Senior Cloud Forensics Analyst — Incident Response Expert

Nightwing Intelligence Solutions, LLC; Sterling (VA); On-site; USD 122,000 - 253,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401k plan

Paid time off (PTO)

Job summary

Nightwing Intelligence Solutions, LLC seeks a Cloud Forensics Analyst to support a U.S. Government customer for onsite incident response and rapid evidence collection. The role focuses on acquiring artifacts, triaging devices, and correlating findings to intrusion events.

The ideal candidate has at least 10 years in cyber forensics, strong cloud environment knowledge (SaaS/PaaS/IaaS), and the ability to produce clear investigative reports; TS/SCI clearance is required.

Qualifications

• 10 years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry standard forensic tools.
• Proficiency with analysis and characterization of cyber attacks and with proper evidence handling procedures.

Responsibilities

• Acquire/collect computer artifacts (e.g., malware, user activity, link files) in support of onsite engagements.
• Triage electronic devices and assess evidentiary value; correlate forensic findings to network events.
• Collect and document system state information prior to imaging; perform forensic triage to determine scope, urgency and impact.
• Track and document forensic analysis from initial participation through resolution; prepare write-ups for reports.

Skills

Cyber forensics

Cloud forensics

Incident response

Report writing

SaaS/PaaS/IaaS knowledge

PowerShell/Python scripting

Education

BS Computer Science or Cybersecurity or related degree

HS Diploma + 10 years of host/digital forensics experience

Job description

Nightwing Intelligence Solutions, LLC seeks a Cloud Forensics Analyst to support a U.S. Government customer for onsite incident response and rapid evidence collection. The role focuses on acquiring artifacts, triaging devices, and correlating findings to intrusion events.

The ideal candidate has at least 10 years in cyber forensics, strong cloud environment knowledge (SaaS/PaaS/IaaS), and the ability to produce clear investigative reports; TS/SCI clearance is required.