Secure our Nation, Ignite your Future
ManTech is seeking a motivated, career and customer oriented Senior Cyber Forensic Analyst to join our team in Chantilly, VA to provide unparalleled support to our customer and to begin an exciting and rewarding career within ManTech.
Responsibilities include, but are not limited to:
- Performs post-mortem analysis of the magnetic media, optical media, and volatile data (memory images) collected from compromised systems.
- Performs cyber incident forensic analysis to include determining scope, urgency, and potential impact; identifies the specific vulnerability exploited and makes recommendations that enable expeditious remediation.
- Performs digital media forensics analysis to include static and dynamic binary analysis, file signature analysis, file system analysis, timeline analysis, hash analysis, etc.
- Performs remote incident handling support such as forensics collections, intrusion correlation tracking, threat analysis and direct system remediation tasks to on-site responders.
- Provides malware analysis to develop incident timelines to include: the dates and times of significant events, command and control domains, and call back addresses; threat objective; and compromised hosts and data.
- Creates indicators of compromise to facilitate detection and prevention of similar attacks.
- Researches new attacks and exploits.
- Provides forensic/malware analysis reporting.
- Contributes to the completion of milestones associated with specific projects.
- Provides solutions to a variety of complex technical problems.
- Minimum Education: B.S. or relevant experience in related field.
- Minimum/General Experience: 5-7 years of related experience.
- Minimum 2 years of experience in a Cybersecurity Operations Center environment
- Experience with COTS technologies used in a Cybersecurity Operations Center environment
- CNDSP-IR (GCIH, CSIH, or CEH) certification
- IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification desired
Demonstrated technical experience:
- Previous experience conducting Forensic examinations of diverse Digital Media.
- Research experience in tracking cyber threat and malware campaign activity.
- Tool agnostic ability to conduct preliminary malware analysis.
- Familiarity with the classes of enterprise cyber defense technologies; SIEM, Network and host-based Intrusion Detection, System/Intrusion Prevention Systems (IDS/IPS).
- Prior experience in network forensics with an emphasis on detecting malicious activity using network traffic.
- Strong understanding of Operating Systems and Network Protocols.
- Experience doing dynamic malware analysis Working knowledge of database and operating system security.
- Understanding of latest security principles, techniques, and protocols.
- Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously; coordinating resources and ensuring scheduled goals are met.
- Ability to effectively interact with various levels of senior management is necessary.
- Ability to make decisions and resolve problems effectively – Seek out information and data to evaluate, prioritize and formulate best solution or practice.
- Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities.
- Must possess an active TS/SCI with a CI polygraph.
ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a Disabled Veteran, Recently Separated Veteran, Active Duty Waretime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law.
If you require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please contact ManTech's Corporate EEO Department at (703) 218-6000. ManTech is an affirmative action/equal opportunity employer - minorities, females, disabled and protected veterans are urged to apply. ManTech's utilization of any external recruitment or job placement agency is predicated upon its full compliance with our equal opportunity/affirmative action policies. ManTech does not accept resumes from unsolicited recruiting firms. We pay no fees for unsolicited services.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access http://www.mantech.com/careers/Pages/careers.aspx as a result of your disability. To request an accommodation please click email@example.com and provide your name and contact information.