Digital Forensics SME

Description

Digital Forensics Subject Matter Expert

Location: Rockville, MD

Position Overview:

The Digital Forensics SME provides advanced digital forensics and incident response (DFIR) expertise, supporting investigation, analysis, and remediation of complex cybersecurity incidents across the Agency enterprise.

Salary $140K-184K

Clearance: TS/DOE Q

Key Responsibilities

• Perform advanced forensic imaging, volatile data acquisition, live memory analysis, endpoint, network, and digital media forensic investigations using agency-furnished toolsets.
• Identify root causes of malicious software infections, data exfiltration incidents, and network intrusions.
• Lead and coordinate SOC response, remediation efforts, and oversight for complex and high-severity cybersecurity incidents while providing hands-on digital forensic analysis when required.
• Conduct malware detonation, static malware disassembly, dynamic/runtime malware analysis, and reverse engineering.
• Support cyber threat intelligence production, mobile device security investigations, and email/phishing analysis.
• Collect, preserve, and analyze digital evidence in accordance with legal requirements and chain-of-custody procedures, producing evidentiary-quality documentation for security investigators and law enforcement.

Required Qualifications

• Bachelor's degree in Cybersecurity, Digital Forensics, Computer Science, Information Technology, or a related field.
• 8+ years of specialized professional experience responding to information system security incidents with advanced expertise in digital forensics and incident response (DFIR).
• Experience performing forensic investigations using enterprise digital forensic and incident response (DFIR) toolsets.
• Demonstrated experience producing evidentiary-quality forensic documentation and collaborating with security investigators and law enforcement.
• Expertise in:
• Forensic imaging, volatile data acquisition, and live memory analysis
• Endpoint, network, and digital media forensics
• Malware detonation, static and dynamic/runtime malware analysis, reverse engineering, and code disassembly
• Cyber threat intelligence production and analysis
• Mobile device security investigations
• Email security, phishing analysis, and incident response

ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 25+ years of stellar past performance, ActioNet is the premier Trusted Innogrator!

Core Capabilities:

• Advanced and Managed IT Services
• Agile Software Development
• DevSecOps
• Cybersecurity
• Health IT
• C4ISR & SIGINT
• Data Center Engineering & Operations
• Engineering & Installation

Why ActioNet?

At ActioNet, our Passion for Quality is at the heart of everything we do:

• Commitment to Employees: We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters.
• Commitment to Customers: We are committed to our customers by driving and sustaining Service Delivery Excellence.
• Commitment to Community: We are committed to giving back to our community, helping others, and making the world a better place for our next generation.

ActioNet is proud to be named a Top Workplace for the eleventh year in a row (2014 - 2024). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation.

What's in It For You?

As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?

ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Full-Time Employees are eligible to participate in our ActioNet’s Benefits Program:

• Medical Insurance
• Vision Insurance
• Dental Insurance
• Life and AD&D Insurance
• 401(k) Savings Plan
• Education and Professional Training
• Flexible Spending Accounts (FSA)
• Employee Referral and Merit Recognition Programs
• Employee Assistance and Identity Theft Protection
• Paid Holidays: 11 per year
• Paid Time Off (PTO)
• Disability Insurance

ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis ofrace, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

********Direct Applicants, only.No Agencies, No third-party recruiters, please********