Digital Forensic Examiner, Mid

Booz Allen Hamilton•Chantilly, VA

11d

About The Position

The Opportunity: You are a digital forensic examiner that knows how to determine when a nefarious actor has breached a system and what tools, tactics, and procedures they used. You understand the ever-evolving environment of cybersecurity and how new malware will affect different systems. You have a keen desire to learn and adapt to dynamic changes. Analytical thinking, attention to detail, and puzzle solving are among the many facets you possess. As a skilled forensic investigator, you can trace the trail of an intruder and know where and when artifacts are left on the system. Now imagine yourself in a place where you are no longer constrained by the "push-button" and "wipe-and-remediate" culture of incident response. A place where you will be afforded the time, resources, and toolsets to dive deep and explore the most advanced malware exemplars you have ever seen. A place where your technical skill is highly regarded, and you are readily given the education and training resources to expand your knowledge exponentially. Most importantly, it is a place where real impact is seen, and many more untold accomplishments are made quietly in the shadows. As a Digital Forensic Examiner on our team, you will no longer have to imagine a place like this – it will become your reality. We have an immediate opportunity for a digital forensics and malware analyst like you. You will be conducting examinations and analysis of emerging threats and previously unknown malicious exploits. You will have access to industry-leading tools and optimized technical environments. All while working alongside colleagues and clients united in their efforts to ensure our nation's security. Are you ready to make a difference and accelerate your technical development? Join us. The world can’t wait.

Requirements

5+ years of experience with systems engineering and computing platforms, including Windows, OSX, and Linux
5+ years of experience with forensic analysis techniques, including traditional disk image analysis, memory analysis, and malware analysis
5+ years of experience with commercial off the shelf forensics products, including OpenText Forensic, SANS SIFT, X-Ways, or Exterro Forensic Toolkit (FTK)
2+ years of experience using open-source memory forensics software, including Volatility or MemProcFS
Experience with Virtual Machines and using VMware to build various test harnesses of mixed virtual machine types, including Windows and Linux variants
Experience analyzing hosts compromised by malicious code and determining the chronology of events leading up to infection
Ability to travel up to 25% of the time
TS/SCI clearance with a polygraph
Bachelor’s degree

Nice To Haves

Experience with computer networking and network traffic analysis
Experience writing scripts in Python
Ability to work in an environment of rapidly changing requirements in support of the client mission
Ability to work individually and collaboratively within a team and proactively engage new tasking
Ability to analyze software deficiencies and give risk assessment of anomalies not resolved
Ability to document or present forensic findings during a formal review before peers or clients
Ability to work with vague requirements, perform technical demonstrations, and investigate innovative technologies
ACE, EnCE, GCFE, CCI, GREM, CHFI, GCFA, or CCFP Certification