Host Forensics Analyst

Job Title: Host Forensics Analyst
Opportunity Type: Evergreen
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Clearance Required
Company: Quantum Science Solutions (QSS)
Compensation: Open Rate
________________________________________
Position Overview
Quantum Science Solutions (QSS) supports mission-critical federal cybersecurity programs by providing advanced technical assistance, proactive threat hunting, digital forensics, and rapid incident response. Our teams conduct remote and onsite investigations using host- and network-based cybersecurity analysis capabilities to identify malicious activity, assess the severity of cyber incidents, and support containment and resolution efforts.
We are seeking a Host Forensics Analyst to conduct advanced digital forensic investigations and support onsite cyber incident response engagements. This position focuses on forensic evidence acquisition and analysis, host-based investigations, malicious code analysis, technical reporting, and coordination of forensic activities throughout an engagement.
The successful candidate will bring strong digital forensics and incident response experience with the ability to perform complex investigations, guide junior analysts, maintain forensic quality standards, and clearly communicate technical findings to stakeholders and leadership.
________________________________________
Key Responsibilities
• Support and help coordinate forensic teams during onsite cybersecurity incident response engagements.
• Coordinate forensic data collection and acquisition activities across compromised systems and environments.
• Create forensically sound images and preserve digital evidence using established forensic methodologies.
• Provide technical guidance on data collection and forensic investigative techniques.
• Plan and coordinate the inventory, examination, and comprehensive technical analysis of computer systems and digital artifacts.
• Perform host-based forensic analysis to identify malicious activity and determine the scope of compromise.
• Evaluate, extract, and analyze suspected malicious code.
• Analyze cyber-attacks to identify attack methods, stages, affected systems, and associated artifacts.
• Develop detailed forensic reports and executive summaries documenting investigative findings.
• Perform peer reviews and quality assurance reviews of forensic analysis and reporting.
• Mentor and provide technical guidance to junior forensic analysts.
• Serve as a technical forensics liaison to stakeholders and explain investigative findings, methodologies, and protocols.
• Track and document onsite incident response activities and provide regular updates to leadership.
• Maintain proper digital evidence collection, preservation, and chain-of-custody procedures.
• Travel to incident response locations throughout the United States, Territories, and Possessions as required.
________________________________________
Mandatory Skills
• U.S. Citizenship.
• Active TS/SCI Clearance.
• Ability to obtain Department of Homeland Security (DHS) Suitability.
• Five (5) or more years of directly relevant experience conducting cyber forensic investigations using industry-standard forensic tools and technologies.
• Experience creating forensically sound duplicates/images of computer systems.
• Strong experience conducting host-based and digital forensic investigations.
• Ability to develop detailed cyber investigative reports documenting digital forensic findings.
• Experience analyzing and characterizing cyber-attacks.
• Experience with proper digital evidence collection, preservation, and chain-of-custody procedures.
• Ability to identify different classes of cyber-attacks and stages of compromise.
• Knowledge of system and application security threats and vulnerabilities.
• Experience conducting proactive analysis of systems and networks.
• Ability to establish and evaluate trust levels for critical system resources.
• Strong analytical, investigative, and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to collaborate effectively across multiple physical locations.
• Ability to travel to support onsite incident response engagements.
________________________________________
Preferred Skills
Experience with or knowledge of two or more of the following:
• EnCase
• SIFT Workstation
• X-Ways Forensics
• Volatility
• Wireshark
• Sleuth Kit / Autopsy
• Magnet AXIOM Cyber
• Snort
• Splunk or other SIEM platforms, including ArcSight, LogRhythm, or Elastic
• EDR platforms including CrowdStrike, Microsoft Defender for Endpoint (MDE), or Trellix
• Malicious code analysis
• All-source cybersecurity research
• Mentoring or providing technical guidance to forensic analysts
________________________________________
Education
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline.
OR
High School Diploma with ten (10) or more years of directly relevant host or digital forensics experience.
________________________________________
Desired Certifications
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Forensic Examiner (GCFE)
• EnCase Certified Examiner (EnCE)
• Certified Computer Examiner (CCE)
• Certified Forensic Computer Examiner (CFCE)
• Certified Information Systems Security Professional (CISSP)
________________________________________
Why QSS?
At QSS, you'll perform hands-on digital forensic investigations that support critical cybersecurity incident response operations. You'll analyze compromised systems, uncover malicious activity, guide forensic investigations, and help technical teams and stakeholders understand what happened and how to respond.
________________________________________
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match