Network DFIR Analyst III – Incident Response

Solutions³ LLC; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Solutions³ LLC is seeking a Network Based Systems Analyst III to support federal customers in incident response, digital forensics, and proactive cyber hunting. The role requires 5+ years in network investigations, a US citizenship, and an active TS/SCI clearance.

You will work with government teams on-site to coordinate responses, analyze traffic, and recommend secure network configurations. Responsibilities include coordinating preliminary investigations, interfacing with customers, collecting

Qualifications

• 5+ years of direct experience in network investigations.
• US Citizenship required.
• Active TS/SCI clearance required.
• Ability to coordinate incident response teams and interface with government customers on-site.

Responsibilities

• Assist Government lead in coordinating incident response investigations.
• Assist the Government lead with interfacing with the customer on site.
• Determine appropriate actions in response to identified anomalies in network activity.
• Assess network topology and configurations to identify security concerns and provide best-practice recommendations.
• Collect network intrusion artifacts (PCAP, domains, URI’s, certificates) for mitigation of potential incidents.
• Analyze identified malicious activity to determine exploitation methods and impact.
• Collect device integrity data and analyze signs of tampering or compromise.
• Support on-site CND incident handling activities (forensic collections, intrusion correlation, threat analysis, remediation).

Skills

CND policies

TCP/IP protocols

MITRE ATT&CK

Incident response

Network forensics

Team collaboration

Education

BS in CS / Cyber Security / CE

HS Diploma + 7+ years network investigations

Tools

Wireshark

Splunk

Job description

Solutions³ LLC is seeking a Network Based Systems Analyst III to support federal customers in incident response, digital forensics, and proactive cyber hunting. The role requires 5+ years in network investigations, a US citizenship, and an active TS/SCI clearance.

You will work with government teams on-site to coordinate responses, analyze traffic, and recommend secure network configurations. Responsibilities include coordinating preliminary investigations, interfacing with customers, collecting