Digital Forensics and Incident Response (DFIR) Analyst

Peraton•,

1d•$80,000 - $128,000

About The Position

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to support its Corporate Cybersecurity Operations Center (CSOC). The analyst will conduct large-scale cyber data analytics, lead the use of detection technologies, perform advanced threat hunting, and technically review team members’ work. The role works closely with the CSOC Manager to deliver detailed security event analysis, support business units, and foster collaboration across IT teams. The position supports protection of organizational IT assets, implementation of DFIR strategies, incident response, vulnerability and cyber risk management, evaluation of technology solutions, and participation in on-call rotations for 24/7 cybersecurity operations.

Requirements

Bachelor’s degree, or four additional years of experience in a cybersecurity-related field in lieu of a degree, or equivalent Security Operations work experience.
Experience with Splunk Enterprise Security or Splunk Certified Power User.
DFIR experience using Endpoint Detection and Response (EDR) technologies.
Experience performing forensic analysis on disk, memory, network, and cloud artifacts.
Proficiency with common scripting and programming languages.
Experience with Risk Management Frameworks.
In-depth understanding of common security controls for Windows, Linux, and network equipment.
Strong attention to detail, time-management skills, and a professional demeanor.
U.S. citizenship.

Nice To Haves

Advanced Splunk certification.

Responsibilities

Protect the organization's IT assets as a member of the Cybersecurity Operations Center (CSOC).
Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response efforts.
Prepare CSOC reports documenting security incidents from discovery through remediation.
Support vulnerability and cyber risk management by continuously monitoring threats and exposures.
Test and evaluate technology solutions in preparation for small- and large-scale deployments.
Participate in periodic on-call rotations supporting 24/7 cybersecurity operations.
Conduct large-scale cyber data analytics and advanced threat hunting, lead the use of detection technologies, and provide technical review of team member work.

Benefits

Medical benefits
Dental insurance
Vision insurance
Life insurance
Health savings account
Short- and long-term disability
Employee assistance program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company-paid holidays
Potential eligibility for overtime, shift differential, and a discretionary bonus