Digital Forensics Analyst/Investigator
Location:Arlington, VA
Full-time or Part-time:Full Time
Open Date:6/14/2018
Requisition Code:201806-1330
  
Job Description

Digital Forensics Analyst/Investigator

? Perform forensic analysis on all common operating system environments, to include, but not

limited to, Microsoft Windows, Mac OS, UNIX, Linux, Solaris, as well as embedded systems.

? Analyze digital media (logs, code, phones, hard drives, memory dumps, etc.) to determine attack

vectors and develop mitigation techniques.

? Identify possible threats based on analysis of digital media.

? Maintain readiness to divert and deploy teams of contract resources to provide on-site support

and assistance in the event of an exercise or cyber incident.

? Develop and disseminate engagement reports, technical reports and briefs based on analytic

findings.

? Identify and document tactics, techniques and procedures used by an attacker to gain

unauthorized access.

? Develop procedures and processes to analyze and categorize digital media.

? Follow industry standard forensic best practices while imaging, preserving, transporting and

handling electronic data and associated physical devices.

? Participate in inter-agency sponsored community of interest analysis groups, conduct and

participate in technical briefings and exchanges.

? Communicate, coordinate and share information and work closely with NCCIC and other HIRT

components.

? Develop tips, indicators, warnings and actionable information.

? Support the development of performance metrics.

? Adhere to the CONOPS and SOPs of the HIRT and Digital Forensics Group (DFG).Assist with

preservation and duplication of original media obtained from customers.

? Assist with maintaining the readiness of all DFG fly-away kits, storage media and forensic VM

analyst images.

? Assist with maintaining DFG computer equipment and software licensing.

Requirements that candidates will be evaluated against:

? Bachelor’s Degree

? Active Top Secret Security Clearance with the ability to obtain a TS/SCI is required. In addition,

selected candidate must be able to obtain and maintain a favorably adjudicated DHS

background investigation (EOD) for continued employment.

? Familiarity with at least one of the following tools: EnCase, Forensic Toolkit, Autopsy/Sleuthkit

? Knowledge of investigative methods to locate specific electronic data.

? Proficiency in the latest cyber forensics, response, and reverse engineering skills and

understanding of the latest exploit methodologies.

Abilities Required:
• While performing the duties of this job the employee is regularly required to sit and use hands to finger, handle, or feel while typing at a computer keyboard.
• The employee is occasionally required to stand, walk, reach, or lift objects up to 10 pounds.
• The employee is frequently required to talk or hear. The vision requirements include: close vision.
EEO Statement
Catapult Consultants is an Equal Opportunity Employer. We believe that every employee has the right to work in a dignified work environment free from all forms of discrimination and harassment. It’s our policy to recruit, employ, retain, compensate, train, promote, discipline, terminate and otherwise treat all employees and job applicants based solely on qualifications, performance, and competence. This policy reflects our belief that providing equal opportunities for all employees is a both our legal and moral responsibility, and good management practice.

All employees and applicants are treated without regard to age, sex, color, religion, race, national origin, citizenship, veteran status, current or future military status, sexual orientation, gender identification, marital or familial status, disability or any other status protected by law.
Disclaimer
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.