Host-Based Systems Analysts III with Security Clearance

3 weeks ago

Arlington, United States Base One Technologies Full time
Host-Based Systems Analysts III
, or Cyber-Forensics Systems Analysts with active DoD TS/SCI eligible security clearance.
In this position you will:
• Assist in preliminary analysis by tracing an activity to its source and documenting findings for input into a forensic report
• Document original condition of digital and/or associated evidence by taking photographs and collecting hash information
• Assist team members in imaging digital media
• Assist in gathering, accessing and assessing evidence from electronic devices using forensic tools and knowledge of operating systems
• Use hashing algorithms to validate forensic images
• Work with mentor to identify and understand adversary TTPs
• Assist team members in analyzing the behaviors of malicious software
• Under direct guidance and coaching, locate critical items in various file systems to aid more senior personnel in their analysis
• Perform analysis of log files from a variety of sources to identify possible threats to computer security
• Acquire/collect computer artifacts (e.g., malware, user activity, link files, etc.) from systems in support of onsite engagements
• Assess evidentiary value by triaging electronic devices
• Correlate forensic findings with network events to further develop an intrusion narrative
• When available, collect and document system state information (running processes, network connections, etc.) prior to imaging
• Perform incident triage from a forensic perspective to include determination of scope, urgency and potential impact.
• Track and document forensic analysis from initial involvement through final resolution
• Collect, process, preserve, analyze and present computer related evidence
• Coordinate with others within the Government and with customer personnel to validate/investigate alerts or other preliminary findings
• Conduct analysis of forensic images and other available evidence and drafts forensic write-ups for inclusion in reports and other written products
• Assist to document and publish Computer Network Defense guidance and reports on incident findings to appropriate constituencies
• Assist with leading and coordinating forensic teams in preliminary investigation
• Plan, coordinate and direct the inventory, examination and comprehensive technical analysis of computer related evidence
• Distill analytic findings into executive summaries and in-depth technical reports
• Serve as technical forensics liaison to stakeholders and explain investigation details to include forensic methodologies and protocols
• Track and document on-site incident response activities and provides updates to leadership throughout the engagement
• Evaluate, extract and analyze suspected malicious code Core Competencies required include:
• Use leading edge technologies and industry standard forensic tools and procedures to provide insight into the cause and effect of suspected cyber intrusions
• Follow proper evidence handling procedures and chain-of-custody protocols
• Produce written reports documenting digital forensic findings
• Determine programs that have been executed, and find files that have been changed on disk and in memory
• Use timestamps and logs to develop authoritative timelines of activity
• Identify and document case relevant file-system artifacts
• Create forensically sound duplicates of evidence for use in data recovery and analysis
• Perform all-source research for similar or related network events or incidents
• Identify different classes of attack and attack stages
• Knowledge of system and application security threats and vulnerabilities
• Knowledge of proactive analysis of systems and networks, to include creating trust levels of critical resources Education and Background Requirements:
• Minimum 7-9 years incident management experience or cybersecurity operations experience with a High school diploma;
• Or, Bachelor's degree from an accredited college or university in Incident Management, Operations Management, Cybersecurity or related discipline, and with minimum 5-7 year of incident management experience or cybersecurity operations experience
For all labor categories, unless otherwise specified, the following education degrees may be substituted for years of experience in a related discipline:
Bachelor's Degree = Two (2) years of experience
Master's Degree = Three (3) years of experience
Ph.D. = Four (4) years of experience Employment Requirements:
• Must have an active Top Secret/SCI security clearance or TS with SCI eligibility, verifiable in JPAS.
• Must have excellent written and verbal communication skills Physical Demands:
The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable people with disabilities to perform the described essential functions of the job.

  • Host-Based Systems Analyst

    2 weeks ago

    Arlington, United States Node Full time

    Host-Based Systems Analyst Location: Arlington, VA Must have an active Top Secret Security Clearance Node provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based, and cloud-based cybersecurity analysis capabilities. Team personnel...

  • Host Based Cyber Systems Analyst IV

    2 days ago

    Arlington, United States Argo Cyber Systems Full time

    The DHS's Hunt and Incident Response Team (HIRT) secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front line response for cyber incidents and proactively hunting for malicious cyber activity. Argo Cyber Systems is a key partner to DHS, and performs HIRT investigations to develop a preliminary diagnosis of the severity of...

  • Host Based System Analyst

    2 days ago

    Arlington, United States RadiantHire Solutions, Inc. Full time

    Host Based Systems Analyst - IV The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front line response for cyber incidents and proactively hunting for malicious cyber activity. Our client as a prime contractor to DHS, performs HIRT investigations to develop a preliminary...

  • Host Forensics Analysts/Host Based Systems Analyst

    3 weeks ago

    Arlington, United States Node.Digital Full time

    Job DescriptionJob DescriptionHost Forensics Analysts/Host Based Systems AnalystLocation: Arlington, VAMust have Top Secret Security ClearanceNode provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis...

  • Host Based Cyber Systems Analyst IV

    3 weeks ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionThe DHS's Hunt and Incident Response Team (HIRT) secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front line response for cyber incidents and proactively hunting for malicious cyber activity. Argo Cyber Systems is a key partner to DHS, and performs HIRT investigations to develop a...

  • Host-Based Systems Analyst

    3 weeks ago

    Arlington, United States Node.Digital Full time

    Job DescriptionJob DescriptionHost-Based Systems Analyst Location: Arlington, VAMust have an active Top Secret Security ClearanceNode provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based, and cloud-based cybersecurity analysis...

  • Host-Based Systems Analyst

    3 weeks ago

    Arlington, Virginia, United States Node.Digital Full time

    Host-Based Systems Analyst Location: Arlington, VA Must have an active Top Secret Security Clearance Node provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based, and cloud-based cybersecurity analysis capabilities. Team...

  • Host Forensics Analysts/Host Based Systems Analyst

    4 weeks ago

    Arlington, Virginia, United States Node.Digital Full time

    Host Forensics Analysts/Host Based Systems Analyst Location: Arlington, VA Must have Top Secret Security Clearance Node provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Contract...

  • Host Based Systems Analyst

    3 weeks ago

    Arlington, United States Fusion Technology Full time

    Who are you? Trusted Employee: The Government trusts you and so do we. You possess an active Top Secret security clearance. You must also be able to obtain Department of Homeland Security (DHS) suitability. Threat Expert: You have experience with proper evidence handling procedures and chain of custody protocols. You are skilled in identifying...

  • Network Based Systems Analyst

    1 week ago

    Arlington, United States Solutions , LLC Full time

    Network Based Systems Analyst - III - NBA03 The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactively hunting for malicious cyber activity. Solutions3 Technologies (RTX), as a prime contractor to DHS, performs HIRT...

  • Network Based Systems Analyst

    2 days ago

    Arlington, United States Solutions , LLC Full time

    Network Based Systems Analyst - III - NBA03 The DHSs Hunt and Incident Response Team (HIRT) secures the Nations cyber and communications infrastructure. HIRT provides DHSs front-line response for cyber incidents and proactively hunting for malicious cyber activity. Solutions3 Technologies (RTX), as a prime contractor to DHS, performs HIRT investigations to...

  • Network Based Systems Analyst

    1 week ago

    Arlington, United States Solutions³ LLC Full time

    Job DescriptionJob DescriptionNetwork Based Systems Analyst - III - NBA03The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactively hunting for malicious cyber activity. Solutions3 Technologies (RTX), as a prime contractor to...

  • Network Based Systems Analyst

    1 week ago

    Arlington, United States Solutions³ LLC Full time

    Job DescriptionJob DescriptionNetwork Based Systems Analyst - III - NBA03The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactively hunting for malicious cyber activity. Solutions3 Technologies (RTX), as a prime contractor to...

  • Cyber Network Based Systems Analyst III

    4 weeks ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionThe DHS's Hunt and Incident Response Team (HIRT) secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious cyber activity. Argo Cyber Systems supports this mission with DHS, performs HIRT investigations to develop a...

  • Network Based Systems Analyst III

    4 weeks ago

    Arlington, United States Farfield Systems Full time

    Job DescriptionJob DescriptionFarfield will assist the Federal staff within the Cybersecurity and Infrastructure Protection Agency (CISA) Hunt and Incident Response Team (HIRT), and National Cybersecurity and Assessment and Technical Services (NCATS) branches, with a broad set of support functions. The Hunt and Incident Response Team is DHS’s front line...

  • Host based Systems Analyst

    1 week ago

    Arlington, United States Node.Digital Full time

    Job DescriptionJob DescriptionHost-based Systems Analyst /Senior SOC AnalystLocation: Arlington, VAMust have an active Secret Security ClearanceNode provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis...

  • Host based Systems Analyst

    1 week ago

    Arlington, United States Node.Digital Full time

    Host-based Systems Analyst /Senior SOC AnalystLocation: Arlington, VAMust have an active Secret Security ClearanceNode provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Contract...

  • Host Based Systems Analyst

    1 week ago

    Arlington, United States Solutions³ LLC Full time

    Job DescriptionJob DescriptionHost Based Systems Analyst - IV -HBA04The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front line response for cyber incidents and proactively hunting for malicious cyber activity. Solutions3 Technologies (RTX), as a prime contractor to DHS,...

  • Mgr. Cyber Incident Response, Network Based Systems Analyst III

    2 weeks ago

    Arlington, United States Argo Cyber Systems Full time

    Job DescriptionJob DescriptionArgo Cyber Systems provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based and cloud-based cybersecurity analysis capabilities. Team personnel provide front line response for digital forensics/incident...

  • Host Based Systems Analyst

    1 week ago

    Arlington, United States Solutions³ LLC Full time

    Job DescriptionJob DescriptionHost Based Systems Analyst - IV -HBA04The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front line response for cyber incidents and proactively hunting for malicious cyber activity. Solutions3, as a prime contractor to DHS, performs HIRT...