Senior Intrusion Analyst – Forensics & Threat Hunting

019 Parsons Technical Services, Inc.; Maryland; In loco; USD 125.000 - 225.000; Tempo pieno

Descrizione del lavoro

Parsons is seeking an Intrusion Analyst (Mid‑Sr) to perform forensic examinations of intrusions, malicious activity, and cyber incidents while developing actionable analyses to support investigations and operations.

The role emphasizes artifact triage, timeline development, indicators of compromise, and maintaining chain-of-custody in secure laboratory procedures. A Secret clearance is required, with TS/SCI preferred, and salary commensurate with federal solutions roles.

Competenze

• Active Secret clearance; Top Secret clearance with SCI eligibility is preferred.
• Bachelor’s degree in Digital Forensics, Computer Science, Cybersecurity, Information Technology, Criminal Justice, or a related field. Four years of hands‑on digital‑forensics or intrusion‑analysis experience may be substituted for the degree.
• Hands‑on digital‑forensics or intrusion‑analysis experience appropriate to the assigned level.
• Ability to analyze network intrusions, malicious activity, compromised systems, advanced persistent threats, and cyber incidents.
• Experience identifying indicators of compromise, persistence mechanisms, lateral movement, command‑and‑control activity, privilege escalation, credential abuse, and other adversary behaviors.
• Ability to perform forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti‑forensic detection, and user‑activity reconstruction.
• Experience maintaining chain‑of‑custody documentation and handling evidence in accordance with laboratory procedures and security requirements.
• Ability to prepare accurate, complete, and professionally formatted Malware Analysis Reports.
• Strong analytical, technical, investigative, documentation, and written communication skills.
• Ability to work independently and collaborate effectively with investigators, cybersecurity personnel, technical reviewers, government representatives, and multidisciplinary teams.

Mansioni

• Conduct forensic examinations involving network intrusions, malicious activity, compromised systems, advanced persistent threat activity, and cyber incidents.
• Develop or maintain scripts and analytical utilities for artifact triage, artifact extraction, timeline development, and repetitive examination tasks.
• Identify indicators of compromise, persistence mechanisms, lateral-movement activity, command-and-control activity, privilege escalation, credential abuse, and other adversary behaviors.
• Perform evidence identification, forensic image and extraction review, hashing, timestamp analysis, artifact interpretation, anti-forensic detection, and user-activity reconstruction.
• Conduct initial forensic triage to identify key artifacts, determine examination scope, and support case assignment and prioritization.
• Maintain accurate chain-of-custody documentation and ensure evidence is handled, stored, transferred, and disposed of in accordance with laboratory procedures and security requirements.
• Prepare complete, technically accurate, and professionally formatted Malware Analysis Reports.
• Validate malware-analysis tools, document validation results, verify tool outputs, and develop or maintain approved scripts using version-control practices, as assigned.
• Participate in technical peer reviews of forensic reports and incorporate review comments.
• Support expert-witness preparation, affidavits, warrants, mock depositions, moot court sessions, and testimony when designated and qualified.
• Support quality-assurance activities, including SOP implementation, audit readiness, competency testing, and accreditation-related documentation.
• Support metrics collection and analysis involving case volume, backlog, throughput, cycle time, timeliness, workload, rework, error rates, and quality indicators.
• Provide technical input to training, mentorship, process-improvement, and lessons-learned activities.

Conoscenze

Active Secret clearance

Bachelor’s degree

Forensic analysis

8+ years experience

Network intrusion analysis

Malware/forensics tools

Formazione

Bachelor’s degree in Digital Forensics, CS, Cybersecurity, IT, Criminal Justice, or related field

Strumenti

Malware analysis tools

Descrizione del lavoro

Parsons is seeking an Intrusion Analyst (Mid‑Sr) to perform forensic examinations of intrusions, malicious activity, and cyber incidents while developing actionable analyses to support investigations and operations.

The role emphasizes artifact triage, timeline development, indicators of compromise, and maintaining chain-of-custody in secure laboratory procedures. A Secret clearance is required, with TS/SCI preferred, and salary commensurate with federal solutions roles.