Senior Digital Forensics & IR Analyst

ManTech; Herndon (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

MANTECH in Herndon, VA seeks a Digital Forensics Analyst to lead incident detection, containment, and forensic investigations across enterprise environments. You will secure volatile evidence, reconstruct attack timelines, and translate indicators into actionable remediation steps for customers.

The role requires DoD 8570 IAT II certification, 7+ years in cybersecurity, and hands-on experience with forensic tools and EDR/XDR platforms. A TS/SCI clearance is preferred.

Qualifications

• 7+ years of experience in Cybersecurity.
• 2+ years of experience in host/network forensics, threat hunting, or Tier 3 cybersecurity incident response.
• 2+ years of experience with forensic suites (e.g., Magnet AXIOM, X-Ways, FTK, EnCase, Volatility, or KAPE) and EDR/XDR platforms.
• 2+ years of experience analyzing host artifacts (e.g., MFT, Registry, Event Logs), volatile memory, and PCAPs to reconstruct cyber attacks.
• Active DoD 8570 IAT Level II (or higher) certification is required.

Responsibilities

• Perform live memory analysis, disk imaging, and forensic data acquisition across enterprise and cloud endpoints with strict chain-of-custody.
• Analyze endpoint, cloud, and system log data to map threat actor movement, build incident timelines, and isolate IOCs.
• Coordinate immediate threat containment and eradication strategies with the customer and affected end users.
• Conduct proactive and reactive threat hunting to uncover APTs and persistence mechanisms.
• Prepare detailed forensic reports and root-cause analyses to justify remediation and network modifications.
• Collaborate with cyber defense teams to deploy tactical updates and enterprise countermeasures post-incident.
• Identify gaps in logging, visibility, and architectures, providing actionable recommendations to mature monitoring.
• Advise customer on technical impacts, zero-day vulnerabilities, and threat trends.

Skills

Cybersecurity

Threat hunting

Forensics

EDR/XDR

Memory analysis

Network forensics

DoD 8570 IAT II cert

Education

Bachelor's degree in Digital Forensics or related

Tools

Magnet AXIOM

X-Ways

FTK

EnCase

Volatility

KAPE

Job description

MANTECH in Herndon, VA seeks a Digital Forensics Analyst to lead incident detection, containment, and forensic investigations across enterprise environments. You will secure volatile evidence, reconstruct attack timelines, and translate indicators into actionable remediation steps for customers.

The role requires DoD 8570 IAT II certification, 7+ years in cybersecurity, and hands-on experience with forensic tools and EDR/XDR platforms. A TS/SCI clearance is preferred.