Network Forensics SME

6 days ago

Arlington, Virginia, United States Gray Tier Technologies Full time
Gray Tier Technologies is looking for a Network Forensics Analyst SME to support The Department of Homeland Security (DHS) Hunt and Incident Response Team (HIRT). DHS HIRT secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious cyber activity. Gray Tier Technologies performs HIRT investigations to develop a preliminary diagnosis of the severity of breaches. Gray Tier provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. This role provides remote and onsite advanced technical assistance for proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based and cloud-based cybersecurity analysis capabilities. Team personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. We are seeking a Network Forensics SME to support this critical customer mission.

Responsibilities:

- Assists the Government lead in coordinating teams in preliminary incident response investigations

- Assists the Government lead with interfacing with the customer while on site

- Determines appropriate courses of actions in response to identified and analyses anomalous network activity

- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations

- Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies

- Collects network intrusion artifacts (e.g., PCAP, domains, URI's, certificates, etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents

- Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information

- Collects network device integrity data and analyze for signs of tampering or compromise

- Assists with real-time CND incident handling (i.e., forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation) tasks to support onsite engagements

Required Skills:

- U.S. Citizenship

- Must have an active TS/SCI clearance

- Must be able to obtain DHS Suitability

- 8+ years of directly relevant experience in network investigations

- In depth knowledge of CND policies, procedures and regulations

- In depth knowledge of TCP/IP protocols

- In depth knowledge of standard protocols - ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, etc.

- In depth knowledge and experience of Wifi networking

- In depth knowledge and experience of network topologies - DMZ's, WAN's, etc.

- Substantial knowledge of Splunk (or other SIEM's)

- Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)

- Knowledge of Computer Network Defense policies, procedures, and regulations

- Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture

- Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources

- Ability to identify and analyze anomalies in network traffic using metadata

- Experience with reconstructing a malicious attack or activity based on network traffic

- Experience examining network topologies to understand data flows through the network

- Must be able to work collaboratively across physical locations

Desired Skills:

- Substantial knowledge of network device integrity concepts and methodologies

- Proficiency with network analysis software (e.g. Wireshark)

- Proficiency with carving and extracting information from PCAP data

- Proficiency with non-traditional network traffic (e.g. Command and Control)

- Proficiency with preserving evidence integrity according to standard operating procedures or national standards

- Proficiency with designing cyber security systems and environments in a Linux and/or Windows environment

- Proficiency with virtualized environments

Required Education:

BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 10+ years of network investigations experience.

Desired Certifications:

- DoD IAT Level II, IASAE II, CSSP Analyst

- DoD GCIA, GCIH, CSSP Analyst/CSSP Incident Responder

- DoD CEH, CSSP Analyst

- SANS GIAC GNFA preferred

  • Cyber Threat Hunter SME

    1 week ago

    Arlington, Virginia, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies is looking for a Cyber Threat Hunter SME to support The Department of Homeland Security (DHS) Hunt and Incident Response Team (HIRT). DHS HIRT secures the Nation's cyber and communications infrastructure. HIRT provides DHS's front-line response for cyber incidents and proactively hunting for malicious cyber activity. Gray Tier...

  • Network Forensic Analyst III

    6 days ago

    Arlington, Virginia, United States Ampcus Full time

    Network Forensic Analyst  Multi Year Salaried Contract  - Weeks of Training in Arlington, VA Consultants living within miles of Arlington, VA will need to be onsite time per week Hybrid (-) days onsite for consultants living closer than miles to Arlington, VA Must have ACTIVE TS Clearance  The Client's Hunt and Incident Response Team (HIRT) secures...

  • Network Forensics Cybersecurity Analyst 2

    12 minutes ago

    Arlington, Virginia, United States ARSIEM Corporation Full time

    At ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients. ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support. ARSIEM is looking for a Network Forensics Cybersecurity Analyst . Determines appropriate courses of action in response to identified...

  • Digital Forensic Specialist

    7 days ago

    Arlington, Virginia, United States Nightwing Full time

    Job Summary">We are seeking a highly skilled Cyber Host Forensic Analyst to join our team in Arlington, VA. As a Cyber Host Forensic Analyst, you will be responsible for acquiring/collecting computer artifacts from systems in support of onsite engagements, assessing evidentiary value by triaging electronic devices, and correlating forensic findings with...

  • Cyber Forensics Analyst

    3 days ago

    Arlington, Virginia, United States Leidos Full time

    Job Description: Description Leidos is seeking an experienced Cyber Forensics Analyst to join our team covering both forensics and malware analysis on a highly-visible cyber security single-award IDIQ vehicle that provides network operations security center support, including monitoring and analysis, cyber threat intelligence, email analysis, forensics,...

  • Forensics Consultant

    1 week ago

    Arlington, Virginia, United States Innovative Driven Full time

    Innovative Driven ("ID") is seeking a self-motivated, team-oriented Forensics Consultant to join our energetic and collaborative team of industry experts. The candidate will represent ID's Forensics team in providing our clients with world-class Digital Forensics and Litigation support. Ideal candidates thrive in high-energy, fast-paced environments, and...

  • Cyber Forensics Specialist

    2 days ago

    Arlington, Virginia, United States Leidos Full time

    Description Join Leidos as a skilled Cyber Forensics Specialist, where you'll play a crucial role in forensics and malware analysis as part of a dynamic cybersecurity team. You will support network operations security center initiatives, including monitoring, analysis, cyber threat intelligence, incident response, and more. This exciting position involves...

  • Cyber Network Forensic Analyst II

    6 days ago

    Arlington, Virginia, United States Raytheon Technologies Full time

    Date Posted: 2024-04-05 Country: United States of America Location: VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USA Position Role Type: Hybrid You have been redirected to RTX's career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and...

  • Cyber Forensics Analyst

    4 days ago

    Arlington, Virginia, United States Leidos Full time

    Description Leidos is seeking an experienced Cyber Forensics Analyst to join our team covering both forensics and malware analysis on a highly-visible cyber security single-award IDIQ vehicle that provides network operations security center support, including monitoring and analysis, cyber threat intelligence, email analysis, forensics, incident response,...

  • Incident Handling-SME

    2 weeks ago

    Arlington, Virginia, United States Peraton Full time

    ResponsibilitiesPeraton's DSCM program encompasses technical, engineering, data analytics, cyber security, management, operational, logistical and administrative support to aid and advise DoS Cyber & Technology Security (CTS) Directorate. This includes protecting a global cyber infrastructure comprising networks, systems, information, and mobile devices all...

  • Marine Corps Network and Policy SME

    4 days ago

    Arlington, Virginia, United States Spry Methods Full time

    Who We're Looking For (Position Overview):Spry is looking for a teammate to help the Marine Corps author and shape the next generation of network architecture and cyber strategy in support of the Deputy Commandant for Information at Headquarters Marine Corps. You will work with a team within the Enterprise and Expeditionary Services Section to author...

  • Incident Handling-SME

    3 weeks ago

    Arlington, Virginia, United States Peraton Full time

    Incident Handling-SMEJob Locations US-VA-ArlingtonRequisition ID 2025-155099Position Category Intel and Threat AnalysisClearance Top SecretResponsibilitiesPeraton's DSCM program encompasses technical, engineering, data analytics, cyber security, management, operational, logistical and administrative support to aid and advise DoS Cyber & Technology...

  • Cyber Forensics Analyst

    3 days ago

    Arlington, Virginia, United States Leidos Full time

    DescriptionLeidos is seeking an experienced Cyber Forensics Analyst to join our team covering both forensics and malware analysis on a highly-visible cyber security single-award IDIQ vehicle that provides network operations security center support, including monitoring and analysis, cyber threat intelligence, email analysis, forensics, incident response, and...

  • Cyber Network Forensic Analyst IV

    7 hours ago

    Arlington, Virginia, United States Raytheon Technologies Full time

    Date Posted: 2024-04-05 Country: United States of America Location: VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USA Position Role Type: Hybrid You have been redirected to RTX's career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and...

  • Cyber Network Forensic Analyst III

    6 days ago

    Arlington, Virginia, United States Raytheon Technologies Full time

    Date Posted: 2024-04-05 Country: United States of America Location: VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USA Position Role Type: Hybrid You have been redirected to RTX's career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and...

  • Cyber Host Forensic Analyst II

    1 week ago

    Arlington, Virginia, United States Nightwing Full time

    Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers' most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle...

  • Forensic Cyber Analyst

    2 hours ago

    Arlington, Virginia, United States Nightwing Full time

    Nightwing is a leading provider of technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers' most demanding challenges.We are looking for a skilled Cyber Host Forensic Analyst to join our team and support our customer's mission to provide immediate investigation and...

  • Cyber Host Forensic Analyst II

    4 days ago

    Arlington, Virginia, United States Nightwing Full time

    Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers' most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle...

  • Cyber Host Forensic Analyst II

    7 hours ago

    Arlington, Virginia, United States Raytheon Technologies Full time

    Date Posted: 2023-04-26 Country: United States of America Location: VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USA (inactive) Position Role Type: Hybrid You have been redirected to RTX's career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater...

  • eDiscovery / Forensics Specialist

    6 days ago

    Arlington, Virginia, United States Arlo Solutions LLC Full time

    Company SummaryArlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and...