Cyber Defense Forensics Lead

SOSi • Ashburn, VA

1d • Hybrid

About The Position

This position is contingent upon contract award SOSi is seeking highly qualified senior professionals to support a DHS enterprise cybersecurity program providing 24/7 Security Operations Center (SOC) services. These roles deliver leadership, operational oversight, and technical expertise across cyber defense, incident response, intelligence, engineering, and modernization activities. Job Description Leads digital forensics and insider-threat investigations; ensures evidence handling, chain-of-custody, and high-confidence analysis that supports rapid incident containment and remediation.

Requirements

• 7+ years overall and 5+ years hands-on, including the last 2 years performing host- and network-based monitoring.
• Insider-threat monitoring, host-based forensic suites, IDS/IPS, SIEM, EDR, and ticket/case management platforms.
• TS, SCI-eligible.

Nice To Haves

• GCFA, GCIH, or equivalent preferred.

Responsibilities

• Conduct host- and network-based forensics, malware triage, and insider-threat investigations.
• Develop dashboards, reports, and workflow diagrams for forensics/IR processes; mentor junior analysts.
• Coordinate with DHS and law-enforcement investigative entities; manage escalations and reporting.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed