Malware and Forensic Analyst (Senior) Job at ClearanceJobs, Washington DC

aXB1R1RWNDVoeGV6bE5rV3VhTU1iZXlPY1E9PQ==
  • ClearanceJobs
  • Washington DC

Job Description

divh2Malware And Forensic Analyst (Senior)/h2pcFocus Software seeks a Malware and Forensic Analyst (Senior) to join our program supporting US Courts in Washington, DC. This position has remote capabilities. Required qualifications include:/pulli5 years of experience analyzing forensic artifacts, performing filesystem timeline analyses, and identifying intrusion root causes of operating systems (e.g., Windows, Linux, and macOS)/lili5 years of experience utilizing the following forensics tools: Magnet AXIOM to acquire, analyze, and report on digital evidence; SANS SIFT Workstation for disk/memory analysis, network forensics, and malware analysis; Encase to collect, analyze, and report on digital evidence; Velociraptor to collect and analyze data from multiple endpoints; KAPE (Eric Zimmermans tools) to collect and process files; SUMURI TALINO Workstations/Laptops Cellebrite Bi-Weekly Threat Assessment Reports (BTARs)/li/ulpMust have ability to perform required forensics/malware analyst duties, including:/pulliCreate duplicates of evidence that ensure the original evidence is not unintentionally modified/liliExtracting deleted data using data carving techniques/liliPerforming static and dynamic malware analysis to discover indicators of compromise (IOCs)/lipMust be able to work 80% (Monday thru Thursday) onsite at AOUSC office in Washington, DC. Desired qualifications include:/pulliOne of the following certifications: GIAC Certified Intrusion Analyst (GCIA) GIAC Certified Incident Handler (GCIH) GIAC Continuous Monitoring (GMON) GIAC Defending Advanced Threats (GDAT) Splunk Core Power User EnCase Certified Examiner SANS GCFA Volatility/li/ulpDuties:/pulliProvides digital forensics and incident response support to the AOUSC Security Operations Center (SOC)/liliCollects, analyzes, and evaluates forensic artifacts associated with threat activity against Judiciary networks/liliAccept and respond to government technical requests through the AOUSC ITSM ticket (e.g., HEAT or Service Now) for advanced subject matter expert (SME) technical investigative support for real-time incident response (IR)/liliCreate duplicates of evidence that ensure the original evidence is not unintentionally modified/liliAnalyze forensic artifacts of operating systems (e.g., Windows, Linux, and macOS) to discover elements of an intrusion and identify root cause/liliPerform live forensic analysis based on SIEM data (e.g., Splunk)/liliPerform filesystem timeline analysis for inclusion in forensic report/liliExtract deleted data using data carving techniques/liliCollect and analyze data from compromised systems using EDR agents and custom scripts provided by the AOUSC/liliPerform static and dynamic malware analysis to discover indicators of compromise (IOC)/liliAnalyze memory images to identify malicious patterns using Judiciary tools (e.g. Volatility)/li/ulpDeliverables:/pulliImage Duplication: Duplication of evidence for processing by multiple analysts/liliRequests received via AOUSC ITSM (Heat or Service Now)/liliDeleted Files: Deleted files supplied to requestor/liliAdvanced SME IR Reports: Timely Advanced SME IR Support for Priority 1 Security Events/liliSME actively participating in IR activities within 4 hours of request (7x24x365)/liliIncident Reports: All forensic reports include a timeline/liliForensic Reports: Document the results of a forensic investigation/liliMalware Analysis Reports: Document the results of analyzing a specific malware specimen/liliProvide Weekly Reports to the AOUSC Program Manager that documents all activities, tasks, tickets and documents worked on/liliDocument repeatable Standard Operation Procedures (SOPs) and playbooks for security use cases/li/ul/ul/div

Job Tags

Work at office, Remote work,

Similar Jobs

PenFed Credit Union

SVP, Chief Marketing Officer (McLean) Job at PenFed Credit Union

 ...PenFed is hiring an SVP, Chief Marketing Officer to work onsite at our Tysons, Virginia location. The primary responsibility of this role is to drive PenFeds growth by leading an integrated, data-driven, and digitally enabled marketing organization. SVP, Chief Marketing... 

Day Trading Advantage

DAY TRADER IN TRAINING (WORK FROM HOME) Job at Day Trading Advantage

If there is one thing we have learned over this last year, it is that jobs and businesses are in the hands of politicians. As if it wasn't hard enough keeping a boss happy. So if you are tired of the daily grind that makes it harder and harder to achieve your financial...

SUNY Broome Community College

Senior Staff Assistant (Marketing and Communications) Job at SUNY Broome Community College

 ...applicants for a full-time Senior Staff Assistant for the Office of Marketing & Communications (MarCom). This in-person position reports...  ... Must be eligible to work in the United States without a visa sponsorship. Additional Information: The minimum salary for this... 

Sport Clips

Hair Stylist Job at Sport Clips

Hair Stylist at Sport Clips summary: Sport Clips in Columbus, OH is hiring licensed hair stylists (full- and part-time) offering a $15/hr base (FT) plus tips, bonuses, paid training, PTO, and benefits (health & vision). The role provides instant clients, a supportive...

Tallahassee Memorial

RN/Lactation Consultant Outpatient- Women's Pavilion Job at Tallahassee Memorial

 ...of an approved school of Nursing Preferred Education: Bachelors of Science Degree in Nursing Advanced Training in Certified Lactation Consultant Program Required Experience: Two (2) to five (5) years of Nursing Experience Preferred Experience: Two (2) to five (5) years...