Data Exploiter (TS/SCI with Poly Required)

GCI Incorporated•Chantilly, VA

2d•$45 - $75

About The Position

A Data Exploiter performs forensic recovery and analysis of data from phones, computers, and drives, and identifies, preserves, extracts, analyzes, and reports findings from large datasets. The role supports operational and analytical requirements, including reviewing data for vulnerability risks and evaluating information to identify vulnerabilities. The Data Exploiter works with internal and external technical stakeholders to enrich analysis and follows the targeting lifecycle from requirements collection through data analysis, summaries, documentation, report writing, and dissemination of actionable information. The position provides data-exploitation support to the customer, using a variety of tools and methods to extract information from digital data and produce actionable intelligence. It creates products that inform operations, drive targeting and collection, contribute to intelligence products, and meet customer needs. The Data Exploiter collaborates with data scientists, engineers, developers, targeters, and analysts, recommends continuous improvement, and helps sustain and advance organizational capabilities. Professional verbal and written communication with varied stakeholders is expected.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related discipline, or an equivalent combination of education, technical certifications, training, and work or military experience.
At least 3 years of experience in technical analysis, digital forensics, technical targeting, or a similar relevant technical discipline.
Hands-on experience with commercially available evaluation and visualization tools, such as Tableau, Encase, X-Ways, or Wireshark.
Experience creating forensic images and extracting data.
Experience conducting network traffic analysis.
Ability to prepare tailored products that explain findings.
Ability to sift through large amounts of unstructured data for key data points, including metadata and artifacts.
Knowledge of incident response, containment, and mitigation.
Knowledge of common cyber-attack methods.
Experience conducting detailed log analysis and system monitoring to understand system status, detect breaches, and identify anomalies.
Experience performing vulnerability identification, risk analysis, and remediation.
Ability to triage, review, identify, and correlate items of interest from numerous all-source datasets.
Ability to evaluate worldwide security events to assess system impact or risk, including zero-day exploits, hardware failures, and cyber-attacks.
Ability to identify and document information that can fill critical gaps.
Ability to create methodologies or algorithms for data analysis and correlation.
Ability to create entity or object profiles and derived datasets that enable future opportunities and analytical efforts.
Experience with technical collection abilities.
Experience scripting or programming with Python or a similar language.
Experience and comfort working in Linux environments.
Experience analyzing analytic workflows to identify automation and process-optimization opportunities and design solutions.
Must be a U.S. citizen.
Must have an active/current TS/SCI with Polygraph clearance.

Nice To Haves

Working knowledge of Python and experience using LLM-aided coding functions such as Continue, Obsidian, or Claude Code.
Work experience with data analysis and visualization.
Experience with cyber threat intelligence, cyber threat hunting, and producing cyber threat reports.
Background and experience in network forensics (highly preferred).
Ability to read Chinese.
Strong understanding of VPNs, VLANs, and TCP/IP.
Ability to work independently with minimal supervision.
Experience navigating an enterprise security accreditation process.
Experience and understanding of network monitoring tools such as Splunk, WSUS, Snare, Wireshark, and SolarWinds.

Responsibilities

Provide data exploitation support to the customer.
Use a variety of tools and methods to extract information from digital data and provide actionable intelligence.
Create products that inform operations, drive targeting and collection, contribute to intelligence products, and support customer needs.
Collaborate with data scientists, engineers, developers, targeters, and analysts.
Provide recommendations for continuous improvement.
Work with team members to sustain and advance organizational capabilities.
Communicate professionally, verbally and in writing, with a variety of stakeholders.
Perform forensic recovery and analysis of data from phones, computers, and drives.
Identify, preserve, extract, analyze, and report findings from large datasets.
Evaluate information and data for vulnerabilities and risk.
Follow the targeting lifecycle, including requirements collection, data analysis, summaries, documentation, report writing, and dissemination of actionable information.