Computer Hacking Forensic Investigator Jobs in Virginia

Job Summary:
Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services. They are seeking a Cloud Forensics Analyst to support U.S. Government customers in onsite incident response to cyber-attacks, performing investigations and assisting with service restoration.
Responsibilities:
• Acquire/collect computer artifacts (e.g., malware, user activity, link files) in support of onsite engagements
• Triage electronic devices and assess evidentiary value
• Correlate forensic findings to network events in support of developing an intrusion narrative
• Collect and document system state information (e.g. running processes, network connections) prior to imaging, as required
• Perform forensic triage of an incident to include determining scope, urgency and potential impact
• Track and document forensic analysis from initial participation through resolution
• Collect, process, preserve, analyze and present computer related evidence
• Coordinate with Government staff and customer personnel to validate/investigate alerts or additional preliminary findings
• Conduct analysis of forensic images, and available evidence in support of forensic write-ups for inclusion in reports and written products
• Assist with documenting and publishing Computer Network Defense (CND) guidance and reports pertaining to incident findings
Qualifications:
Required:
• U.S. Citizenship
• Active TS/SCI clearance
• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability
• 10 years of direct relevant experience in cyber forensic investigations using leading edge technologies and industry standard forensic tools
• In depth understanding of SaaS, PaaS and IaaS in the Cloud Environment
• Ability to create forensically sound duplicates of evidence (forensic images)
• Ability to author cyber investigative reports documenting digital forensics findings
• Proficiency with analysis and characterization of cyber attacks
• Proficiency with proper evidence handing procedures and chain of custody protocols
• Skilled in identifying different classes of attacks and attack stages
• Understanding of system and application security threats and vulnerabilities
• Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources- Able to work collaboratively across physical locations
• Action-oriented and have a proactive approach to problem solving
• Proficiency with common operating systems (e,g, Linux/Unix, Windows)
• BS Computer Science, Cybersecurity, Computer Engineering or related degree; or HS Diploma 10 years of host or digital forensics experience.
Preferred:
• Ability to provide knowledge of strategies/architectures involved in implementing M365/Azure authentication, how these hook to a federated identity solution and a fundamental understanding of how threat actors would target identity to compromise an environment
• Advanced experience and proficiency across various aspects of IT operations (e.g. networking, virtualization, identity, security, business continuity, disaster recovery, data management, governance)
• Experience and understanding in acquisition, processing and analysis of digital evidence from onsite enterprises and cloud native platforms
• Fundamental understanding of APIs and proficiency with PowerShell/PowerShell modules leveraged to conduct API queries as they relate to Azure/M365
• Proficiency with scripting languages (e.g. Bash, Python, Powershell, JS) for automation of hunt tools used in commercial cloud environments- Ability to develop tools, architecture and configurations in Azure environment to support identifying threat activity.
• Understanding of Azure administration, M365 administration and/or development/DevOps, with advanced level skills in at least one of these domains
• Understand of how Azure/M365 platform protection is implemented and security operations available
Company:
Nightwing provides cyber, data operations, systems integration, and intelligence services for government and commercial customers. Founded in 2024, the company is headquartered in Sterling, USA, with a team of 1001-5000 employees. The company is currently Late Stage.