Cyber Security Analyst III – Digital Forensics and Incident Response

The Role

The position involves conducting endpoint forensic investigations, monitoring and responding to security events via SIEM, SOAR, NIDS, and PCAP tools, managing incident lifecycles from detection through containment and recovery, and contributing to audits, disaster recovery exercises, and continuous improvement of cybersecurity processes within a regulated federal environment.

Skills & Experience

Candidates need a bachelor’s degree and five or more years of experience in cybersecurity, with hands-on exposure to digital forensics and incident response. Familiarity with NIST, CIS Controls, or ISO 27001/27002 frameworks is required, along with strong analytical skills and experience across endpoint protection, DLP, firewalls, and vulnerability scanning tools.

Who It Suits

This role suits an experienced DFIR professional comfortable working independently in high-stakes federal or regulated environments. Those with a background in ICS or operational technology security and an interest in mentoring junior analysts while managing complex, mission-critical investigations will find this opportunity particularly rewarding.