Intrusion Analyst

Seneca Resources Company, LLC; Washington (District of Columbia); Remote; USD 96,432 - 117,096; Full time

Benefits offered by this job

Competitive compensation

Health, dental, and vision coverage

401(k) plans

Continuous support throughout assignments

Job summary

A trusted staffing and consulting firm seeks an Intrusion Analyst to support federal law enforcement with advanced digital forensic investigations. The role involves detailed forensic analysis, evidence preservation, and expert testimony. Candidates should have a minimum of 8 years of experience in digital forensics, active TS clearance, and expertise with various forensic tools. A salary range of $70–$85 per hour is offered with full remote capabilities and comprehensive support for career growth.

Qualifications

• Minimum 8 years of experience in digital forensics or equivalent certifications/work history.
• Active TS clearance with SCI eligibility.
• Expertise in intrusion-focused forensic analysis across multiple operating systems.
• Strong knowledge of forensic artifacts, persistence mechanisms, and lateral movement indicators.

Responsibilities

• Conduct advanced digital forensic investigations of devices, data, and systems.
• Collect, preserve, and analyze data ensuring integrity for legal admissibility.
• Provide expert witness testimony and successfully complete mock examinations.
• Analyze forensic artifacts and intrusion activity across multiple operating systems.

Skills

Digital forensics expertise

Intrusion analysis

Scripting (Python, PowerShell, Bash)

Communication skills

Education

8+ years of experience in digital forensics or equivalent certifications

Tools

Magnet Axiom

X-Ways

FTK

Volatility

Splunk

ELK Stack

Job description

Location & Travel

Remote

Travel Required: Up to 10%

Clearance Required: Active TS clearance with SCI eligibility

Contract: Long Term

What You Will Do

In support of a large federal law enforcement agency, this opportunity is for an Intrusion Analyst role providing technical expertise to confront complex cyber challenges. The position centers on conducting advanced digital forensic analysis, preserving evidence integrity, and supporting investigative activities through detailed technical assessments and clear reporting.

• Conduct advanced digital forensic investigations of devices, data, and systems to uncover evidence for legal or investigative purposes.
• Collect, preserve, and analyze data from multiple sources while ensuring integrity for legal admissibility.
• Perform scientific analysis of devices in both static and dynamic states and thoroughly document findings and conclusions.
• Provide expert witness testimony and successfully complete mock examinations, including courtroom defense exercises.
• Analyze forensic artifacts and intrusion activity across multiple operating systems (Windows, Linux, macOS, mobile).
• Examine volatile memory captures, log exports, and other pre-acquired forensic datasets.
• Identify Indicators of Compromise (IOCs) and attacker Tactics, Techniques, and Procedures (TTPs).
• Use forensic tools such as Magnet Axiom, X-Ways, FTK, Volatility, Splunk, ELK Stack, and relevant open-source utilities.
• Correlate data from multiple sources (host artifacts, logs, network captures, cloud logs) to reconstruct attack timelines and scope.
• Detect persistence mechanisms, privilege escalation, lateral movement, and data exfiltration indicators.
• Apply scripting and automation (Python, PowerShell, Bash) for artifact parsing, data correlation, and workflow acceleration.
• Communicate findings clearly and effectively for technical and non-technical audiences.
• Support operational investigative activities, which may require extended or irregular work hours across multiple locations.
• Conduct in-depth technical analysis for complex cyber and computer intrusion cases.
• Coordinate and facilitate cyber and computer intrusion investigations.
• Develop recommendations for process improvement.

What You Will Need

• Minimum 8 years of experience in digital forensics or equivalent certifications/work history.
• Active TS clearance with SCI eligibility.
• Expertise in intrusion-focused forensic analysis across multiple operating systems.
• Strong knowledge of forensic artifacts, persistence mechanisms, and lateral movement indicators.
• Proficiency with scripting languages (Python, PowerShell, Bash) for automation.
• Excellent communication skills and ability to defend findings in courtroom exercises.
• Applied knowledge of forensic, network, and malware analysis.
• Experience working in team environments for software development.
• Ability to perform reverse engineering of compiled software, functional analysis of source code/scripts, and hardware/firmware analysis.

What Would Be Nice To Have

• Advanced certifications in digital forensics.
• Experience supporting FBI or federal cyber investigations.
• Experience managing and developing for multiple environments.
• Strong oral and written communication skills.

Pay Range

$70–$85/hr (W2)

About Seneca Resources

At Seneca Resources, we are more than just a staffing and consulting firm—we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 organizations to government agencies, we connect professionals with opportunities that drive meaningful impact and support long-term career growth. When you join Seneca, you gain a team committed to your success. We offer competitive compensation, comprehensive health, dental, and vision coverage, 401(k) plans, and continuous support throughout your assignment. Our recruiters and account managers invest in understanding your goals and placing you in roles aligned with your talents and ambitions.

Seneca Resources is proud to be an Equal Opportunity Employer, dedicated to building a diverse and inclusive workplace where all qualified applicants are encouraged to apply.