Subject Matter Expert

Forensic Focus; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Forensic Focus seeks an experienced incident response analyst to support a government hunt and IR team in Arlington, VA. You will analyze network traffic, logs, and configurations across edge devices to detect anomalies and reconstruct attacker activity.

The role requires coordinating investigations and delivering actionable containment guidance to government stakeholders. The ideal candidate has deep expertise in edge-device technologies and network forensics, with a track record of defending

Qualifications

• Experience in network forensics and traffic capture analysis.
• Ability to correlate device logs with network data to detect intrusions.
• Familiarity with edge device platforms and security best practices.

Responsibilities

• Analyze network traffic, device logs, and configurations to detect anomalies.
• Reconstruct attacker activity and propose containment and remediation actions.
• Coordinate onsite investigations and communicate findings to government stakeholders.

Skills

Network forensics

PCAP analysis

Flow analysis

Threat actor TTPs

Defense-in-depth

Tools

Cisco

Ivanti

Palo Alto

Ciena

Juniper

Job description

The Role

This position supports a government hunt and incident response team, investigating cyber intrusions affecting critical infrastructure. Duties include analyzing network traffic, device logs, and configurations to detect anomalies, reconstruct attacker activity, and recommend containment and remediation actions across edge device platforms.

Skills & Experience

Requires deep expertise in edge device technologies such as Cisco, Ivanti, Palo Alto, Ciena, and Juniper, plus strong knowledge of network forensics, PCAP and flow analysis, threat actor TTPs, and defense-in-depth security principles for incident investigations.

Who It Suits

Ideal for experienced incident response and network forensics professionals comfortable serving as a technical authority, coordinating onsite investigations, and communicating findings directly to government stakeholders in high-stakes environments.