Senior Digital Forensics & Incident Response Lead - TS/DOE Q

ActioNet; Rockville (MD); On-site; USD 140,000 - 184,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Life and AD&D Insurance

401(k) Savings Plan

Education and Professional Training

Flexible Spending Accounts (FSA)

Employee Referral and MeritRecognition

Employee Assistance and Identity Theft

Paid Holidays

PTO

Disability Insurance

Job summary

ActioNet is seeking a Digital Forensics SME in the United States to provide advanced DFIR expertise across investigations, analysis, and remediation of complex cybersecurity incidents.

The role involves leading SOC response, performing malware analysis, and preserving evidentiary-quality documentation for investigators. A Bachelor's in a related field and 8+ years of DFIR experience are required; TS/DOE Q clearance is anticipated. Salary ranges from $140K to $184K annually.

Qualifications

• Bachelor's degree in Cybersecurity, Digital Forensics, Computer Science, Information Technology, or a related field.
• 8+ years of specialized professional experience responding to information system security incidents with advanced expertise in DFIR.
• Experience performing forensic investigations using enterprise DFIR toolsets.
• Demonstrated experience producing evidentiary-quality forensic documentation and collaborating with security investigators and law enforcement.
• Forensic imaging, volatile data acquisition, and live memory analysis
• Endpoint, network, and digital media forensics
• Malware detonation, static and dynamic/runtime malware analysis, reverse engineering, and code disassembly
• Cyber threat intelligence production and analysis
• Mobile device security investigations
• Email security, phishing analysis, and incident response

Responsibilities

• Perform advanced forensic imaging, volatile data acquisition, live memory analysis, endpoint, network, and digital media forensic investigations using agency-furnished toolsets.
• Identify root causes of malicious software infections, data exfiltration incidents, and network intrusions.
• Lead and coordinate SOC response, remediation efforts, and oversight for complex and high-severity cybersecurity incidents while providing hands-on digital forensic analysis when required.
• Conduct malware detonation, static malware disassembly, dynamic/runtime malware analysis, and reverse engineering.
• Support cyber threat intelligence production, mobile device security investigations, and email/phishing analysis.
• Collect, preserve, and analyze digital evidence in accordance with legal requirements and chain-of-custody procedures, producing evidentiary-quality documentation for security investigators and law enforcement.

Skills

DFIR expertise

Forensic imaging

Memory analysis

Malware analysis

Incident response

Evidence documentation

Investigator collaboration

Cyber threat intel

Mobile device security

Email security

Education

Bachelor's degree in Cybersecurity/ Digital Forensics/ CS/ IT

Tools

DFIR toolsets

Job description

ActioNet is seeking a Digital Forensics SME in the United States to provide advanced DFIR expertise across investigations, analysis, and remediation of complex cybersecurity incidents.

The role involves leading SOC response, performing malware analysis, and preserving evidentiary-quality documentation for investigators. A Bachelor's in a related field and 8+ years of DFIR experience are required; TS/DOE Q clearance is anticipated. Salary ranges from $140K to $184K annually.