Lead Cyber Defense Forensics Analyst

Description

Title:Lead Cyber Defense Forensics Analyst

Location: Washington D.C.

Terms: Full-time

Clearance: Qualified candidates must be US citizens and have the ability to obtain a minimum of a Public Trust clearance

Travel: 0%

Position Description

The Lead Cyber Defense Forensics Analyst supports leading digital forensic investigations and incident response efforts across enterprise IT environment. This role is responsible for overseeing the collection preservation analysis and reporting of digital evidence related to cyber incidents insider threats and compliance requirements. The lead analyst provides technical expertise mentors team members and ensures forensic capabilities meet federal standards and best practices.

Responsibilities:

• Lead and coordinate digital forensic investigations involving systems networks endpoints and cloud environments.
• Oversee the collection preservation and analysis of electronic evidence in support of incident response legal HR and compliance activities.
• Perform in-depth forensic analysis of compromised systems malware and artifacts to determine root cause impact and remediation strategies.
• Develop and maintain forensic methodologies standard operating procedures and chain-of-custody documentation in accordance with federal guidelines.
• Collaborate with SOC threat intelligence and incident response teams to support rapid detection containment and recovery from cyber incidents.
• Prepare detailed forensic reports executive summaries and presentations for technical and non-technical audiences including leadership and external stakeholders.
• Support e-discovery litigation and regulatory investigations as required.
• Mentor and train junior analysts and contribute to the continuous improvement of forensic and incident response capabilities.
• Stay current with emerging threats forensic tools and investigative techniques relevant to the federal sector.

Requirements

• Bachelors degree in Information Security Computer Science Digital Forensics or related field.
• 5 years of experience in digital forensics incident response or cybersecurity operations.
• Advanced expertise with forensic tools and platforms (e.g. EnCase FTK X-Ways Volatility Cellebrite).
• Strong knowledge of evidence handling chain-of-custody and federal investigative standards.
• Experience with malware analysis memory forensics and cloud forensics.
• Excellent analytical communication and report writing skills.
• Proven leadership and mentoring abilities.
• Ability to pass an MBI (Minimum Background Investigation) clearance.
• U.S. citizenship is required.

Desired

• Professional certifications such as GCFA GCFE CCE EnCE or CISSP.
• Experience supporting federal or public sector environments.
• Familiarity with e-discovery processes and legal/regulatory requirements.
• Exposure to cloud and hybrid infrastructure forensics.

#LI #DICE