Data Exploiter (TS/SCI with Poly Required)

GCI Careers•Chantilly, VA

About The Position

GCI is seeking a Data Exploiter to support customer operational and analytical requirements. The role involves forensic recovery and analysis of data from phones, computers, and drives, as well as identifying, preserving, extracting, analyzing, and reporting findings from large datasets. The Data Exploiter assesses vulnerability risks in data, evaluates information to identify vulnerabilities, and works with internal and external technical stakeholders to develop solutions that enrich analysis. The position supports the full targeting life cycle, including requirements collection, data exploitation and analysis, summarization and documentation, report writing, and dissemination of actionable information. The successful candidate uses digital data exploitation tools and methods to create products that inform operations, guide targeting and collection, contribute to intelligence products, and meet customer needs. The role also collaborates with data scientists, engineers, developers, targeters, and analysts, and contributes recommendations and improvements to organizational capabilities.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related discipline, or an equivalent combination of education, technical certifications, training, and work or military experience.
At least 3 years of experience in technical analysis, digital forensics, technical targeting, or a similar relevant technical discipline.
Hands-on experience with commercially available evaluation and visualization tools, such as Tableau, EnCase, X-Ways, or Wireshark.
Experience creating forensic images and extracting data.
Experience conducting network traffic analysis.
Ability to sift through large amounts of unstructured data to identify key data points, including metadata and artifacts.
Demonstrated knowledge of incident response, containment, and mitigation.
Knowledge of common cyberattack methods.
Demonstrated experience conducting detailed log analysis and system monitoring to understand system status, detect breaches, and identify system anomalies.
Demonstrated experience performing vulnerability identification, risk analysis, and remediation.
Ability to triage, review, identify, and correlate items of interest across numerous all-source datasets.
Ability to evaluate worldwide security events to assess system impact or risk, including zero-day exploits, hardware failures, and cyberattacks.
Ability to identify and document information that can fill critical gaps.
Experience with technical collection abilities.
Experience scripting or programming using Python or a similar language.
Experience and comfort working in Linux environments.
U.S. citizenship.
Active/current TS/SCI clearance with Polygraph.

Nice To Haves

Working knowledge of Python and experience using LLM-aided coding functions such as Continue, Obsidian, or Claude Code.
Work experience in data analysis and visualization.
Experience with cyber threat intelligence, cyber threat hunting, and producing cyber threat reports.
Background and experience in network forensics (highly preferred).
Ability to read Chinese.
Strong understanding of VPNs, VLANs, and TCP/IP.
Ability to work independently with minimal supervision.
Experience navigating an enterprise security accreditation process.
Demonstrated experience and understanding of network monitoring tools such as Splunk, WSUS, Snare, Wireshark, and SolarWinds.

Responsibilities

Provide data exploitation support to the customer.
Use tools and methods to extract information from digital data and provide actionable intelligence.
Create products that inform operations, drive targeting and collection, contribute to intelligence products, and support customer needs.
Collaborate with data scientists, engineers, developers, targeters, and analysts.
Provide recommendations for continuous improvement.
Work with team members to sustain and advance organizational capabilities.
Communicate professionally, verbally and in writing, with a variety of stakeholders.
Perform forensic recovery and analysis of data from phones, computers, and drives.
Identify, preserve, extract, analyze, and report findings from large datasets.
Assess vulnerability risks within data and work with technical stakeholders to identify solutions that enrich analysis.
Support the targeting life cycle through requirements collection, data analysis, summarization, documentation, report writing, and actionable information dissemination.
Prepare tailored products that explain findings.
Create methodologies or algorithms for data analysis and correlation.
Create entity or object profiles and derived datasets to support future analytical opportunities.
Analyze workflows to identify automation and process-optimization opportunities and design solutions.