Cyber Incident Response & Digital Forensics Lead (Top Secret clearance)
Washington, District Of Columbia
Experience: 12
Education: BA
Category: Information Technology
Brand: ALTA IT Services
Compensation Range: 175000.00 Per Year
Job ID: 333537
Date Posted: 03/25/2025
Shortcut: http://jobs.systemone.com/WwJoRJ
Cyber Incident Response & Digital Forensics Lead
Washington, DC - ONSITE
Clearance: Must possess active Top Secret security clearance
Salary: Up to $175K
ALTA IT Services is seeking a highly skilled and knowledgeable Cyber Incident Response & Digital Forensics Lead who will lead a team of incident responders and forensic analysts. This position is located on customer site in Washington, D.C.
Responsibilities include but are not limited to:
• Assist in analyzing alerts, identifying true positives, and prioritizing incidents and incident response based on severity and impact.
• Leading the analysis and identification of mobile threats, including malware, vulnerabilities, and other malicious activities targeting mobile devices and applications.
• Working with the SOC/watch floor to develop and refine incident response plans and SOPs.
• Gathering and analyzing extensive datasets to bridge informational gaps associated with cyber-attacks. This involves identifying perpetrators, understanding their intrusion methods, and meticulously documenting the precise sequence of actions that compromise system integrity.
• Gathering evidence, analyzing artifacts, and reconstructing events to understand the scope and impact of incidents, determine how the compromise occurred, and identify root causes.
• Conducting forensic analysis on systems and networks to determine the scope and impact of security incidents.
• Conducting regular joint training exercises and tabletop simulations help strengthen coordination between teams and ensure compliance with security policies.
• Conducting advanced malware analyses; devising and executing targeted threat mitigation strategies tailored to program and customer needs.
• Analyzing threat intelligence feeds, indicators of compromise (IOCs), and TTPs to identify and conduct incident response to emerging threats.
• Responsible for preserving and presenting evidence for legal proceedings.
Basic Qualifications:
• Bachelor’s degree, preferably in IT, cybersecurity, or related discipline.
• 12+ years of IT experience with 8+ years of cyber incident response experience.
• 2+ years experience leading a team of incident responders.
• 2+ years of experience with digital forensics,
• Must possess GIAC Certified Incident Handler (GCIH) certification.
• 3+ years of hands-on Splunk experience.
• Proficient understanding of mobile operating systems architecture (such as Android, iOS), including the security features and limitations of each platform, as well as proficient understanding of mobile application security, network protocols, and the potential exploitation vectors associated with mobile devices.
• Advanced knowledge of Windows, Linux, and macOS, enabling effective analysis and response across diverse technical environments
Preferred Qualifications:
Experience using the Axiom Forensics Suite.
Desirable certifications: GIAC Certified Forensic Analyst (GCFA), GIAC Network Forensic Analyst (GNFA).
Other preferred certifications: GIAC Continuous Monitoring Certification (GMON), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Cloud Threat Detection (GCTD), GIAC Cloud Forensics Responder (GCFR), GIAC Advanced Smartphone Forensics Certification (GASF), GIAC Mobile Device Security Analyst (GMOB).
#M2
Ref: #850-Rockville (ALTA IT)
System One, and its subsidiaries including Joulé, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
-
Cyber Security Operations Specialist
Springfield, Virginia
ALTA IT has a Contract to Hire position open for a Cyber Security Specialist. Active TS / SCI Clearance Onsite - Springfield, VA Positions for Entry Level to Mid-Level Shifts Available Below ALTA IT is looking for a Cyber Security Operations Specialist...
Date Posted: 04/03/2025 Recommended
-
RMF Cybersecurity Engineer (Zero Trust/AI) - TS/SCI clearance
Washington, District Of Columbia
RMF Cybersecurity Engineer (Zero Trust/AI) Washington, DC - hybrid (4 days onsite, 1 day remote) TS/SCI clearance is required to start Job Overview: Currently hiring for a RMF Cybersecurity Engineer with an active TS/SCI clearance in Washington, DC (4 ...
Date Posted: 04/10/2025 Recommended
-
Senior Cybersecurity Engineer
Miramar, FL
Job Summary: System One is seeking a Sr. Cybersecurity Engineer for a long-term opportunity in Miramar, FL. Responsibilities: Security Monitoring & Incident Response: Monitor security systems (SIEM/Endpoint Protection (AV, EDR, Zero Day, APT), DLP, IPS...
Date Posted: 03/26/2025 Recommended
-
Splunk Engineer/Admin
Annapolis Junction, Maryland
Splunk Engineer/Admin Locations: Annapolis Junction, MD | Alexandria, VA | Aurora, CO | San Diego, CA Clearance Required: TS/SCI with FS Poly (Sienna) (Must have FS Poly within the last 5 years – No CCAs) Compensation: $150-$200K Onsite Position Overvi...
Date Posted: 04/02/2025 Recommended
-
Cybersecurity Engineer
Melbourne, FL
Job Summary: System One is seeking a Sr. Cybersecurity Engineer for a long-term opportunity in Melbourne, FL or Mirimar, FL. Responsibilities: Security Monitoring & Incident Response: Monitor security systems (SIEM, IDS/IPS, firewalls) for suspicious a...
Date Posted: 02/20/2025 Recommended
-
Junior Administrator (Project Coordinator 1)
Martinsburg, Virginia
Position: Junior Administrator (Project Coordinator) *Bachelor's with 0-2 years experience (or commensurate experience) Location: ON SITE Martinsburg, WV Public Trust Required Position Description: Currently hiring for a Junior Level Administrator to s...
Date Posted: 03/18/2025 Recommended
-
Cybersecurity Compliance Lead
Washington, District Of Columbia
System One has a need for a Cybersecurity Compliance Lead to support our government customer located in Washington, DC. This position is 100% on site. DESCRIPTION OF RESPONSIBILITIES: Responsible for managing and supervising the cybersecurity personnel...
Date Posted: 03/07/2025 Recommended
-
Linux Systems Engineer (TS/SCI clearance) ONSITE
Herndon, VA
Linux Systems Engineer TS/SCI clearance is required Herndon, VA - ONSITE ALTA ITS is seeking a Linux Systems Engineer (Tier Ill) to work for a government contractor in the Herndon, VA area. This is an exciting opportunity to bring your skills to the ta...
Date Posted: 04/14/2025 Recommended
-
Security Architect Principle 3
Columbus, Ohio
System One has an exciting Principal Security Architect opportunity with an exciting partner. This position is a remote contract opportunity for 3 months. Successful candidates must be able to provide proof of ability to work in the U.S. without sponso...
Date Posted: 04/08/2025 Recommended
-
Senior Information Assurance Engineer (TS/SCI clearance)
Washington, District Of Columbia
Senior Information Assurance Engineer 100% remote TS/SCI clearance is required to start Job Responsibilities: • Lead efforts to remediate system vulnerabilities and close identified Plan of Action and Milestones (POA&Ms) • Lead efforts to Update securi...
Date Posted: 04/10/2025 Recommended
-
Firewall Engineer
Woodlawn, Maryland
SENIOR FIREWALL ENGINEER ONSITE- WOODLAWN, MD 12 MONTH+ CONTRACT HOURLY RATE: $90/HR. Benefits Available US Citizenship or Legal Permanent Residency Required – Ability to hold Public Trust Clearance ALTA IT Services has a 12-month+ contract opening for...
Date Posted: 03/12/2025 Recommended
-
Systems Administrator
Springfield , Virginia
ALTA IT has a Contract to Hire position open for a Systems Administrator. Active TS / SCI Clearance with the ability maintain a CI poly Onsite - Springfield, VA Night Shift / Weds (Alt) - Sat 1730-0530ET - 4 on, 3 off / 3 on, 4 off The Systems Administ...
Date Posted: 04/16/2025 Recommended
-
Team Lead Firewall Administrator
Bethesda, Maryland
ALTA is looking for a Team Lead Firewall Administrator to join a contract with a federal government client in support of an important mission. The Team Lead shall be able to provide overall supervision for vendor employees to include, but not limited t...
Date Posted: 02/03/2025 Recommended
-
Local Cybersecurity Coordinator
Crownsville, Maryland
LOCAL CYBERSECURITY COORDINATOR - SME Location: Crownsville, MD Remote with local travel HOURLY RATE: $65/hr. Benefits available Background check with fingerprint clearance required ALTA IT Services has two 12-month+ contract openings for Subject Matte...
Date Posted: 03/20/2025 Recommended
-
HSE Advisor
Batesburg-Leesville, South Carolina
HSE Advisor for Batesburg, SC Accountabilities: Establish, document, implement, maintain and continually improve the HSE Management System and Local Procedures; Ensure the implementation of the activities in compliance with HSE Policies, Customer Requi...
Date Posted: 03/26/2025 Recommended
-
Cyber Engineer - RMF
White Sands , New Mexico
ALTA IT Services is seeking a highly motivated, self-directed individual to fill the role of Cyber Engineer (RMF). We are looking for a Cyber Engineer (RMF) who is team-oriented with strong information assurance skills and experience. The selected indi...
Date Posted: 04/04/2025 Recommended
-
API Production Support
Ashburn, VA
API Production Support (Several Openings. 24x7 Production Support Team) Location: REMOTE Pay Rate: Open to W2 and C2C options Position Type: Multiyear Contract Requirements 24x7, Level 2 API support and incident response service team Expertise in MuleS...
Date Posted: 03/20/2025 Recommended
-
Salesforce Developer
Ashburn , Virginia
Job Title: Salesforce Developer Role Type: Direct Hire / Salaried Location: Ashburn, VA Hybrid onsite (2-3 per week) Security Clearance: CBP Public Trust (Any CBP Clearance will work) ALTA is looking for a Salesforce Developer to join a contract with a...
Date Posted: 02/06/2025 Recommended
-
Lockout/Tagout (LOTO) Coordinators (2)
Albuquerque, NM
Job Title: Lockout/Tagout (LOTO) Coordinator Company: System One Location: Los Alamos, New Mexico Clearance: Q Clearance Preferred Shifts: Back Shift or Weekend Shifts Available Job Summary: System One is seeking two experienced Lockout/Tagout (LOTO) C...
Date Posted: 04/17/2025 Recommended
-
Senior Solutions Architect (US citizenship)
Herndon, Virginia
Senior Solutions Architect 100% remote US Citizenship is required per government contract Ability to pass enhanced background screen (criminal, financial, drug) for Public Trust clearance ALTA is looking for a self-driven person to join our Cloud team....
Date Posted: 04/07/2025 Recommended
-
Digital Conversational AI Engineer (AI Azure Cognitive Services/CLU)
Ashburn, VA
Job Title: Digital Conversational AI Engineer Location: Hybrid Work Model Reporting to all campuses (HQ, WOC, GPO, and SD). Open to fully remote due to the niche skillset. Pay Rate: Open to Both C2C and W2 options Position Type: Multiyear Contract Desc...
Date Posted: 03/25/2025 Recommended
-
Senior Systems Engineer III
Clarksburg, West Virginia
ALTA IT has a Direct Hire position open for a Senior Storage Engineer. If you or anyone you know is interested in learning more, please send your updated resume to slandis@altaits.com. Looking forward to working with you! Looking for a Senior Storage E...
Date Posted: 04/10/2025 Recommended
-
Infrastructure Engineering Lead (Top Secret)
Huntsville, Alabama
Infrastructure Engineering Lead Huntsville, AL - onsite Top Secret clearance is required to start Salary: Up to $176K ALTA IT Services is seeking a highly skilled and knowledgeable Infrastructure Engineering Lead that is responsible for maintaining sys...
Date Posted: 03/24/2025 Recommended
-
Sr. SATCOM Engineer
Germantown, Maryland
IF INTERESTED REACH OUT DIRECTLY TO KSPICER@ALTAITS.COM OR CALL/TEXT 301-252-8762 Germantown, MD - onsite Direct HIRE Required: Green Card or US Citizen- based on gov requirement Sr SATCOM Engineer This role designs and implements SATCOM solutions for ...
Date Posted: 02/24/2025 Recommended
-
Senior Buyer, Indirect Procurement
Ewing, New Jersey
Job Title: Senior Buyer, Indirect Procurement Location: Ewing, NJ - Hybrid (Onsite Tuesday - Thursday, Remote Monday and Friday) Work Schedule: M-F 8:30 AM -4:30 PM, 30 min unpaid break (37.5 hours per week) Duration: 1 year contract Pay Rate: $40 - $4...
Date Posted: 04/10/2025 Recommended
-
Strategic Sourcing Manager
Ashburn, VA
Job Title: Strategic Sourcing Manager Location: Hybrid Work Model reporting to Vienna, VA 2-3 days a week Pay Rate: Open to Both C2C and W2 options Position Type: Multiyear Contract Job Description: Responsible for the development and execution of sour...
Date Posted: 03/11/2025 Recommended
-
NOC Technician (US Citizenship) 100% onsite
Silver Spring, Maryland
Network Operations Center Technician (NOC) Silver Spring, MD – 100% ONSITE US citizenship required per government contract Clearance: Must be able to obtain a Public Trust clearance MUST BE OPEN TO WORK ANY OF THE SHIFTS BELOW: Sunday – Wednesday: 06:0...
Date Posted: 04/08/2025 Recommended
-
ITOM ServiceNow Architect (Secret clearance)
Springfield, Virginia
ITOM ServiceNow Architect Secret clearance is required to start Springfield, Virginia - onsite Seeking an IT Operations Management (ITOM) ServiceNow Architect with proven experience with ServiceNow Discovery, the ServiceNow Common Services Data Model (...
Date Posted: 04/17/2025 Recommended
-
(2) Employee Relations Specialists
Reston, Virginia
SystemOne is seeking an Employee Relations Specialist to support our customer in Reston, VA (Preferred) will consider the right person in Glendale, AZ. Telework Type: Hybrid-Telework Job Summary: As an Employee Relations (ER) Specialist you will play a...
Date Posted: 04/17/2025 Recommended
-
Simulator Maintenance Technician II
Rapid City, South Dakota
System One is seeking a Simulation Maintenance Technician II for a long-term opportunity with a large simulation company in Rapid City, SD. The Simulator Maintenance Technician (II) is responsible for operations, maintenance and upkeep of B-1 Training ...
Date Posted: 04/15/2025 Recommended