Host-Based Forensic Analyst (ITEC)

---

Job description

Host-Based Forensic Analyst
Location: Remote/Arlington, VA
Required Clearance: Top Secret/SCI

U.S. Citizenship Mandatory: Due to our US federal government contract, candidates for this position are required to be a US Citizen and will be subject to a background investigation.

Job Description:
ITEC is looking for a talented Analyst to help provide Operations and Maintenance support for the Intelligence Community.

Job Responsibilities:
• Uses leading edge technology and industry standard forensic tools and procedures to provide insight into the cause and effect of suspected cyber intrusions.
• Follows proper evidence handling procedures and chain of custody protocols.
• Produces written reports documenting digital forensic findings.
• Determines programs that have been executed, finds files that have been changed on disk and in memory.
• Uses timestamps and logs (host and network) to develop authoritative timelines of activity.
• Finds evidence of deleted files and hidden data.
• Identifies and documents case relevant file-system artifacts (browser histories, account usage and USB histories, etc.).
• Creates forensically sound duplicates of evidence (forensic image) to use for data recovery and analysis.
• Performs all-source research for similar or related network events or incidents.
• Skill in identifying different classes of attacks and attack stages.
• Knowledge of system and application security threats and vulnerabilities.
• Knowledge in proactive analysis of systems and networks, to include creating trust levels of critical resources.

Since 1999, ITEC has maintained a strong and reputable presence in support of DoD and Intelligence community mission-critical programs.

We are proud of our amazing Company culture. At ITEC, we take excellent care of our employees with competitive salaries, an employee care program and a great benefits package including Medical, Dental, Vision, Paid Time Off, and 401k. - provided by Dice