Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations. Responsible for leading the Cyber Investigations and Incident Response teams in the collection and analyzing of computer evidence, and documents key procedures and processes for the retrieval and discovery of that evidence.
- Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
- 5+ years of information technology leadership experience
- Experience with digital forensics processes, procedures and tools including chain of custody
- 3+ years of experience in cyber forensic investigations
- Current information security certification, including Certified Cyber Forensics Professional (CCFP), Certified Ethical Hacker (CEH),
- Certified Information Systems Security Professional (CISSP), GIAC Certified Forensic Examiner, GIAC Certified Forensic Analyst, and/or State Private Detective License.
- Technical leadership experience in a sourced environment
- Project management skills
- Excellent communication skills and problem solving ability
- Demonstrated ability to work independently and with others
- Ability to manage the details and compliance with standards and expectations
- Technical infrastructure operations, administration, or engineering background
CORE WORK ACTIVITIES
- Uses defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network in order to protect information, information systems, and networks from threats. Identifies remediation activities and oversees efforts to implement them.
- Responds to crisis or urgent situations within the pertinent domain to mitigate immediate and potential threats and comply with relevant data breach laws. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize safety and security of systems, preservation of intellectual property, and information security. Investigates and analyzes all relevant security and privacy response activities.
- Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations or enterprise or local policy, assesses the level of risk, and develops and/or recommends and operationalizes appropriate mitigation countermeasures.
- Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement or internal investigations.
- Applies tactics, techniques, and procedures for a full range of privacy and cyber-investigations using tools and processes to include but not limited to interview techniques, event correlation, data analysis, cyber surveillance, forensic timeline creation, data carving, historical fragment identification, memory analysis, malware sandboxing, identification of anti-forensics attempts and transaction/journal logging.
- Identifies and assesses the capabilities and activities of cyber criminals or foreign intelligence entities; produces findings to help initialize or support law enforcement and counterintelligence investigations or activities.
- Analyzes collected information to identify potential for exploitation of known vulnerabilities.
- Analyzes threat information from multiple sources, disciplines, and agencies across the regulatory and Intelligence Communities. Synthesizes and places regulatory and intelligence information in context; draws insights about the possible implications.
- Responsible for conducting complex investigations to include financial fraud, theft of trade secrets, procurement fraud, embezzlement, intellectual matters, money laundering and illegal activity on computer media from desktops, laptops, and server platforms.
- Directly responsible for leading incident response team members in all matters relating to forensic investigations to include but not limited to assignment of duties, procedures, methodologies, and all other matters relating to forensic activities.
- Applies expert forensic analysis across multiple operating systems (MSDOS, FAT16, FAT32, exFAT, NTFS, EXT2/3, IOS, Solaris, Android) to include the custom development of software tools for data extraction and analysis. Analysis should result in forensic success across all domains of the adversarial kill chain.
- Perform static and dynamic analysis of malware including various associated delivery operations and persistence attributes. Analysis will include the extraction of the exploit, author/group attribution, motivation, and command/control mechanisms.
- Analyzes high-level programming language constructs (branching statements, looping functions, network socket code) relating to malware analysis and various APT (Advanced Persistent Threats) families.
- Responsible for the development/maintaining of key relationships within the forensic/security community to facilitate the exchange of IOC’s (Indicators of Compromise) and the acquiring of actionable intelligence specifically relating to the corporation.
- Communication - Conveys information and ideas to others in a convincing and engaging manner through a variety of methods.
- Leading Through Vision and Values - Keeps the organization's vision and values at the forefront of employee decision making and action.
- Managing Change - Initiates and/or manages the change process and energizes it on an ongoing basis, taking steps to remove barriers or accelerate its pace; serves as role model for how to handle change by maintaining composure and performance level under pressure or when experiencing challenges.
- Problem Solving and Decision Making - Identifies and understands issues, problems, and opportunities; obtains and compares information from different sources to draw conclusions, develops and evaluates alternatives and solutions, solves problems, and chooses a course of action.
- Professional Demeanor - Exhibits behavioral styles that convey confidence and command respect from others; makes a good first impression and represents the company in alignment with its values.
- Strategy Development - Develops business plans by exploring and systematically evaluating opportunities with the greatest potential for producing positive results; ensures successful preparation and execution of business plans through effective planning, organizing, and on-going evaluation processes.
- Building a Successful Team - Uses an effective interpersonal style to build a cohesive team; inspires and sustains team cohesion and engagement by focusing the team on its mission and importance to the organization.
- Strategy Execution – Ensures successful execution across of business plans designed to maximize customer satisfaction, profitability, and market share through effective planning, organizing, and on-going evaluation processes.
- Driving for Results - Sets high standards of performance for self and/or others; assumes responsibility for work objectives; initiates, focuses, and monitors the efforts of self and/or others toward the accomplishment goals; proactively takes action and goes beyond what is required.
- Customer Relationships - Develops and sustains relationships based on an understanding of customer/stakeholder needs and actions consistent with the company’s service standards.
- Global Mindset - Supports employees and business partners with diverse styles, abilities, motivations, and/or cultural perspectives; utilizes differences to drive innovation, engagement and enhance business results; and ensures employees are given the opportunity to contribute to their full potential.
- Strategic Partnerships - Develops collaborative relationships with fellow employees and business partners by making them feel valued, appreciated, and included; explores partnership opportunities with other people in and outside the organization; influences and leverages corporate and continental shared services and/or discipline leaders (e.g., HR, Sales & Marketing, Finance, Revenue Management) to achieve objectives; maintains effective external relations with government, business and industry in respective countries; performs effectively as a liaison between locations, disciplines, and corporate to ensure needed resources are received and corporate strategies are understood and executed.
Generating Talent and Organizational Capability
- Developing Others - Supports the development of other’s skills and capabilities so that they can fulfill current or future job/role responsibilities more effectively.
- Organizational Capability - Evaluates and adapts the structure of assignments and work processes to best fit the needs and/or support the goals of an organizational unit.
- Continuous Learning - Actively identifies new areas for learning; regularly creates and takes advantage of learning opportunities; uses newly gained knowledge and skill on the job and learns through their application.
- Technical Acumen - Understanding and utilizing professional skills and knowledge in a specific functional area to conduct and manage everyday business operations and generate innovative solutions to approach function-specific work challenges
- Technical Intelligence: Knowledge and ability to define and apply appropriate technology to enhance business process
- Development Methodologies: Knowledge of general stages of SDLC framework and the application tiers within the development space.
- Information Security: Knowledge of the security considerations relevant within the development space, including industry best practices related to information security
- Business Acumen - Understands and utilizes business information to manage everyday operations and generate innovative solutions to approach business and administrative challenges.
- Basic Competencies - Fundamental competencies required for accomplishing basic work activities.
- Basic Computer Skills - Using basic computer hardware and software (e.g., personal computers, word processing software, Internet browsers, etc.).
- Mathematical Reasoning - The ability to add, subtract, multiply, or divide quickly, correctly, and in a way that allows one to solve work-related issues.
- Oral Comprehension - The ability to listen to and understand information and ideas presented through spoken words and sentences.
- Reading Comprehension - Understanding written sentences and paragraphs in work related documents.
- Writing - Communicating effectively in writing as appropriate for the needs of the audience.
- Job type
- Bethesda, MD, United States
- Starting in
- As soon as possible