Insider Security Computer and Forensics Investigator – Computer and Network Security Investigator TS/SCI REQUIRED

Description

Job Description:

Primary Responsibilities:

• Investigate suspected instances of fraud, waste and abuse, data spills, and network penetrations.
• Investigate and eradicate computer viruses and malicious code.
• Provide computer incident and violation response support, and cyber security awareness and training.
• Participate in technical meetings and working groups to address issues related to computer security and vulnerabilities.
• Develop and deliver reports and briefings.
• Evaluate system and program security vulnerabilities; develop procedures and countermeasures that protect operations.
• Incorporate all security disciplines; recommend and develop requirements, specifications, designs, and procedures that satisfy program security policy and planning guidance.
• Monitor implementation of security requirements for Government and Industry facilities and systems.

Forensic:

• uses a variety of forensics and intrusion detection tools to conduct forensic examination activities including assisting in the analysis of various types of networks, computer and technology devices which may contain digital evidence.
• Provide computer incident and violation response support and will participate in technical meetings and working groups to address issues related to computer security, protection against malware, and other vulnerabilities.
• Investigate alerts identified by various security appliances and review audit logs to determine if an incident has occurred.
• Use best practices to document and preserve digital evidence for legal proceedings.

Basic Qualifications:

All applicants must have an active TS/SCI clearance and agree to undergo a Polygraph examination to be considered for this position.

Education:

• BA/BS in Engineering, Computer Science or related science field preferred. A minimum of 5 years' experience in Computer Science, Software Engineering, Information Security fundamentals or general IT. Additional relevant experience in lieu of degree may be considered.

Years of experience:

• Minimum 5 years of technical experience working in a client/server environment. The applicant should have knowledge in the proper use of computer forensics and security compliance tools, and experience conducting network-based incident investigations.
• Applicant should have experience with Guidance Software toolsets to include EnCase Forensics and EnCase Enterprise and have demonstrated understanding of client/server architecture and TCP/IP protocols.
• Applicant should have knowledge of modern Windows Server platforms and desktop operating systems.
• Applicant should have experience maintaining "chain of custody" by following standard rules of digital evidence.
• Candidate should have an in-depth working knowledge in DOD and IC intelligence regulations, be familiar with intelligence oversight principles, must possess superior writing and briefing skills, and be capable of providing polished analysis documentation.

Preferred Qualifications:

• Understand how various attacks work at the memory and register level.
• Experienced with UNIX/Linux operating systems and various programming and scripting languages are desired.
• Experienced utilizing Microsoft SQL server, BindView, ArcSight, and Carbon Black would be beneficial.
• Proficiency using MS-Office tool suite is desired, as is knowledge of all Microsoft Office Suite applications and uses.
• Prior experience with network intrusion is desired.
• Experience authoring and executing plans and programs at the headquarters or agency level is beneficial.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.