Senior Cloud Forensics Analyst – Incident Response

Nightwing Intelligence Solutions, LLC; Sterling (VA); On-site; USD 99,000 - 206,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401k plan

Paid time off

Job summary

Nightwing Intelligence Solutions, LLC in Arlington, VA seeks a Cloud Forensics Analyst to support on-site incident response for government clients. You will investigate breaches, characterize severity, and help restore services using host and network-based analysis.

Requirements include TS/SCI clearance, 8+ years in network investigations, knowledge of CND policies, TCP/IP, MITRE ATT&CK, and SIEM tools like Splunk.

Qualifications

• 8+ years of directly relevant experience in network investigations
• In depth knowledge of CND policies, procedures and regulations
• In depth knowledge of TCP/IP protocols
• Knowledge of MITRE ATT&CK framework
• Experience with Splunk or other SIEMs
• Ability to analyze and characterize network traffic to identify threats

Responsibilities

• Assists the Government lead in coordinating teams in preliminary incident response investigations
• Assists the Government lead with interfacing with the customer while on site- Determines appropriate courses of actions in response to identified and analyses anomalous network activity
• Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
• Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies
• Collects network intrusion artifacts (e.g., PCAP, domains, URI’s, certificates, etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents
• Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information
• Collects network device integrity data and analyze for signs of tampering or compromise
• Assists with real-time CND incident handling (i.e., forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation) tasks to support onsite engagements

Skills

Network investigations

CND policies & regulations

TCP/IP protocols

MITRE ATT&CK

Splunk/SIEM

Network analysis

Team collaboration

On-site coordination

Education

BS in Computer Science / Cyber Security / Engineering

DoD 8140 IAT Level II / GCIH / GCIA

Tools

Splunk

Wireshark

PCAP analysis

Job description

Nightwing Intelligence Solutions, LLC in Arlington, VA seeks a Cloud Forensics Analyst to support on-site incident response for government clients. You will investigate breaches, characterize severity, and help restore services using host and network-based analysis.

Requirements include TS/SCI clearance, 8+ years in network investigations, knowledge of CND policies, TCP/IP, MITRE ATT&CK, and SIEM tools like Splunk.