Cyber Digital Forensics Analyst

Description:
On-site in Orange County, CA

Our client seeks a Cyber Digital Forensics Analyst to support a 24x7x365 Security Operations Center. The analyst will conduct digital media forensics, contribute to incident response, maintain and enhance the SOC forensics program, and produce clear technical reporting. The role includes shift rotations, weekend coverage, and some holidays. The initial period of performance is roughly six months with training on a day shift. Candidates must meet background clearance requirements and hold a relevant forensics certification.

This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $33.00 to $38.00/hr. w2

Responsibilities:

• Act as the primary liaison for forensics analysis tasks including analysis of digital media devices to identify, reverse engineer, and de-obfuscate content related to security incidents.
• Maintain and enhance the Digital Forensics Program for the SOC, including process improvements and team upskilling through drafted technical reports.
• Support SOC operational duties related to security incidents for networks and systems.
• Augment cyber threat intelligence development and reporting generated from forensics investigations.
• Identify, develop, and implement automation tasks surrounding the SOC Forensics Program.
• Research, evaluate, and recommend new security tools, techniques, and technologies aligned with IT security strategy.
• Use COTS/GOTS and custom tools, processes, and procedures to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions.
• Perform analyses to validate established security requirements and recommend additional security requirements and safeguards.
• Occasionally brief senior staff on forensics investigation results.

Experience Requirements:

• Programming experience with Python, C++, or JavaScript.
• Evidence acquisition and Chain of Custody procedures.
• Host, cloud, identity, and network forensics experience.
• Packet capture, volatile memory, suspicious script analysis, and forensics experience.
• Familiarity with physical device imaging software.
• Familiarity with digital forensics software.
• Knowledge of IDS/IPS, firewalls, and anti-virus/anti-malware technologies.
• Incident response experience.
• Experience analyzing security alerts via Microsoft Sentinel SIEM or similar SIEM tools.
• Malware analysis technical report writing.
• Adherence to SOC standard operating procedures.
• Ability to handle multiple tasks and strong interpersonal skills.
• Willingness to work shift rotations, weekends, and some holidays in a 24x7x365 SOC.
• Ability to obtain required background clearances including County Live Scan, Child Support Services (CSS), and County Probation (PROB).

Education Requirements:

• Bachelor's degree in a related field preferred. Two years of related experience highly preferred. Additional experience may substitute for education.
• Certification required: Magnet Certified Forensics Examiner (MCFE), EnCase Certified Examiner (EnCE), Digital Forensics Essentials (DFE), GIAC Certified Forensics Analyst (GCFA), or similar industry certification.