Senior Digital Forensics Engineer

Position Summary Current job opportunity for a SME Digital Forensics Examiner / Malware Analyst supporting the

DISA GSM-O

program onsite in Alexandria, VA. An active Top Secret security clearance and demonstrated advanced technical ability in Digital Forensics and Malware Analysis is required. This position provides support to the J6 Pentagon Security Operations Center in conducting Forensic Investigations and Malware Analysis. Activities that this position performs include comprehensive analysis of computer-related evidence and information stored on a device(s) in support of an investigation. This can include performing Malware Analysis if malicious code is suspected to be involved. The investigative tasks will culminate with written reports written in plain business language that detail the findings of analysis. This analysis feeds into implementing defensive measures to prevent future risks to the enterprise. Essential Duties and Responsibilities Conducts examinations and performs comprehensive technical analysis of computer-related evidence and information during the conduct of an investigation. Conducts detailed analysis of potentially infected or confirmed-infected computer systems, including identification of threat vectors, indicators of compromise for future detection, and compromise attribution. Prepares detailed Forensic or Malware Analysis reports based on analysis of devices in question of the investigation. Provides technical support to the Incident Handling lifecycle, including proper documentation, triage, containment, eradication, and analysis of network and host-based security events Minimum Qualifications (Knowledge, Skills, and Abilities) Active Top Secret clearance or higher (program can support up to TS/SCI) Current DoD 8570/8140 IAT-II certification. Current DoD 8570/8140 CSSP IR certification. Bachelor's degree and 12+ years of prior experience in Digital Forensics, Malware analysis, or Incident Response work. Additional work experience or Cyber courses/certifications may be substituted in lieu of degree. Demonstrated advanced understanding of various commercial and open-source analysis tools used for digital forensics and malware analysis. Demonstrated experience with cyber security related technologies (e.g., NIDS, HIDS, IPS, and IDS); Cybersecurity experience (Protect, Detect, Respond and Sustain) within a Computer Incident Response organization. Demonstrated understanding of the life cycle of cybersecurity threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures (TTPs). Strong analytical and troubleshooting skills. Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings. Preferred Qualifications IAT-III certification Demonstrated experience with reverse engineering practices BA/BS degree in Computer Science, Information Assurance, or Information Systems Experience with malware analysis concepts and methods. Familiarity or experience in Intelligence Driven Defense, Cyber Kill Chain methodology, and/or

MITRE ATT&CK

framework. Physical Demands and Work Environment The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions. While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually low to moderate. Northern Technologies Group is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, age, or any other protected status under federal, state, or local law. Travel 10% Shift Normal office hours that align with the core hours of the customer Note The company is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable. This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. This document does not create an employment contract, implied or otherwise, other than an "at will" relationship. The salary range listed represents a good faith estimate and is provided in compliance with applicable pay transparency laws. The final compensation offered will be determined based on a variety of factors, including your skills, experience, qualifications, internal equity, and market conditions.