Revolutional, LLC

Lead Cyber Defense Forensics Analyst

Suitland, Maryland, United States · Full-time

No sponsorship$110k-$150kDetected 6 days ago

TypeScriptLinuxMachine LearningIncident ResponseWireshark

About the role

You work alongside - not above - the SOC Chief, contributing deep technical expertise where it matters most: inside the investigation.
Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans.
Other duties in addition to those listed may be assigned as necessary to meet business needs.

Lead digital forensic investigations of the highest technical complexity
Perform host-based forensic analysis: disk and memory acquisition, file system examination, artifact recovery, malware triage, and attack timeline reconstruction across Windows and Linux environments
Maintain strict chain of custody for all evidence collected and handled
Provide direct analytical support to incident response operations
contribute forensic findings that drive containment, eradication, and recovery decisions in real time
Support threat hunt activities with forensic analysis: investigate hunt leads, validate hypotheses, and extract IOCs that feed detection improvements
Apply Software Testing and Evaluation methodology to validate forensic tools and assess new capabilities before operational deployment
Maintain current awareness of adversary tradecraft, malware families, forensic evasion techniques, and emerging investigation methodologies
We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.
Lead Cyber Defense Forensics Analyst

Active Top Secret/SCI required
Bachelor's degree in Computer Science, Digital Forensics, Information Security, or related field (or equivalent experience)
5 to 7 years of hands-on experience in digital forensics, incident response, and threat hunting, with demonstrated lead-level technical proficiency
Active Top Secret/SCI clearance (Final) required
Experience with Software Testing and Evaluation applied to forensic tool validation, capability testing, and pre-deployment assessment of new investigation technologies
Working knowledge of System Administration across Windows and Linux environments sufficient to accurately scope investigations, interpret system artifacts, and reconstruct attacker activity
Clearance: Active Top Secret/SCI required
Role-based training required per NICE Cybersecurity Workforce Framework IN-FOR-002 - must be current or completed within required timeframes

MITRE ATT&CK-based TTP mapping, threat actor profiling, and structured analytic frameworks applied to forensic findings

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments.
Traditional and HSA- eligible medical insurance plans
100% employer-paid dental and vision insurance options
100% employer-sponsored STD, LTD, and life insurance
Flexible-schedules and teleworking options
Paid holidays and PTO Accrual Plans
Paid Parental Leave

We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

This listing is sourced directly from Revolutional, LLC's careers page and normalized into a canonical job model.