Peraton is looking for a Mobile Forensic Analyst in support of the Cyber Threat Analysis Division mission. 

Location: Rosslyn, VA; Hybrid work schedule possible; 3 days per week on-site required after onboarding process is complete.

The Cyber Threat Analysis Division (DS/CTI/CTAD) conducts digital evidence recovery and analysis in support of online and cyber investigations involving Department of State information, systems and personnel, and technical surveillance investigative support.  The mobile forensic team utilizes a wide variety of advanced computer technologies and tools in support of analyzing cyber intrusions.

In this role, you will:  

• Conduct forensic examinations of mobile devices (e.g. Android and IOS phones).
• Perform consolidated and comprehensive information and intelligence analysis of mobile threat data obtained from classified, proprietary, and open-source resources to provide awareness to relevant stakeholders.
• Analyze and report on unique attack vectors, emerging cyber threats, and current trends used by malicious actors.
• Assess the cyber threat environment for U.S. missions worldwide.
• Ensure that forensic community accepted principles and practices are applied.
• Utilize industry accepted forensic tools to perform analysis, including but limited to Encase, FTK, Cellebrite, and other commercial and open-source forensic software.
• Collaborate with other forensic analysts, law enforcement officers, and legal experts to identify and recommend methods and procedures for recovery, preservation, analysis, and presentation of digital evidence.
• Travel to domestic locations and overseas missions in support of evidence collection.
• Need to work 3 days per week on-site (required) after onboarding process is complete.

#DSCM

Qualifications: At a minimum you MUST have:

• A Bachelor’s degree and a minimum of 5 years’ experience. Four (4) additional years of experience can be substituted in lieu of the degree requirement.
• Possess one of the following certifications: CAP, CASP+ CE, CCISO, CCNA-Security, CISM, CISSP (or Associate), CND, CSSLP, CySA+ , GICSP, GSEC, GSLC, Security+ CE, SSCP, PPDA, Agile IC, or SNOW App Dev.
• Demonstrated experience performing mobile device forensic acquisitions.
• Experience analyzing forensic images and data for indicators of compromise (IOCs), root cause and other relevant artifacts pertaining to network intrusion activity.
• Demonstrated critical, creative, and analytical thinking skills.
• Experience developing technically detailed reports that translate complex technical information to non-technical audiences.
• Travel to domestic locations and overseas missions in support of evidence collection.
• 3 days per week, on-site requirement after onboarding process is complete.
• U.S. citizenship and an active Secret security clearance to start. 
• The additional ability to obtain Top Secret/SCI security clearance.