Senior TS/SCI Cloud Forensics & Incident Response Analyst

Comunidade Metodista; Arlington (VA); Presencial; USD 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary

Employer-paid health, dental, vision

Life and disability coverage

401k with company match

Resumo da oferta

BCMC is seeking Forensic Cyber Network Defense Analysts (CNDA) in Arlington, VA, to perform advanced DFIR in cloud, on-prem, and hybrid environments. You will analyze cloud platform activity, investigate incidents, and build detection automation using PowerShell, Python, and Bash.

Strong identity security expertise and active security clearances are required. Responsibilities include coordinating with internal teams and external stakeholders, producing incident reports, and developing playbooks

Qualificações

• U.S. Citizenship required.
• Active TS/SCI clearance required or active eligibility.

Responsabilidades

• Conduct forensic acquisition and analysis from on-premises and cloud platforms (Entra ID/Azure AD, M365, AWS, GCP, SaaS) to identify compromise activity, persistence mechanisms, and data exfiltration.
• Investigate and respond to incidents and attacks targeting cloud and hybrid identity.
• Correlate cloud control-plane events and network telemetry to reconstruct attacker timelines, validate IOCs, and identify post-compromise privilege escalation.
• Develop and operationalize detection logic and automation using cloud-native tools and scripting, integrating threat intelligence feeds.
• Produce technical reports, incident documentation, and containment recommendations; support incident response playbooks for cloud/hybrid environments.
• Support cloud development and automation projects to enhance threat emulation, investigative, and hunting capabilities.
• Coordinate with internal teams, government staff, and external stakeholders to validate alerts and investigate findings.

Conhecimentos

U.S. Citizenship

TS/SCI clearance

DHS EOD Suitability

8+ years cyber forensics

Cloud security (SaaS/PaaS/IaaS)

Hybrid identity security

Incident response reporting

Formação académica

BS in Computer Science, Cybersecurity, Computer Engineering, or related field

HS Diploma with 10+ years relevant experience

Ferramentas

Terraform

Kubernetes

CloudFormation

Azure Resource Manager

Docker

PowerShell

Python

Bash

JavaScript

Descrição da oferta de emprego

BCMC is seeking Forensic Cyber Network Defense Analysts (CNDA) in Arlington, VA, to perform advanced DFIR in cloud, on-prem, and hybrid environments. You will analyze cloud platform activity, investigate incidents, and build detection automation using PowerShell, Python, and Bash.

Strong identity security expertise and active security clearances are required. Responsibilities include coordinating with internal teams and external stakeholders, producing incident reports, and developing playbooks