Jobs for People with MS: National MS Society

ManTech seeks a motivated, career and customer-oriented Cyber Security Forensics Analyst to join our team in Stennis, MS .

In this role you will lead and conduct complex digital forensics investigations targeting systems and networks, identifying vulnerabilities, and supporting the development of new exploitation techniques. You will analyze cyber activities to identify entities of interest, determine malicious behavior, and recognize patterns and linkages.

Responsibilities include but are not limited to:

• Apply the MITRE D3FEND framework to develop and implement defensive measures against cyber threats.

• Utilize the MITRE ATT&CK framework and other techniques to identify, assess, and address cyber threats and vulnerabilities.

• Collaborate with other cybersecurity professionals, law enforcement agencies, and intelligence organizations to share information and coordinate response efforts.

• Conduct dynamic malware analysis and performing memory and dead-box forensics.

• Investigate computer and information security incidents to determine the extent of compromise to information and automated information systems. Develop and maintain standard operating procedures (SOPs) and rules of engagement (ROE) templates.

• Perform long-term and time-sensitive in-depth technical analysis of malicious code (malware), developing defensive countermeasures, and producing reports for dissemination.

• Using static and dynamic methodologies for malware analysis, such as debuggers, disassemblers, and sandbox execution.Write forensics and incident response reports, investigate computer attacks, and extract data from electronic systems.

Minimum Qualifications:

• 9+ years of progressively responsible experience in cyber security, incident response, or forensic investigations including malware analysis and a bachelor’s degree in computer science, engineering, information technology, cybersecurity, or related field of study

• An 8570 compliant certifications in IAT Level III

• One of the following relevant certifications: GIAC Certified Forensic Analyst (GCFA), Certified Information Systems Security Professional (CISSP), or Certified Cyber Forensics Professional (CCFP)

• Knowledge and experience with Threat Intel Frameworks (e.g. Cyber Kill Chain, MITRE ATT&CK, Diamond Model)

• Demonstrated experience using EnCase, FTK, and Open-Source methods and tools to perform Computer forensic investigations

• Experience with Splunk, CrowdStrike Falcon, Security Onion, EnCase, Axiom, FTK, Volatility, or Suricata.

• Experience with network topologies and network security devices (e.g. Firewall, IDS/IPS, Proxy, DNS, WAF, etc).

Clearance Requirements:

• Must have a current/active Secret clearance with the ability to obtain and maintain a TS/SCI.

• The ability to obtain and maintain a DHS EOD suitability is required prior to starting this position.

Physical Requirements:

• Must be able to remain in a stationary position for extended periods of time.

• Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.

• Constantly operates a computer and other office productivity machinery, such as a calculator, copy, machine, and computer printer.

• The person in this position frequently communicates with co-workers, management, and customers,

• which may involve delivering presentations. Must be able to exchange accurate information in these situations.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at careers@mantech.com and provide your name and contact information.