Cybersecurity Forensic Engineer

ASRC Federal Broadleaf Division is actively hiring a Cybersecurity Forensics Engineers in support of our DCSA program based out of Quantico VA.

Remote flexibility available! Telework offered with a requirement to be onsite up to two (2) days a week at Quantico Marine Corps Base VA.

Description: Cybersecurity Forensics Engineers are responsible for leading and overseeing all aspects of digital forensic investigations within the agency. Responsibilities include collecting, preserving, and analyzing digital evidence from various sources such as computers, networks, and mobile devices. Other responsibilities include managing and conducting complex forensic examinations, providing expert guidance on forensic methodologies and tools, collaborating with cross-functional teams, and delivering clear and concise reports to stakeholders. Additionally, Cybersecurity Forensics Engineers are responsible for ensuring adherence to legal and regulatory requirements pertaining to digital evidence handling and chain of custody. These responsibilities and standards will be leveraged to develop training as well as mentoring of junior members. Cybersecurity Forensics Engineers are also responsible for researching, evaluating, and designing technical security solutions for the agency; providing technical security assessment support; developing, maintaining, and monitoring an effective Information Security program to provide logical and physical protection of the company's technical resources. Enterprise accountabilities include executing security engineering practices for IS projects; conduct product research and participate in the selection process of technologies to support security requirements. 

BASIC QUALIFICATIONS: 

Candidates should demonstrate a detailed knowledge the following: 

• Experience with Windows, Apple OSX, and Linux operating systems operations and artifacts
• Experience with SIEM technologies, including Splunk, or Elastic
• Experience with forensics tools, including Magnet Axiom, Falcon-NEO, Cellebrite, Encase, X-Ways Forensics, Autopsy, Sleuth Kit
• Experience with Wireless detection systems such as Yorkie-Pro
• Experience with performing forensic imaging, remote collection, and forensic analysis
• Experience with malware analysis, including static, dynamic, and reverse engineering
• Experience with performing root cause analysis and following through with all phases of the incident response lifecycle

YEARS EXPERIENCE:

At least eight (8) years of experience in cyber forensic investigations. 

EDUCATION REQUIREMENTS:

Bachelor’s Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information Technology

CERTIFICAITON(S):

Must meet 8570 certification requirements at the time of hire.  IAT Level III (e.g., CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, CCE, GCFA, EnCE or CCSP

CSSP-Manager is preferred

CLEARANCE LEVEL:

Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI

WORK ENVIRONMENT AND PHYSICAL DEMANDS: 

This is primarily a Telework position with a requirement to be onsite up to two (2) days a week.

If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.

Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form.

The employee may be required to travel 10% of the time, locally.