Cyber Investigations Analyst - Mid

Dunhill Government Solutions is hiring a Cyber Investigations Analyst to support the internal investigations unit of a federal agency, securing the IT networks used to detect and investigate cybercrime and internal policy violations. The role spans security engineering for the unit's forensic network, ISSO-adjacent support for its tool suite and SIEM, and hands-on digital forensics.

Responsibilities:

• Advise on and help maintain and engineer the forensic network infrastructure across its lifecycle; manage priorities and service requests through the ticketing and change-request process
• Administer, configure, tune and secure the unit's tool suite, devices and sensors; review network security architecture and recommend improvements to leadership
• Maintain SIEM infrastructure collecting IDS, firewall, proxy, DLP, antivirus and vulnerability-scanner data
• Monitor data-loss-prevention (DLP) solutions in near real time and recommend spillage response and sanitization per NIST 800-88
• Build and deploy custom forensic platforms for triage, imaging and advanced analysis; perform endpoint (Windows, Linux, Mac, cloud) and network forensic analysis
• Support formal digital forensic investigations and document findings in investigation reports; process email-misuse cases in the case management system
• Serve as subject-matter expert on evidence preservation and chain of custody, and on advanced extraction techniques (encryption bypass, mobile-device unlocking, board-level repair)
• Manage cyber investigations from creation to closure, escalate cases per policy, and author and update standard operating procedures

Required qualifications:

• Bachelor's degree in Computer Science, Engineering or another technical discipline, or equivalent relevant experience
• 5+ years in system administration, database administration, network engineering, software engineering or software development with a concentration in cyber security
• 3+ years of professional digital media forensic analysis, static malware disassembly/analysis and/or runtime malware analysis
• Ability to work on site in Ashburn, VA (no telework), core hours 8:30 AM - 5:00 PM, with on-call support

Preferred: CISSP or CompTIA Security+; GCFE, GCFA or EnCE.

Compensation: $98,000 - $118,000 per year

US Citizenship (no dual citizenship) and the ability to pass a federal background investigation in order to be granted access to sensitive information.

#cjpost