Digital Forensic Examiner, Senior

The Opportunity:

You are a digital forensic examiner that figures out when a nefarious actor breached a system and what tools, tactics, and procedures they used. You understand the ever-evolving environment of cybersecurity and how new malware will affect different systems. You have a keen desire to learn and adapt to dynamic changes. Analytical thinking, attention to detail, and puzzle solving are among the many facets you possess. As a skilled forensic investigator, you can trace the trail of an intruder and know where and when artifacts are left on the system.

Now imagine yourself in a place where you are no longer constrained by the "push-button" and "wipe-and-remediate" culture of incident response. A place where you will be afforded the time, resources, and toolsets to dive deep and explore the most advanced malware exemplars you have ever seen. A place where your technical skill is highly regarded, and you are readily given the education and training resources to expand your knowledge exponentially. Most importantly, it is a place where real impact is seen, and many more untold accomplishments are made quietly in the shadows.

As a digital forensic examiner in our company, you will no longer have to imagine a place like this, because it will become your reality. We have an immediate opportunity for a digital forensics and malware analyst like you. You will be conducting examinations and analysis of emerging threats and previously unknown malicious exploits. You will have access to industry leading tools and optimized technical environments. All while working alongside colleagues and clients united in their efforts to ensure our nation's security. Are you ready to make a difference and accelerate your technical development?

Join us. The world can't wait.

You Have:

• 5+ years of experience with systems engineering and computing platforms, including Windows, OSX, and Linux
• 5+ years of experience with forensic analysis techniques, including traditional disk image analysis, memory analysis, and malware analysis
• 5+ years of experience with commercial off the shelf forensics products, including EnCase, SIFT, X-Ways, or Forensic Toolkit (FTK)
• Experience with Virtual Machines and using VMware to build various test harnesses of mixed virtual machine types, including Windows and Linux variants
• Experience analyzing hosts compromised by malicious code and determining the chronology of events leading up to infection
• Ability to travel up to 25% of the time
• TS/SCI clearance with a polygraph
• Bachelor's degree

Nice If You Have:

• Experience with computer networking and network traffic analysis
• Experience writing scripts in Python
• Ability to work in an environment of rapidly changing requirements in support of the client mission
• Ability to work individually and collaboratively within a team, and proactively engage new tasking
• Ability to analyze software deficiencies and give risk assessment of anomalies not resolved
• Ability to document or present forensic findings during a formal review before peers or clients
• Ability to work with vague requirements, perform technical demonstrations, and investigate innovative technologies
• ACE, EnCE, GCFE, CCI, GREM, CHFI, GCFA, or CCFP Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with polygraph is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.