Intrusion Analyst: Forensic Threat Specialist (Secret Clearance)

Forensic Focus; Linthicum (MD); On-site; USD 95,000 - 140,000; Full time

Job summary

Forensic Focus seeks a cleared digital forensics professional to perform examinations of network intrusions, compromised systems, and advanced persistent threats. The role includes developing scripts for artifact triage and timeline reconstruction, identifying indicators of compromise, analyzing digital evidence, maintaining chain of custody, and preparing malware analysis reports.

The ideal candidate has an active clearance (TS/SCI preferred), certifications such as GCIH/ECIH/GCFA/DC3 DFE, a

Qualifications

• Active security clearance required; TS/SCI preferred.
• Certifications listed (GCIH, ECIH, GCFA, DC3 DFE) or equivalent.
• Degree in digital forensics or related field, or equivalent hands-on experience.
• Expert witness testimony training may be required for certain tasks.

Responsibilities

• Perform forensic examinations of network intrusions, compromised systems, and APTs.
• Develop scripts for artifact triage and timeline reconstruction.
• Identify indicators of compromise and analyze digital evidence.
• Maintain chain of custody and prepare malware analysis reports.

Skills

Active security clearance

GCIH

ECIH

GCFA

DC3 DFE

Expert witness training

Education

Digital forensics degree or related field

Job description

Forensic Focus seeks a cleared digital forensics professional to perform examinations of network intrusions, compromised systems, and advanced persistent threats. The role includes developing scripts for artifact triage and timeline reconstruction, identifying indicators of compromise, analyzing digital evidence, maintaining chain of custody, and preparing malware analysis reports.

The ideal candidate has an active clearance (TS/SCI preferred), certifications such as GCIH/ECIH/GCFA/DC3 DFE, a