Computer Forensics & Intrusion Analyst II – Investigation Support Analyst

The contractor shall be staffed with two Investigation Support Analyst staffed in Camp Spring, MDs or meet the requirements for Telework with the following qualifications:

• Three years of experience with EnCase, FTK, AXIOM, Blacklight or other comparable forensic tools; as well as physically imaging (acquisition) of hard drive disks and other media; two years of experience with FireEye and Splunk
• Hands-on experience in understanding of programming languages and different operating systems and their concepts
• Shall have two of the following Digital forensics/incident response training and certifications, including SANS GIAC (GCIA, GCFA, GCFE, GNFA, GCCC, and/or GREM), IACIS (CFCE or CIFR), Guidance Software/Open Text (EnCE) or similar experience which must be approved in advance by the Security Operations Branch PM on a case-by-case basis
• Shall be able to attain up to a Final TOP SECRET SCI level
• Must meet SCI eligibility (ICD 704) with no Waivers or Conditions