Digital Forensics Incident Response Lead
Job description
What Your Day-To-Day Looks Like (Position Responsibilities):
- Lead CFL Digital Forensics and Incident Response activities.
- Manage intrusion analysis and incident response personnel.
- Direct network intrusion analysis, malware forensics, and memory analysis.
- Lead intrusion investigations and monitor investigative quality and efficiency.
- Analyze advanced persistent threat activity.
- Correlate findings from host forensics, network logs, and threat intelligence.
- Brief technical findings to Government leadership.
- Ensure all intrusion and incident response activities comply with the PWS.
- Serve as the primary Government technical point of contact for intrusion analysis and incident response.
- Proactively identify and communicate technical, programmatic, and resource limitations.
What You Need to Succeed (Minimum Requirements):
- TS/SCI clearance eligible.
- Active DFE, GCFA, GIAC Certified Incident Handler (GCIH), or equivalent certification approved by the COR.
- At least seven years of hands-on Digital Forensics and Incident Response experience, including at least five years focused on network intrusion analysis, malware forensics, and memory analysis.
- At least three years of leadership or supervisory experience within the last five years leading intrusion investigations, managing incident responders, and briefing technical findings to leadership.
- Demonstrated experience within the last three years analyzing advanced persistent threat activity and correlating findings across host forensics, network logs, and threat intelligence.
Skills mentioned
Spry Methods, Inc. is an established Small Business headquartered in McLean, Virginia, dedicated to providing innovative technology solutions to U.S. federal agencies, including the Department of Defense (DoD), Federal Civilian, Law Enforcement, and Intelligence Communities. Founded in 2001, Spry Methods has built a strong reputation for combining deep industry knowledge with exceptional responsiveness to deliver impactful results for its clients. The company focuses on several key areas, including Cybersecurity, Mission IT, National Security, Intelligence Analysis, and Emerging Technologies. Spry Methods is committed to quality and continuous improvement, holding certifications such as ISO 9001:2015, ISO/IEC 20000-1:2018, ISO/IEC 27001:2013, and a CMMI-SVC ML3 rating. Spry Methods offers a comprehensive range of services designed to address the complex challenges faced by modern government organizations. Their cybersecurity solutions aim to enhance security through proactive threat detection, robust risk management, and comprehensive incident response. In Mission IT, Spry supports federal agencies with DevSecOps, enterprise architecture, C5IT, and scalable cloud and on-premise solutions. The company's intelligence analysis capabilities span Open Source Intelligence (OSINT), Human Intelligence (HUMINT), Signals Intelligence (SIGINT), and Geospatial Intelligence (GEOINT). Furthermore, Spry Methods supports national security missions with services like watchlisting, visa vetting, redaction/minimization, mobile communications, training, and policy development. The company emphasizes an entrepreneurial work environment, valuing its employees as its most critical asset and fostering a culture that promotes initiative, integrity, accountability, and both personal and professional growth. Spry Methods actively recruits top talent and is dedicated to supporting its employees, clients, and the broader community.
Apply for this job
Use the application link supplied with this listing to apply to sprymethods. Check the destination before entering personal information.