Forensic Cybersecurity Analyst, Journeyman

Forensic Cybersecurity Analyst, Journeyman

Job Category: Security

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

CACI is seeking a skilled Forensic Cybersecurity Analyst to join our cybersecurity team. The ideal candidate will have a strong background in digital forensics, malware analysis, and incident response. This role is critical in investigating and analyzing cyber incidents, conducting forensic examinations, and providing technical expertise to support our organization's cybersecurity efforts. 

Key Responsibilities: 

• Conduct forensic analysis of log files, digital evidence, and other information to investigate network intrusions and identify perpetrators  

• Perform dynamic analysis to confirm known information about intrusions and discover new insights  

• Examine recovered data and conduct file system forensic analysis to extract relevant information  

• Collect and analyze intrusion artifacts (e.g., source code, malware, system configurations) to enable mitigation of potential cyber defense incidents  

• Provide technical summaries of findings in accordance with established reporting procedures  

• Utilize and maintain forensic tool suites (e.g., EnCase, Sleuthkit, FTK) for investigations  

• Conduct forensic analyses across multiple operating system environments, including mobile device systems  

• Analyze anomalous code to determine if it is malicious or benign and process and analyze volatile data and memory dumps to extract critical information 

• Identify and analyze obfuscation techniques used by threat actors and Perform bit-level analysis and binary analysis of suspicious files and malware  

• Use debuggers and malware analysis tools to ascertain tactics, techniques, and procedures of threat actors  

• Conduct deep analysis of captured malicious code, including malware forensics  

• Preserve evidence integrity according to standard operating procedures and national standards 

Required Qualifications:  

• Bachelor's degree in Cybersecurity, Computer Science, or related field  

• 3-5 years of experience in digital forensics and cybersecurity  

• Requires a Secret security clearance 

• Strong knowledge of computer forensics, network defense, and system administration  

• Proficiency in forensic tool suites and malware analysis tools  

• Experience with multiple operating systems, including Windows and Unix/Linux environments  

• Familiarity with reverse engineering concepts and binary analysis  

• Strong analytical and problem-solving skills with excellent written and verbal communication skills 

  

Preferred Certifications:  

• GIAC Certified Forensic Analyst (GCFA)  

• EnCase Certified Examiner (EnCE)  

• Certified Information Systems Security Professional (CISSP)  

 

-