Forensics Lead

MANTECH seeks a motivated, career, and team-oriented Forensics Lead to support a DHS customer in Chandler, AZ OR the National Capital Region . As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a "kill chain" process to thwart Advanced Persistent Threats (APT). Key Responsibilities Conduct remote imaging and digital media analysis using enterprise forensic tools. Perform reverse engineering of malicious code to identify indicators of compromise. Support legal and investigative organizations by preserving forensically sound data. Respond to email attacks by identifying and blocking malicious domains and metadata. Thwart Advanced Persistent Threats (APT) using forensic "kill chain" processes. Minimum Qualifications Bachelor's Degree. 5+ years of security-related experience with extensive digital forensics background. One of the following: CISSP (Associate), CCSP, SSCP, GMON, GCIH, GCIA, GECD, CEH, or CASP AND one from the DOD 8570 CSSP list. Preferred Skills Experience in a malware analysis lab using VM sandboxing and packet-level traffic analysis. Technical expertise in performing packet-level traffic analysis. Clearance Requirements Must be a U.S. Citizen. Active Secret clearance, AND TS/SCI Eligibility Must be able to obtain and maintain an ICE Entry on Duty (EOD) Suitability. Physical Requirements Must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers. Proven ability to reverse engineer malicious code and identify indicators of compromise. Experience supporting legal organizations with forensically sound data preservation. Experience with post-quantum computing assessment/implementation MANTECH International Corporation considers all qualified applicants for employment without regard to disability or veteran status or any other status protected under any federal, state, or local law or regulation. If you need a reasonable accommodation to apply for a position with MANTECH, please email us at View email address on click.appcast.io and provide your name and contact information. #J-18808-Ljbffr ManTech