Cyber Defense Forensics Lead

SOSi • Ashburn, VA

18h • Hybrid

About The Position

This position is contingent upon contract award SOSi is seeking highly qualified senior professionals to support a DHS enterprise cybersecurity program providing 24/7 Security Operations Center (SOC) services. These roles deliver leadership, operational oversight, and technical expertise across cyber defense, incident response, intelligence, engineering, and modernization activities. Job Description Leads digital forensics and insider-threat investigations; ensures evidence handling, chain-of-custody, and high-confidence analysis that supports rapid incident containment and remediation.

Requirements

• A minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, forensics, cyber threats and information security.
• A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host-based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint threat detection tools, security operations ticket management.
• The ability to create insider threat focused dashboards, reports and workflow diagrams.
• Experience collecting data and reporting results; handling and escalating security issues or emergency situations appropriately; providing incident response capabilities to isolate and mitigate threats to maintain confidentiality, integrity, and availability for protected data.
• Experience with ad hoc training to junior members in a collaborative environment.
• CISSP.
• TS, SCI-eligible.

Responsibilities

• Conduct host- and network-based forensics, malware triage, and insider-threat investigations.
• Develop dashboards, reports, and workflow diagrams for forensics/IR processes; mentor junior analysts.
• Coordinate with DHS and law-enforcement investigative entities; manage escalations and reporting.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed