Digital Forensics Incident Response Analyst (w/ active TS) - Critical Solutions : Job Details

Digital Forensics Incident Response Analyst (w/ active TS)Location: Washington, DCClearance: Top SecretFull-Time/ OnsiteJOB DESCRIPTIONCritical Solutions has an immediate need for a Digital Forensics Incident Response Analyst to support a federal program in Washington, DC. This exciting role requires an appetite for learning, superior attention to detail, the ability to meet tight deadlines, great organizational skills, and the ability to work in a highly collaborative work environment. The successful hire will possess the ability to complete complex tasks and projects quickly with little to no guidance, react with appropriate urgency to situations that require a quick turnaround and provide the appropriate attention and support to overcome technical obstacles.PRIMARY ROLES AND RESPONSIBILITIES:Utilize state-of-the-art technologies such as Endpoint Detection & Response tools, SIEM-based log analysis, and full packet capture to perform hunt and investigative activity to examine endpoint and network-based activityConduct network forensics, log analysis, triage, limited malware analysis, and host-based forensics in support of incident responseDevelop and build security content, scripts, tools, or methods to enhance the incident investigation processesConduct Incident Response activities and mentor junior staffWork with key stakeholders to implement remediation plans in response to incidentsEffectively investigate and identify root cause findings, then communicate findings to stakeholders, including technical staff and leadershipAuthor Standard Operating Procedures (SOPs) and training documentation when neededGenerate end-of-shift reports for documentation and knowledge transfer to subsequent analysts on dutyLikely expected to be the primary point of contact for an external agencyBASIC QUALIFICATIONS:Bachelor's degree or equivalent experienceMinimum six (6) years of general experience, with at least 4 years experience in an Incident Responder/Handler role (fewer years of experience may be considered in light of additional education, certifications, or other relevant factors)CISSP and CEH or equivalentFull understanding of Tier 1 responsibilities/duties and how the duties feed into Tier 2. The ability to take the lead on incident research when appropriate and be able to mentor junior analystsAdvanced knowledge of TCP/IP protocolsKnowledge of Windows and Linux operating systemsKnowledge of EDR/XDR technologies (CrowdStrike Falcon experience preferred)Knowledge of Intrusion Detection Systems (IDS) and SIEM technologiesDeep packet and log analysisForensic and Malware AnalysisPREFERRED QUALIFICATIONS:Cyber Threat and Intelligence gathering and analysisKnowledge and experience with scripting and programming (Python, PERL, etc.) are also highly preferredLOCATION:Washington, DCOnsiteMust be able and willing to commute to work location.ADDITIONAL INFORMATION:CLEARANCE REQUIREMENT: Must possess an active DoD Top Secret Clearance . In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIREDCRITICAL SOLUTIONS PAY AND BENEFITS :Salary range $106,000 - $137,000. The salary range for this position represents the typical salary range for this job level and does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements.BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more.#J-18808-Ljbffr