What are the responsibilities and job description for the Cyber Investigations Analyst - Mid position at Dunhill Professional Search & Government Solutions?
Dunhill Government Solutions is hiring a Cyber Investigations Analyst to support the internal investigations unit of a federal agency, securing the IT networks used to detect and investigate cybercrime and internal policy violations. The role spans security engineering for the unit's forensic network, ISSO-adjacent support for its tool suite and SIEM, and hands-on digital forensics.
Responsibilities:
- Advise on and help maintain and engineer the forensic network infrastructure across its lifecycle; manage priorities and service requests through the ticketing and change-request process
- Administer, configure, tune and secure the unit's tool suite, devices and sensors; review network security architecture and recommend improvements to leadership
- Maintain SIEM infrastructure collecting IDS, firewall, proxy, DLP, antivirus and vulnerability-scanner data
- Monitor data-loss-prevention (DLP) solutions in near real time and recommend spillage response and sanitization per NIST 800-88
- Build and deploy custom forensic platforms for triage, imaging and advanced analysis; perform endpoint (Windows, Linux, Mac, cloud) and network forensic analysis
- Support formal digital forensic investigations and document findings in investigation reports; process email-misuse cases in the case management system
- Serve as subject-matter expert on evidence preservation and chain of custody, and on advanced extraction techniques (encryption bypass, mobile-device unlocking, board-level repair)
- Manage cyber investigations from creation to closure, escalate cases per policy, and author and update standard operating procedures
Required qualifications:
- Bachelor's degree in Computer Science, Engineering or another technical discipline, or equivalent relevant experience
- 5 years in system administration, database administration, network engineering, software engineering or software development with a concentration in cyber security
- 3 years of professional digital media forensic analysis, static malware disassembly/analysis and/or runtime malware analysis
- Ability to work on site in Ashburn, VA (no telework), core hours 8:30 AM - 5:00 PM, with on-call support
Preferred: CISSP or CompTIA Security ; GCFE, GCFA or EnCE.
Compensation: $98,000 - $118,000 per year
US Citizenship (no dual citizenship) and the ability to pass a federal background investigation in order to be granted access to sensitive information.
#cjpost
Salary : $98,000 - $118,000