Network Forensics & Incident Response Analyst

BCMC; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401k with company match

FSA for health care and dependents

Three weeks of annual leave

Job summary

BCMC is seeking Network Forensics Cybersecurity Analysts to support the DHS Hunt and Incident Response Team. The role focuses on on-site investigations, rapid incident response, and collaboration with government teams to characterize breaches and develop remediation plans.

Ideal candidates have 2+ years in network investigations, strong CND knowledge, experience with TCP/IP and SIEM tools like Splunk, and the ability to operate across multiple locations with DHS requirements.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance required.
• Experience in network investigations and CND policies.

Responsibilities

• Assist Government lead in coordinating teams during preliminary incident response investigations.
• Interface with the customer on site as needed.
• Determine appropriate actions in response to identified anomalous network activity.
• Assess network topology and device configurations for security concerns and best practices.
• Assist in writing and publishing CND guidance and incident findings reports.

Skills

U.S. Citizenship

Active TS/SCI clearance

2+ years network investigations

CND policies and regulations

TCP/IP protocols

ICMP/HTTP/DNS/SSH/SMTP/SMB/NFS

WiFi networking

Network topologies (DMZ/WAN)

Splunk/SIEM

MITRE ATT&CK

Defense-in-depth

Network traffic analysis

Network forensics (PCAP)

Collaborative work across locations

Education

BS Computer Science or Cyber Security or Computer Engineering

HS Diploma + 4-6 years network investigations experience

Tools

Splunk

Wireshark

Job description

BCMC is seeking Network Forensics Cybersecurity Analysts to support the DHS Hunt and Incident Response Team. The role focuses on on-site investigations, rapid incident response, and collaboration with government teams to characterize breaches and develop remediation plans.

Ideal candidates have 2+ years in network investigations, strong CND knowledge, experience with TCP/IP and SIEM tools like Splunk, and the ability to operate across multiple locations with DHS requirements.