Investigative Analyst

Peraton is seeking an experienced Investigative Analyst to become a part of Peraton’s Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. 

Location: Arlington, VA. This position requires working on-site 5 days per week.

Role and Responsibilities: 

The U.S. Department of State, Computer Investigations and Forensics Division (DS/CTI/CIF) conducts digital evidence recovery and analysis in support of Diplomatic Security Service (DSS) criminal, cyber, and administrative investigations. 

The Digital Forensics Laboratory receives, processes, and analyzes digital evidence using a wide variety of advanced technologies, decryption schemes, and forensic tools in support of the DSS mission.  

In this role, you will: 

• Provide investigative analytical support by leveraging intelligence and law enforcement databases in support of Department of States’ criminal investigative mission.
• Conduct data analysis from a multitude of sources to identify patterns, trends and connections between offenders, victims, and other elements of an investigation.
• Identify and contextualize relevant internal, protected data with open-source or third-party data sets.
• Prepare actionable crime and intelligence reports and visualizations supporting on-going investigations.
• Engage in information sharing with Department of States’ criminal investigation teams and their partners.
• Stay up-to-date on investigative analysis tools and techniques.
• Manage and track Letter Head Memos (LHM) and the whole victim notification process.
• Assist the team with Significant Cyber Incident Response Plans (SCIRPs) or moderate incidents (MODs) by drafting preservation letters, reaching out to internet service provider (ISP) for preservation requests to inquire about snapshots, providing artifacts and forensic analysis reports, and providing intelligence summaries.
• Act as the CIF Cyber liaison and collaborate on intelligence community (IC) products.
• Independently pursue cybercrime or LE investigative leads referred by the DS office or other agencies by conducting OSINT, SOCMINT, DARWEBINT, and HUMINT.
• Conduct cloud forensics to investigate a potentially compromised state asset, investigate passport fraud cybercrimes, and assist the Branch Chief with investigations related to joint DOS/DOJ cases.
• Conduct investigations involving crypto currency utilizing block chain analysis. Draft and send requests to preserve crypto evidence to seize the infrastructure or wallet.
• Conduct dark web investigations to support cases referred to by other offices. Conduct multi-layered OSINT.
• Review impersonation accounts to investigate criminal cybercrime elements.
• Provide Weekly Activity Report entries.

#DSCM

Required Qualifications

• Bachelor’s degree and a minimum of 2 years’ experience required. An additional 4 years of experience may be substituted in lieu of degree.
• Demonstrated knowledge of criminal investigations and operational and law enforcement techniques.
• Ability to extract and contextualize useful information from multiple data source types to support investigations.
• Familiarity using Maltego or similar software to perform data mining and visualizations.
• Experience utilizing investigative and intelligence analytical tools.
• Ability to collaborate effectively among cross-functional teams.
• U.S. Citizenship required.
• The ability to obtain and maintain a Top-Secret security clearance.