Forensics Lead

General information

Requisition # R66771 Locations USA-VA-Chantilly, USA-AZ-Chandler Posting Date 03/30/2026 Security Clearance Required Secret Remote Type Onsite Time Type Full time

Description & Requirements

Unlock the secrets of intelligence with MANTECH! Join a dynamic team at the forefront of national security, providing advanced solutions to government intelligence agencies. Since 1968, we’ve been solving the toughest challenges with groundbreaking tech. Explore thrilling projects in Digital Transformation, Cybersecurity, IT, Data Analytics and Software Development. Elevate your career and make a difference. Your adventure begins now—unleash your potential with MANTECH!

***This is for a future opportunity***

MANTECH seeks a motivated, career, and team-oriented Forensics Lead to support a DHS customer in Chandler, AZ OR the National Capital Region.

As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a "kill chain" process to thwart Advanced Persistent Threats (APT).

Key Responsibilities:

• Conduct remote imaging and digital media analysis using enterprise forensic tools.

• Perform reverse engineering of malicious code to identify indicators of compromise.

• Support legal and investigative organizations by preserving forensically sound data.

• Respond to email attacks by identifying and blocking malicious domains and metadata.

• Thwart Advanced Persistent Threats (APT) using forensic "kill chain" processes.

Minimum Qualifications:

• Bachelor's Degree.

• 5+ years of security-related experience with extensive digital forensics background.

• One of the following: CISSP (Associate), CCSP, SSCP, GMON, GCIH, GCIA, GECD, CEH, or CASP AND one from the DOD 8570 CSSP list.​

Preferred Skills:

• Experience in a malware analysis lab using VM sandboxing and packet-level traffic analysis.

• Technical expertise in performing packet-level traffic analysis.

Clearance Requirements:

• Must be a U.S. Citizen.

• Active Secret clearance, AND TS/SCI Eligibility

• Must be able to obtain and maintain an ICE Entry on Duty (EOD) Suitability.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.

• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers.

• Proven ability to reverse engineer malicious code and identify indicators of compromise.

• Experience supporting legal organizations with forens