Senior Forensics Engineer - TS/SCI DFIR Expert

B4Corp; Herndon (VA); On-site; USD 212,000 - 259,000; Full time

Benefits offered by this job

401k with employer match

Medical, dental, vision insurance

Phantom stock program

PTO 7 weeks per year

Referral bonus program

Job summary

B4Corp in Herndon, VA is seeking a Forensics Engineer at Level 2 – Expert to lead detection, containment, and forensic investigations of complex cybersecurity incidents. This role requires TS/SCI with polygraph, and offers core hours 9am-4pm, Monday–Friday, in a high-security environment.

You will perform live memory analysis, disk imaging, analyze logs, map attacker movement, and prepare detailed reports. Strong communication skills and DoD 8570 IAT Level II or higher are essential; SANS/CYSA

Qualifications

• 11+ years of cyber security experience with government programs.
• 2+ years in host/network forensics, threat hunting, or Tier 3 incident response.
• DoD 8570 IAT Level II compliant (or higher).
• 2+ hands-on with forensic suites and EDR/XDR platforms.
• BS in digital forensics, cybersecurity, or related IT discipline; SANS or CYSA certs.

Responsibilities

• Performs live memory analysis, disk imaging, and forensic data acquisition with strict chain-of-custody.
• Analyzes endpoint, cloud, and system logs to map threat actor movement and IOCs.
• Communicates with customers to coordinate immediate threat containment and eradication.
• Conducts proactive and reactive threat hunting across the network for APTs.
• Prepares detailed technical forensics reports and root-cause analyses.
• Advises customers on technical impacts and zero-day vulnerabilities.
• Collaborates with cyber defense teams to deploy countermeasures post-incident.
• Identifies gaps in logging architectures and provides engineering recommendations.

Skills

Written communication

Verbal communication

Threat hunting

Incident response

Forensics analysis

Education

Bachelor's degree in digital forensics or cybersecurity

Tools

Axiom

X-Ways

FTK

EnCase

Volatility

KAPE

EDR/XDR

Job description

B4Corp in Herndon, VA is seeking a Forensics Engineer at Level 2 – Expert to lead detection, containment, and forensic investigations of complex cybersecurity incidents. This role requires TS/SCI with polygraph, and offers core hours 9am-4pm, Monday–Friday, in a high-security environment.

You will perform live memory analysis, disk imaging, analyze logs, map attacker movement, and prepare detailed reports. Strong communication skills and DoD 8570 IAT Level II or higher are essential; SANS/CYSA