Digital Forensics Analyst

• Travel Required: Yes - 10% of the time
• Minimum Clearance Required: TS/SCI with Poly
• Clearance Level Must Be Able to Obtain: None

Seeking a Digital Forensics Analyst, to serve as a member of an organizational cybersecurity program. This position requires an active TS/SCI with Polygraph.

The hired individual will perform the following key responsibilities:

• Conduct forensic acquisition and analysis on computer, mobile, IOT, digital media devices, AWS/cloud instances and any other unidentified or non-standard media. 
• Ability to capture volatile data including RAM, running processes, network states, etc. 
• Review evidentiary data (log files, file system artifacts, metadata, memory captures, etc.) to determine the presence of misclassified data, data spills, insider threats, identify malicious intrusions, and assess the threat to the organization.
• Generate analytical reports detailing forensic actions taken, acquisition of items of interest found in evidence, integrity checks, and suggested security actions determined from the evidence provided for both technical responders and executive stakeholders.
• Conduct research and technical reviews on forensic products proposed for consideration for the organizational product (software and hardware) listing.
•  Support maintenance of digital forensic tools and systems, including testing and validation in accordance with SWGDE/NIST guidelines, and support security authorization and accreditation activities for organizational forensic systems.
• Conduct routine research to recommend areas of improvement to existing digital forensic tools, processes, and procedures.

Qualifications

Required Education:

• Bachelors and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience.

Qualifications:

• Active TS/SCI with CI Poly security clearance.
• Candidates with an active security clearance at the TS/SCI level are required to pass a counter-intelligence polygraph.
• Relevant degrees and/or 3-5 years of experience.
• Active certification and working experience with one or more of the following forensic tools: Axiom, Cellebrite, EnCase, Forensics Toolkit (FTK).
• Proficient communication, briefing and writing skills.

About Us

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.