Forensics Lead

MANTECH seeks a motivated, career, and team-oriented Forensics Lead to support a DHS customer in Chandler, AZ OR the National Capital Region .

As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a "kill chain" process to thwart Advanced Persistent Threats (APT).

Key Responsibilities

• Conduct remote imaging and digital media analysis using enterprise forensic tools.
• Perform reverse engineering of malicious code to identify indicators of compromise.
• Support legal and investigative organizations by preserving forensically sound data.
• Respond to email attacks by identifying and blocking malicious domains and metadata.
• Thwart Advanced Persistent Threats (APT) using forensic "kill chain" processes.

Minimum Qualifications

• Bachelor's Degree.
• 5+ years of security-related experience with extensive digital forensics background.
• One of the following: CISSP (Associate), CCSP, SSCP, GMON, GCIH, GCIA, GECD, CEH, or CASP AND one from the DOD 8570 CSSP list.

Preferred Skills

• Experience in a malware analysis lab using VM sandboxing and packet-level traffic analysis.
• Technical expertise in performing packet-level traffic analysis.

Clearance Requirements

• Must be a U.S. Citizen.
• Active Secret clearance, AND TS/SCI Eligibility
• Must be able to obtain and maintain an ICE Entry on Duty (EOD) Suitability.

Physical Requirements

• Must be able to remain in a stationary position 50% of the time.
• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers.
• Proven ability to reverse engineer malicious code and identify indicators of compromise.
• Experience supporting legal organizations with forensically sound data preservation.
• Experience with post-quantum computing assessment/implementation