Intrusion Analyst

Full Visibility LLC; Linthicum (MD); On-site; USD 95,000 - 140,000; Full time

Job summary

Forensic Focus seeks a cleared digital forensics professional to perform examinations of network intrusions, compromised systems, and advanced persistent threats. The role includes developing scripts for artifact triage and timeline reconstruction, identifying indicators of compromise, analyzing digital evidence, maintaining chain of custody, and preparing malware analysis reports.

The ideal candidate has an active clearance (TS/SCI preferred), certifications such as GCIH/ECIH/GCFA/DC3 DFE, a

Qualifications

• Active security clearance required; TS/SCI preferred.
• Certifications listed (GCIH, ECIH, GCFA, DC3 DFE) or equivalent.
• Degree in digital forensics or related field, or equivalent hands-on experience.
• Expert witness testimony training may be required for certain tasks.

Responsibilities

• Perform forensic examinations of network intrusions, compromised systems, and APTs.
• Develop scripts for artifact triage and timeline reconstruction.
• Identify indicators of compromise and analyze digital evidence.
• Maintain chain of custody and prepare malware analysis reports.

Skills

Active security clearance

GCIH

ECIH

GCFA

DC3 DFE

Expert witness training

Education

Digital forensics degree or related field

Job description

The Role

This position involves performing forensic examinations of network intrusions, compromised systems, and advanced persistent threats. Duties include developing scripts for artifact triage and timeline reconstruction, identifying indicators of compromise, analyzing digital evidence, maintaining chain of custody, and preparing malware analysis reports.

Skills & Experience

Requires an active Secret clearance (TS/SCI preferred) and certifications such as GCIH, ECIH, GCFA, or DC3 DFE. A degree in digital forensics or related field is needed, or equivalent hands‑on experience. Expert witness testimony training is also required for certain tasks.

Who It Suits

Ideal for cleared digital forensics and intrusion analysis professionals with two to twelve years of experience, comfortable working within government and law enforcement environments on sensitive national security investigations.