Onsite Cyber Forensic II – Incident Response (TS/SCI)

Nightwing; Arlington (VA); On-site; USD 77,000 - 163,000; Full time

Benefits offered by this job

Medical, Vision and Dental insurance

401k plan

Paid time off

Holidays

Job summary

Nightwing is seeking a Cyber Host Forensic Analyst to support a U.S. Government customer. You will perform onsite incident response, collect and analyze digital evidence, and develop detailed forensic write-ups to support investigations and restoration efforts.

Responsibilities include collecting artifacts, triaging devices, correlating findings with network activity, and producing authoritative reports while adhering to chain-of-custody procedures.

Qualifications

• BS in CS/CE/IS or related degree.
• Two years of related work experience may substitute for each year of degree.

Responsibilities

• Acquire/collect computer artifacts from systems during onsite engagements.
• Assess evidentiary value by triaging devices.
• Correlate forensic findings with network events to build an intrusion narrative.
• Document system state information prior to imaging when available.
• Perform incident triage from a forensic perspective to determine scope and impact.
• Track and document forensic analysis from involvement through resolution.
• Collect, process, preserve, analyze and present computer related evidence.
• Coordinate with Government and customer personnel to validate alerts.

Skills

U.S. Citizenship

Active TS/SCI clearance

DHS Suitability

2+ years cyber forensics

Forensic imaging

Cyber investigative reports

Attack analysis

Evidence handling & chain of custody

Team collaboration across locations

Education

BS in CS/CE or related degree

Tools

EnCase

FTK

SIFT

X-Ways

Volatility

Wireshark

Sleuth Kit/Autopsy

Splunk

Snort

EDR tools

Job description

Nightwing is seeking a Cyber Host Forensic Analyst to support a U.S. Government customer. You will perform onsite incident response, collect and analyze digital evidence, and develop detailed forensic write-ups to support investigations and restoration efforts.

Responsibilities include collecting artifacts, triaging devices, correlating findings with network activity, and producing authoritative reports while adhering to chain-of-custody procedures.