Senior Host Forensics Lead – Incident Response

ARGO Cyber Systems, LLC; Arlington (VA); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

401K

Job summary

ARGO Cyber Systems is seeking a Senior Host Forensics Analyst to support a critical federal mission in Arlington, VA. The role requires deep expertise in digital forensics, incident response, and host-based investigations, with a TS/SCI clearance and the ability to operate in government environments.

The analyst will lead onsite forensic operations, ensure evidence integrity, and translate complex findings into clear reports for technical and executive stakeholders.

Qualifications

• U.S. Citizenship is required.
• Active TS/SCI clearance is required.
• Ability to obtain DHS Suitability.
• Bachelor's degree in a technical field or 10+ years of host/digital forensics experience in lieu.
• Minimum 8 years of direct cyber forensics experience.
• Experience leading host-based and/or digital forensic investigations.

Responsibilities

• Lead forensic teams during onsite engagements and coordinate data collection.
• Provide guidance on data collection methods and forensic procedures.
• Plan and direct inventory, examination, and analysis of computers and artifacts.
• Create forensically sound duplicates and images of evidence.
• Mentor junior personnel on data collection and reporting.
• Write comprehensive forensic reports and executive summaries.
• Perform peer reviews of forensic work and reports.

Skills

Host Forensics

Incident Response

Digital Forensics

Technical Writing

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

EnCase

SIFT

X-Ways

Volatility

Wireshark

Sleuth Kit/Autopsy

Magnet AXIOM Cyber

Snort

Splunk

CrowdStrike

Microsoft Defender for Endpoint

Job description

ARGO Cyber Systems is seeking a Senior Host Forensics Analyst to support a critical federal mission in Arlington, VA. The role requires deep expertise in digital forensics, incident response, and host-based investigations, with a TS/SCI clearance and the ability to operate in government environments.

The analyst will lead onsite forensic operations, ensure evidence integrity, and translate complex findings into clear reports for technical and executive stakeholders.