Forensic Analyst

Intelligence Careers; Fort Meade (MD); On-site; USD 87,000 - 153,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

The National Security Agency (NSA) in Fort Meade, MD seeks a Forensic Analyst at entry to mid level to investigate digital media and security incidents, derive intelligence, and support mitigation of network vulnerabilities. You will collect artifacts, analyze SIEM and forensic data, conduct post-incident reviews, and collaborate across teams to build a complete threat picture.

A degree in a related field with relevant experience or JCAC training is preferred; strong communication and

Qualifications

• Degree in Network Engineering, Systems Engineering or related field; relevant experience in design/development of computer or information systems, programming, computer/network security, vulnerability analysis, computer forensics, or systems engineering.
• Military training in JCAC (Joint Cyber Analysis Course) will be counted toward relevant experience.

Responsibilities

• Collect artifacts of interest from a forensic investigation for incident response.
• Support investigations of potential cybersecurity incidents.
• Conduct post-incident analysis to determine root causes and monitor mitigations.
• Monitor and analyze SIEM and forensic data to support incidents and investigations.
• Combine information from multiple data sources to create a complete threat picture.

Skills

Interpersonal skills

Communication skills

Problem-solving

Team collaboration

Customer service orientation

Multitasking

Adaptability

Attention to detail

Education

Bachelor's degree in a related field

Associate's degree + 2 years relevant experience

Bachelor's degree + 3 years relevant experience

Job description

Forensic Analyst - Entry to Mid Level (Maryland)

Fort George G. Meade Complex, MD

Pay Plan: GG , Grade: 07/1 to 12/10

Open: 2026-10-01, Close: 2026-10-03

Job Posting: 1263423

Responsibilities

Forensic Analysts investigate captured digital media and/or security incidents in order to derive useful intelligence and/or enable mitigation of network vulnerabilities. Forensic Analysts play a vital role at NSA by performing the following tasks involving computer networks owned by the Department of War and/or Intelligence Community agencies:

• Collecting artifacts of interest from a forensic investigation for incident response.
• Supporting investigations of potential cybersecurity incidents.
• Conducting post-incident analysis to determine root causes and monitor the effectiveness of mitigations.
• Monitoring and analysis of SIEM and forensic data to support incidents and investigations.
• Combine information from various data sources to create a complete picture of a threat.

Job Summary

NSA is in search of Computer Science professionals to solve complex problems, test innovative approaches and research new solutions to storing, manipulating, and presenting information. We are looking for you to apply your computer science expertise to projects that seek to create new standards for the transformation of information. If you want to influence technologies and tools and contribute to amazing innovations, then join our team of experts! Help protect national security interests as part of the world's most advanced team of computer science professionals!

Qualifications

The qualifications listed are the minimum acceptable to be considered for the position. Degree must be in Network Engineering, Systems Engineering or related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Computer Science, Computer Forensics, Cyber Security, Software Engineering, Information Assurance, Information Technology, or Computer Security). Relevant experience must be in one or more of the following: design/development of computer or information systems, programming, computer/network security, vulnerability analysis, computer forensics, or systems engineering. Completion of military training in a relevant area such as JCAC (Joint Cyber Analysis course) will be considered towards the relevant experience requirement (i.e., 24-week JCAC course will count as 6 months of experience). ENTRY/DEVELOPMENTAL Entry is with a Bachelor's degree and no experience. An Associate's degree plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position. FULL PERFORMANCE Entry is with a Bachelor's degree plus 3 years of relevant experience or a Master's degree plus 1 year of relevant experience or a Doctoral degree and no experience. An Associate's degree plus 5 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position.

The ideal candidate is someone with a desire for continual learning and who possesses strong interpersonal, communication (verbal and written), and problem-solving skills. The candidate is also:

• Able to work effectively with others in a collaborative environment
• Customer-service oriented
• Able to manage multiple tasks with competing timelines and deliverables
• Requirements oriented
• Accountable
• Adaptable
• Detail-oriented

Pay: Salary offers are based on candidates' education level and years of experience relevant to the position and also take into account information provided by the hiring manager/organization regarding the work level for the position. Salary Range: $87,362 - $153,082 (Entry/Developmental, Full Performance) Salary range varies by location, work level, and relevant experience to the position. Training will be provided based on the selectee's needs and experience.

• Benefits: NSA offers a comprehensive benefits package.
• Work Schedule: This is a full-time position, Monday - Friday, with basic 8hr/day work requirement between 6:00 a.m. and 6:00 p.m. (flexible).

DCIPS Trial Period: If selected for this position, you will be required to serve a two-year DCIPS trial period, unless you are a veterans' preference-eligible employee, in which case you are required to serve a one-year trial period. This trial period runs concurrently with your commitment to the position, if applicable. Before finalizing your appointment at the conclusion of your trial period, NSA will determine whether your continued employment advances the public interest. This decision will be based on factors such as your performance and conduct; the Agency's needs and interests; whether your continued employment would advance the Agency's organizational goals; and whether your continued employment would advance the efficiency of the Federal service. Upon completion of your trial period, your employment will be terminated unless you receive certification, in writing, that your continued employment advances the public interest. If you do not receive certification for continued employment, you should receive written notice prior to the end of your trial period that your employment will be terminated and the effective date of such termination.

DCIPS Disclaimer

**VETERANS AND TRANSITIONING SERVICE MEMBERS** Thank you for your service! The National Security Agency (NSA) is part of the Defense Civilian Intelligence Personnel System (DCIPS). All positions at NSA are in the Excepted Service under Title 10, United States Codes (U.S.C.), Section 1601 appointment authority. Veterans' Preference In accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, "DoD Civilian Personnel Management System: Defense Civilian Intelligence Personnel System Employment and Placement," NSA applies veterans' preference, as defined by Section 2108 of Title 5, U.S.C., to eligible candidates. If you are claiming veterans' preference, you are required to provide acceptable documentation of your preference eligibility upon application. Acceptable documentation includes:

• DD-214: "Certificate of Release or Discharge from Active Duty," which shows dates of service and discharge under honorable conditions (Copy 4)
• OR- Certification of Service: A written document on letterhead from the appropriate branch of the armed forces that certifies the service member is expected to discharge or be released from active duty service in the armed forces under honorable conditions not later than 120 days after the date the certification is signed. The certification should include the military service dates, including the expected discharge or release date;
• AND- Standard Form 15 (SF-15)Application for 10-point Veteran Preference (http://www.opm.gov/forms/pdf_fill/sf15.pdf).
• AND- VA Letter of Disability (for 10pt and Sole Survivorship rating) You may obtain a letter from the Department of Veterans Affairs reflecting your level of disability for preference eligibility by visiting a VA Regional Office, contacting a VA call center, or online (https://www.ebenefits.va.gov/).

Failure to provide sufficient documentation of veterans' preference eligibility may preclude NSA from identifying you as a preference eligible candidate during the hiring selection process.