Network Forensics SME — Remote/Onsite, TS/SCI

ARGO Cyber Systems; Arlington (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Argo Cyber Systems seeks a Network Forensics Analyst to support the DHS Hunt and Incident Response Team, delivering edge-device focused incident response and network telemetry analysis for government and critical infrastructure environments.

You will lead investigations, validate evidence, recommend mitigations, and collaborate with on-site and remote teams while applying defense-in-depth principles across Cisco, Ivanti, Palo Alto, Ciena and Juniper platforms.

Qualifications

• U.S. citizenship and active TS/SCI clearance required.
• Minimum 8+ years of directly relevant experience in cyber security.
• Experience with incident response and network forensics on enterprise edge devices.
• Familiarity with Cisco, Ivanti, Palo Alto, Ciena, Juniper platforms.
• Ability to communicate technical findings to leadership and technical teams.

Responsibilities

• Serve as hunt and incident response SME for network-centric incidents.
• Coordinate and lead investigations onsite and remotely with government teams.
• Analyze network traffic, PCAPs, and device logs to identify threats.
• Develop mitigation and remediation plans with containment strategies.
• Provide written reports and executive summaries of findings.
• Mentor junior staff and contribute to playbooks and procedures.
• Ensure evidence integrity per SOPs and national standards.

Skills

U.S. Citizenship

Active TS/SCI clearance

8+ years relevant experience

Edge device experience

Threat hunting / incident response

Network forensics

Strong communication

Distributed team collaboration

Network telemetry analysis

Education

BS in Computer Science

BS in Cyber Security

BS in Computer Engineering

HS Diploma with 10+ years experience

Job description

Argo Cyber Systems seeks a Network Forensics Analyst to support the DHS Hunt and Incident Response Team, delivering edge-device focused incident response and network telemetry analysis for government and critical infrastructure environments.

You will lead investigations, validate evidence, recommend mitigations, and collaborate with on-site and remote teams while applying defense-in-depth principles across Cisco, Ivanti, Palo Alto, Ciena and Juniper platforms.