Intrusion Analyst: Forensic Cyber Investigator

Full Visibility LLC; Linthicum (MD); On-site; USD 110,000 - 210,000; Full time

Job summary

Full Visibility LLC is seeking an Intrusion Analyst in Linthicum, MD, requiring an ACTIVE Secret clearance with TS/SCI eligibility preferred. The role centers on forensic examinations of network intrusions, development of analysis scripts, and identifying indicators of compromise while preserving chain of custody.

The candidate will produce Malware Analysis Reports, support tool validation, and may contribute to expert-witness preparation, operational metrics, training, and process improvement.

Qualifications

• Active Secret Clearance is required; TS/SCI eligibility preferred.
• Bachelor's degree or 4 years hands-on experience in forensics or intrusion analysis.
• Formal training in expert witness testimony within last 3 years if assigned to certain tasks.

Responsibilities

• Conduct forensic examinations of network intrusions, compromised systems, and cyber incidents.
• Develop scripts and analytical utilities for artifact triage, extraction, and timeline development.
• Identify indicators of compromise and adversary behaviors; analyze digital evidence with chain of custody.
• Prepare technically accurate Malware Analysis Reports and support tool validation and QA.
• Assist with expert-witness preparation, metrics, training, and process improvement.

Skills

Active Secret Clearance

Analytical skills

Education

Bachelor's degree in digital forensics, computer science, cybersecurity, information technology, criminal justice

Tools

GCIH (GIAC Certified Incident Handler)

ECIH (EC-Council Certified Incident Handler)

GCFA (GIAC Certified Forensic Analyst)

DFE (DC3 Digital Forensic Examiner)

Job description

Full Visibility LLC is seeking an Intrusion Analyst in Linthicum, MD, requiring an ACTIVE Secret clearance with TS/SCI eligibility preferred. The role centers on forensic examinations of network intrusions, development of analysis scripts, and identifying indicators of compromise while preserving chain of custody.

The candidate will produce Malware Analysis Reports, support tool validation, and may contribute to expert-witness preparation, operational metrics, training, and process improvement.