Digital Forensics SME

ActioNet, Inc.; Rockville, Northern (MD, KY); Hybrid; USD 140,000 - 184,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life Insurance

401k Savings

Education and Training

FSA

Referral Programs

Paid Holidays

PTO

Disability Insurance

Job summary

ActioNet, Inc. seeks a Digital Forensics SME with extensive DFIR experience to investigate, analyze, and remediate complex cybersecurity incidents across the agency enterprise. The role requires strong investigative acumen, memory forensics, malware analysis and collaboration with law enforcement as needed.

Salary range is $140K–$184K annually with TS/DOE Q clearance. The candidate will lead SOC response, ensure proper evidence handling, and work with enterprise toolsets to support remediation

Qualifications

• 8+ years of specialized experience responding to information security incidents with advanced DFIR expertise.
• Experience performing forensic investigations using enterprise DFIR toolsets.
• Proven ability to produce evidentiary-quality forensic documentation with law enforcement.
• Knowledge of imaging, memory analysis, and network/digital media forensics.

Responsibilities

• Perform advanced forensic imaging, data acquisition, memory analysis and investigations.
• Identify root causes of malware infections, data exfiltration, and intrusions.
• Lead and coordinate SOC response for complex, high-severity incidents.
• Conduct malware detonation, static/dynamic analysis and reverse engineering.
• Support cyber threat intelligence production and email security investigations.
• Preserve digital evidence and produce evidentiary-quality documentation.

Skills

Advanced DFIR

Incident response

Malware analysis

Network forensics

Education

Bachelor’s degree in Cybersecurity/DF/CS/IT

Tools

Enterprise DFIR toolsets

Job description

The Digital Forensics SME provides advanced digital forensics and incident response (DFIR) expertise, supporting investigation, analysis, and remediation of complex cybersecurity incidents across the Agency enterprise.

Salary $140K-184K

Clearance: TS/DOE Q

Key Responsibilities

• Perform advanced forensic imaging, volatile data acquisition, live memory analysis, endpoint, network, and digital media forensic investigations using agency-furnished toolsets.
• Identify root causes of malicious software infections, data exfiltration incidents, and network intrusions.
• Lead and coordinate SOC response, remediation efforts, and oversight for complex and high-severity cybersecurity incidents while providing hands-on digital forensic analysis when required.
• Conduct malware detonation, static malware disassembly, dynamic/runtime malware analysis, and reverse engineering.
• Support cyber threat intelligence production, mobile device security investigations, and email/phishing analysis.
• Collect, preserve, and analyze digital evidence in accordance with legal requirements and chain-of-custody procedures, producing evidentiary-quality documentation for security investigators and law enforcement.

Required Qualifications

• Bachelor's degree in Cybersecurity, Digital Forensics, Computer Science, Information Technology, or a related field.
• 8+ years of specialized professional experience responding to information system security incidents with advanced expertise in digital forensics and incident response (DFIR).
• Experience performing forensic investigations using enterprise digital forensic and incident response (DFIR) toolsets.
• Demonstrated experience producing evidentiary-quality forensic documentation and collaborating with security investigators and law enforcement.
• Forensic imaging, volatile data acquisition, and live memory analysis
• Endpoint, network, and digital media forensics
• Malware detonation, static and dynamic/runtime malware analysis, reverse engineering, and code disassembly
• Cyber threat intelligence production and analysis
• Mobile device security investigations
• Email security, phishing analysis, and incident response

• Advanced and Managed IT Services
• Agile Software Development
• DevSecOps
• Cybersecurity
• Health IT
• C4ISR & SIGINT
• Data Center Engineering & Operations

Why ActioNet?

At ActioNet, our Passion for Quality is at the heart of everything we do:

• Commitment to Employees: We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters.
• Commitment to Customers: We are committed to our customers by driving and sustaining Service Delivery Excellence.
• Commitment to Community: We are committed to giving back to our community, helping others, and making the world a better place for our next generation.

ActioNet is proud to be named a Top Workplace for the eleventh year in a row (2014 - 2024). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation.

What's in It For You?

As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?

ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:

• Medical Insurance
• Vision Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance

ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

ActioNet Core Value #1 - Instill Integrity In Everything We Do