analysis.

You will work with CSOC leadership to deliver detailed security event analysis, support business units, and collaborate across IT teams. A strong DFIR background, Splunk experience, and U.S.

Qualifications

• Bachelor's degree or equivalent cybersecurity experience.
• Experience with Splunk Enterprise Security or Splunk Power User; advanced certification is a plus.
• DFIR experience using Endpoint Detection and Response (EDR) technologies.
• Experience performing forensic analysis on disk, memory, network, and cloud artifacts.
• Proficient with common scripting and programming languages.
• Experience with Risk Management Frameworks.
• Strong understanding of security controls for Windows, Linux, and network equipment.
• US Citizenship required.

Responsibilities

• Protect the organization's IT assets as a CSOC member.
• Implement DFIR strategies to identify risks and reduce gaps in security controls.
• Collaborate with IT Operations and end users to prevent intrusions and assist incident response.
• Prepare CSOC reports documenting security incidents from discovery through remediation.
• Support vulnerability and cyber risk management by monitoring threats and exposures.
• Test and evaluate technology solutions for small and large deployments.
• Participate in on-call rotations to support 24/7 cybersecurity operations.

Skills

Scripting languages

Programming languages

Risk Management Frameworks

Security controls

Attention to detail

Education

Bachelor's degree or 4+ years in cybersecurity related field

Tools

Splunk Enterprise Security

Splunk Power User

EDR technologies

Job description

Digital Forensics and Incident Response (DFIR) Analyst

Job Locations

US

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Responsibilities

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to support our Corporate Cybersecurity Operations Center (CSOC). In this role, you will conduct large-scale cyber data analytics, lead the use of detection technologies, perform advanced threat hunting, and provide technical review of team member work. The ideal candidate is decisive, deadlineoriented, and produces highquality analytic output. The DFIR Analyst works closely with the CSOC Manager to deliver detailed security event analysis, support business units, and foster collaboration across IT teams.

• Protect the organization's IT assets as a member of the Cybersecurity Operations Center (CSOC).
• Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
• Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response efforts.
• Prepare CSOC reports documenting security incidents from discovery through remediation.
• Support vulnerability and cyber risk management by continuously monitoring threats and exposures.
• Test and evaluate technology solutions in preparation for both small and large-scale deployments.
• Participate in periodic on-call rotations supporting 24/7 cybersecurity operations.

Qualifications

• Bachelor's Degree or 4 additional years of experience in a cybersecurity-related field in lieu of degree, or equivalent Security Operations work experience.
• Experience with Splunk Enterprise Security or Splunk Certified Power User. Advanced Splunk certification is a plus.
• DFIR experience using Endpoint Detection and Response (EDR) technologies.
• Experience performing forensic analysis on various evidence types including disk, memory, network, and cloud artifacts.
• Proficient with common scripting and programming languages.
• Experience with Risk Management Frameworks.
• In-depth understanding of common security controls for Windows, Linux, and network equipment.
• Strong attention to detail, timemanagement skills, and a professional demeanor.
• US Citizenship.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.