Cyber Information Systems Analyst - SME - Forensics/CTI

Qbe•Haymarket, VA

2d•Hybrid

About The Position

QBE, LLC is seeking a Cyber Information Systems Analyst - SME - Forensics/CTI to provide expert-level digital forensics and cyber threat intelligence support for NIH/OD-OIT. This position is primarily remote but will require some TDY.

Requirements

Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement.
At least 10 years of relevant experience aligned to the responsibilities of this position.
Expert knowledge of digital forensic methods and evidence handling.
Experience conducting cyber threat intelligence analysis.
Strong understanding of adversary behavior and attack methodologies.
Experience supporting complex cybersecurity investigations.
CompTIA Security+ certification.
GIAC Certified Forensic Examiner (GCFE) certification.
Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position.

Nice To Haves

Experience with federal cyber investigations.
Experience with forensic suites, endpoint telemetry, malware analysis, and threat intelligence platforms.
Experience briefing technical and executive stakeholders.

Responsibilities

Conduct advanced digital forensic examinations of systems, endpoints, and relevant artifacts.
Collect, preserve, analyze, and document digital evidence.
Perform malware, file, log, and system artifact analysis as required.
Develop cyber threat intelligence products supporting operational security decisions.
Analyze adversary tactics, techniques, procedures, infrastructure, and indicators.
Correlate internal security events with external threat intelligence.
Support incident response and threat hunting investigations.
Maintain forensic chain-of-custody and evidence-handling procedures.
Produce detailed technical findings and executive summaries.
Develop indicators and intelligence for use by security monitoring teams.