Address
Form of workDescription:
**MUST HAVE ACTIVE TS/SCI w/ CI Poly Eligibility
Conducts digital media investigations and operations. Examines the hard drives of computers, storage devices, cell phones, PDAs, or any electronic device that may hold evidence that could be used in a court of law. Performs forensic analysis of digital information and gathers and handles evidence. Performs a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination. Uses forensically sound procedures to identify network computer intrusion evidence and identifies perpetrators. Employs forensic tools and techniques to support investigation of computer fraud or other electronic crimes, crack files and system passwords, detects steganography and recovers deleted, fragmented, and corrupted data from digital media of all types. Observes proper evidence custody and control procedures, documents procedures and findings in a manner suitable for courtroom presentation and prepares comprehensive written notes and reports. May be required to testify in federal/military court as expert witnesses.
Qualifications:
•Requires a BA/BS in Computer Science, Forensic Science or related fields with 8-10 years relevant experience; or 6-8 years’ experience with MS/MA; or 3-5 years with PhD.
•At minimum, 5+ years’ experience conducting Digital Forensics on varying media sources to include; disk images, host-based and/or network logs, physical and virtual disk media within Windows and/or Linux operating system environments.
•Demonstrated experience in the field of digital media forensics using forensics tools such as: EnCase, Forensic Toolkit (FTK), and/or X-Ways.
•Experience identifying and reconstructing malicious activity to distinguish and pattern anomalous events from authorized device usage through logical and/or deleted artifact sources.
•Understanding of common cyber-attack methodologies and exploit techniques in alignment with the cyber kill-chain.
•Ability to research and apply effective indicators of compromise (IOC) to correlate vulnerabilities of known cyber-attack techniques employed during host-based exploitation.
•Familiarity in host-based security log parsing to include Windows Events and/or Linux audit log data sources.
•Experience analyzing and parsing Windows or Linux web service logs via command-line tools and techniques to isolate relevant audited events having been captured.
•Familiarity with client security and/or anti-virus clients’ application logs for threat detections.
•Knowledge and experience of virtual environments and network protocols and topologies.
•Understanding of NTFS and/or ext file systems in respect to their artifact source surface areas.
•Demonstrate and understand how to effectively apply investigative methodology throughout forensic examinations.
•Strong ability to work independently as well as collaboratively as part of a team as required under deadline driven environment.
•Strong writing with experience producing professional report deliverables clearly and concisely articulating relevant forensic analysis findings.
•Strong communicative and professional skills interacting with customers and team members.
•Strong ability to exercise initiative, problem-solving and critical thinking.
•Strong attention to detail required.
•Requires Top Secret/SCI clearance
Desired Skills:
•5+ years of experience with Windows system administration, to include Windows server and network infrastructure.
•Cloud Forensics experience.
Preferred Additional Skills
•One or more related certifications such as the GIAC, EnCE, CFCE, CCE, CISSP, DOD.
•Knowledge of a programming or scripting language.
•Incident Response experience.
•Mobile iOS and Android device analysis.
The contractor will specialize in international affairs and security cooperation, and will analyze statutes, laws, policies, international trends and forces, and identify opportunities for DC3 to support security cooperation efforts globally, as appropriate.
The contractor will develop and support execution of an international engagement strategies and plans, providing expertise on coordination and interaction with combatant commands and other stakeholders. Under the supervision of a government lead, this position will develop and maintain professional contacts with Secretary of the Air Force International Affairs (SAF/IA) and other service equivalents, USAFE, PACAF, and relevant directorates in the combatant commands (J2, J3, J5, J6, J7), the Defense Security Cooperation Agency, the Joint Staff, the Office of the Secretary of Defense, the Department of State, and Country Teams globally. In addition, the contractor will develop and maintain professional contacts with DC3 mission partners, including DoD investigative, counterintelligence and security agencies, as well as other interagency and international partners.
Qualifications:
•Demonstrate advanced knowledge of international relations principles, methods, practices, processes, and techniques.
•Demonstrate advanced knowledge and experience of Department of Defense and Department of State organizations, policies, and procedures relevant to security cooperation, security assistance and related matters.
•Proven experience in developing strategies and plans related to security cooperation and related matters.
•Proven experience in working with international partners.
•Knowledge and experience with Department of Defense law enforcement, counterintelligence and security organizations and/or US Cyber Command is desirable.
•Knowledge and experience of cyber-related matters is desirable, gained either in the private sector and/or in the US Government.
•Cyber-related certifications are desirable.
About TEKsystems:We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.
The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
