Apply on Employer Site

Peraton · 4 hours ago

Forensic and Incident Response Engineer

United States

Full-time

Remote

Senior Level

$80K/yr - $128K/yr

5+ years exp

Peraton is a next-generation national security company that drives missions of consequence spanning the globe. They are seeking a Forensic and Incident Response Engineer to lead technical incident response activities, conduct digital forensic analysis, and support root-cause analysis while ensuring compliance with cybersecurity regulations.

Information TechnologyRobotics

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead technical response to security incidents, including containment, eradication, and recovery

Perform digital forensic analysis on endpoints, servers, applications, network traffic, and cloud environments using forensically sound procedures to identify network / computer intrusion evidence and identifies perpetrators

Examine any electronic device that may hold evidence that could be used in a court of law and

Gather, handle and store evidence

Perform a variety of forensic and electronic discovery services, including digital evidence preservation, forensic analysis, data recovery, tape recovery, electronic mail extraction, and database examination

Collect, preserve, and analyze evidence in accordance with forensic best practices and legal requirements observing proper evidence custody and control procedures, document procedure and findings in a manner suitable for courtroom presentation and prepare comprehensive written notes and reports

Investigate malware, intrusions, unauthorized access, and data infiltration and exfiltration events

Analyze logs, memory, disk images, and network captures to determine attack scope and impact

Develop timelines, root-cause analysis, and incident reports for both technical and executive audiences

Support threat hunting and detection engineering efforts using forensic findings

Collaborate with the CSOC, engineering, legal, and compliance teams during incidents

Participate in on-call or surge incident response rotations

Assist with development and maintenance of incident response playbooks and procedures

Support security tooling evaluations and forensic lab improvements

Participate in tabletop exercises and readiness testing

Contribute to security awareness or training efforts using incident lessons learned

Maintain forensic documentation, case notes, and evidence records

Qualification

Digital ForensicsIncident ResponseCybersecurityForensic Tools ProficiencyTCP/UDP AnalysisIncident Investigation LeadershipMalware Reverse EngineeringCybersecurity Standards KnowledgeAnalytical SkillsDiscretionMITRE ATT&CK FamiliarityProblem-Solving SkillsCommunication SkillsIntegrity