Job Description

POSITION: Cyber Forensics Analysts-VA

Cyber Technology Services, Inc. provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. CyTech provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. CyTech is seeking Cyber Forensics Analysts to support this critical customer mission.

RESPONSIBILITIES: Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack - Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations - Collects network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and uses discovered data to enable mitigation of potential incidents - Collects network device integrity data and analyze for signs of tampering or compromise - Analyzes identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on system and information - Tracking and documenting on-site incident response activities and providing updates to leadership through executive summaries and in-depth technical reports - Planning, coordinating and directing the inventory, examination and comprehensive technical analysis of computer related evidence - Serving as technical forensics liaison to stakeholders and explaining investigation details.

REQUIRED SKILLS: U.S. Citizenship - Must have an active TS/SCI clearance - Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability - 8+ years of directly relevant experience in network investigations - In depth knowledge of CND policies, procedures and regulations - In depth knowledge of TCP/IP protocols - In depth knowledge of standard protocols - ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, etc. - In depth knowledge and experience of Wifi networking - In depth knowledge and experience of network topologies - DMZ's, WAN's, etc. - Substantial knowledge of Splunk (or other SIEM's) - Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK) - Knowledge of Computer Network Defense policies, procedures, and regulations - Knowledge of defense-indepth principles and general attack stages with respect to network security architecture. Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources - Ability to identify and analyze anomalies in network traffic using metadata - Experience with reconstructing a malicious attack or activity based on network traffic Experience examining network topologies to understand data flows through the network - Must be able to work collaboratively across physical locations.

DESIRED SKILLS: Experience and proficiency with the following tools and techniques: • EnCase, FTK, SIFT, X-Ways, Volatility, WireShark, Sleuth Kit/Autopsy, and Snort • EDR Tools: Crowdstrike, Carbon Black, Etc • Carving and extracting information from PCAP data • Non-traditional network traffic: Command and Control • Designing cyber security systems and environments in a Linux environment • Virtualized environments • Conducting all-source research.

REQUIRED EDUCATION: 8+ years of experience and BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma and 10+ years of host or digital forensics or network forensic experience Desired Certifications: - GCFA, GCFE, EnCE, CCE, CFCE, CEH, CCNA, CCSP, CCIE, OSCP, GNFA.

CYTECH SERVICES IS AN EQUAL OPPORTUNITY/AFFIRMATIVE ACTION EMPLOYER. ALL QUALIFIED APPLICANTS WILL RECEIVE CONSIDERATION FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, GENDER IDENTITY, NATIONAL ORIGIN, DISABILITY OR VETERAN STATUS, AGE OR ANY OTHER FEDERALLY PROTECTED CLASS.

Please contact Anthony.Claiborne@cytechservices.com

JOB POSTED BY APPLICANTPRO

Company Description

CyTech Services is a unique services and solutions, executed with professional subject matter experts to both the Federal and Commercial sectors.