Cyber Defense Forensics Analyst

Booz Allen Hamilton•Alexandria, VA

1d•$62,000 - $141,000•Remote

About The Position

As a cyber professional, you know that understanding adversary tactics, techniques, and procedures is vital to producing the intel that enables the success of the Army National Guard. At Booz Allen, you can apply your skills and knowledge to inform strategies and help mitigate the most pressing vulnerabilities. Here, you aren’t just deciphering reports. You’re telling the story to play a part in informing the Army National Guard's most far-reaching cyber security decisions. As a cyber threat specialist on our team, you’ll be trusted to help customers solve problems using the latest software. You’ll work with multiple stakeholders to evaluate risk and make meaningful recommendations, and you’ll help monitor security environments and identify security gaps through the eyes of an adversary. In this role, you’ll impact the Army National Guard enterprise network by identifying and assessing digital evidence in support of network vulnerability mitigation, performing forensic imaging and recovery of data from compromised systems, and gathering evidence against network and host-based intrusions to determine causes and scope of cybersecurity events. Booz Allen is committed to creating an environment where you can grow your cyber career through mentoring, the opportunity to leverage new resources, and the ability to gain in-demand certifications to sharpen your skill set. With opportunities supporting both the private and public sectors across multiple geographies, your career is only limited by your own appetite for exploration. Work with us to secure our systems, networks, and crucial infrastructures. Join us. The world can’t wait.

Requirements

2+ years of experience managing evidence collection, preservation, chain of custody, and conducting digital forensic investigations
2+ years of experience in the development of standard operating procedures and playbooks for conducting digital forensic investigations
Experience performing forensic imaging and analysis of physical and virtual devices
Experience coordinating with legal, privacy, and incident response teams during an investigation
TS/SCI clearance
Bachelor's degree
DoD 8140 compliant security Certification such as Security +, CASP+, CISSP, CySA, or GIAC Certification

Nice To Haves

Ability to collaborate and work effectively with cross-functional teams
Ability to work both independently and collaboratively
Ability to multi-task and prioritize responsibilities
Ability to manage multiple short and long-term projects effectively
Possession of excellent written and verbal communication skills

Responsibilities

Identifying and assessing digital evidence in support of network vulnerability mitigation
Performing forensic imaging and recovery of data from compromised systems
Gathering evidence against network and host-based intrusions to determine causes and scope of cybersecurity events
Evaluating risk and making meaningful recommendations
Monitoring security environments and identifying security gaps through the eyes of an adversary