Agile Defense
Digital Forensics and Incident Analyst (TS)
Washington, D.C
No sponsorshipDetected 5 days ago
TypeScriptAlgorithmsLinuxCybersecurityNetwork SecuritySIEMSOC OperationsIncident ResponseWiresharkCommunicationCollaborationWriting
About the role
- The analyst conducts digital analysis in response to investigations of computer-based crimes and cyber-intrusion incidents, leveraging enterprise forensic and live-monitoring tools while rigorously maintaining chain of custody.
- Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions.
Responsibilities
- That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Systems, or a related field (additional experience may substitute for degree).
- 7 years of hands-on digital forensics and incident response (DFIR) experience, ideally in federal or otherwise regulated environments.
- Required certifications: CFIA and CFIH.
- Demonstrated expertise with industry-standard forensic and analysis tools (e.g., EnCase, FTK, Autopsy/The Sleuth Kit, X-Ways, Volatility, Wireshark, YARA, and malware reverse-engineering tools such as Ghidra or IDA Pro).
- Working knowledge of the NICE Framework, NIST guidance, MITRE ATT&CK, chain-of-custody standards, and Rules of Evidence.
- Excellent technical writing and the ability to present findings clearly to legal, oversight, and investigative authorities.
- Here, you are valued as a family member, and we believe that we can accomplish great things together.
- U.S. citizenship and an active Top Secret (TS) security clearance.
- Strong command of Windows, Unix, and Linux internals
- file systems (NTFS, FAT, EXT)
- virtualization
- and SIEM/event-correlation platforms.
- Our Core Values
- Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.
- What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.
Nice to have
- Analyze log files, evidence, and other information to determine the best methods for identifying the perpetrator(s) of a network intrusion. (T0027)
- Confirm what is known about an intrusion and discover new information via dynamic analysis. (T0036)
- Examine recovered data for information relevant to the matter at hand. (T0103)
- Collect and analyze intrusion artifacts (e.g., source code, malware, system configuration) and use discovered data to enable mitigation of potential cyber defense incidents. (T0432)
- Conduct malware analysis in the event of a compromise, identify obfuscation techniques, and interpret debugging results to ascertain adversary tactics, techniques, and procedures.
- Determine the extent of threats and recommend courses of action or countermeasures to mitigate risk
- analyze crises to ensure public, personal, and resource protection.
- Identify data concealment methods (e.g., encryption algorithms, steganography) and conduct memory dumps to extract information.
Company info
- At Agile Defense we know that action defines the outcome and new challenges require new solutions.
Equal opportunity
- Employer/Protected Veterans/Individuals with Disabilities
Visa & Work Authorization
- citizenship and an active Top Secret (TS) security clearance
Apply directly at Agile Defense →Create a free account for alerts like thisView Agile Defense immigration profile
This listing is sourced directly from Agile Defense's careers page and normalized into a canonical job model.