Senior Incident Response & Edge-Device Forensics Expert

Forensic Focus; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Forensic Focus seeks an experienced incident response analyst to support a government hunt and IR team in Arlington, VA. You will analyze network traffic, logs, and configurations across edge devices to detect anomalies and reconstruct attacker activity.

The role requires coordinating investigations and delivering actionable containment guidance to government stakeholders. The ideal candidate has deep expertise in edge-device technologies and network forensics, with a track record of defending

Qualifications

• Experience in network forensics and traffic capture analysis.
• Ability to correlate device logs with network data to detect intrusions.
• Familiarity with edge device platforms and security best practices.

Responsibilities

• Analyze network traffic, device logs, and configurations to detect anomalies.
• Reconstruct attacker activity and propose containment and remediation actions.
• Coordinate onsite investigations and communicate findings to government stakeholders.

Skills

Network forensics

PCAP analysis

Flow analysis

Threat actor TTPs

Defense-in-depth

Tools

Cisco

Ivanti

Palo Alto

Ciena

Juniper

Job description

Forensic Focus seeks an experienced incident response analyst to support a government hunt and IR team in Arlington, VA. You will analyze network traffic, logs, and configurations across edge devices to detect anomalies and reconstruct attacker activity.

The role requires coordinating investigations and delivering actionable containment guidance to government stakeholders. The ideal candidate has deep expertise in edge-device technologies and network forensics, with a track record of defending