Viperion Tech Llc
Springfield, Virginia
Job DescriptionJob DescriptionResponsibilities include but are not limited to:• Ensure Reporting Excellence & Process Adherence: Guarantee the completion of accurate and timely reports, ensuring all processes and activities align with established timeframes and standard operating procedures.• Provide Comprehensive CI Cyber Support: Offer written and technical analysis to support teammates in completing forensic reports, CI Cyber inquiries, and all recurring monthly, quarterly, and annual CI Cyber Threat reports, contributing to a deeper understanding of specific threats.• Conduct Threat Detection and Analysis: Detect anomalous network activity through data analysis, evaluate intrusion detection systems, incident tickets, event and log analysis, and security change tracking. Perform thorough threat analysis, generate forecasts and alerts, and recommend effective countermeasures.• Investigate Malicious Code and Mitigate Risks: Investigate instances of malicious code to determine attack vectors, payloads, origins, and the extent of damage or data exfiltration. Identify risks to computer systems and propose corrective actions or software recommendations to mitigate malware intrusions.• Develop Requirements and Document Best Practices: Identify, analyze, define, and coordinate user, customer, and stakeholder needs, translating them into technical requirements. Document best practices, lessons learned, processes, and procedures for quality assurance.• Collaborate and Liaise for CI Cyber Mission: Collaborate extensively with internal NGA teams (including the CI Office, Insider Threat, and CSOC) and external IC/Cyber community members. Participate in technical meetings and working groups to address malware threats and vulnerabilities, and coordinate CI Cyber activities stemming from Enterprise Incident Response Events.• Lead Malware Threat Awareness and Program Development: Assist in developing and delivering malware threat awareness products and briefings. Work independently to drive the development of a premier malware program through active collaboration with computer security and CI investigators, forensic analysts, and other relevant organizations. Minimum Qualifications:• Shall possess a minimum of 7 years Network Analysis experience.• Shall identify, decipher, and understand network artifacts.• Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification. Desired Qualifications:• Be a credentialed graduate of an accredited federal or DoD CI training academy. • Possess a Bachelor's degree in a Science, Technology, Engineering or Mathematics discipline.• Possess a DoD Cyber Crimes Investigator certification.• Possess a post-graduate degree in a Science, Technology, Engineering or Mathematics discipline.• Experience with malware analysis.• Possess knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Gov. • Possess ability to coach teammates to achieve objectives.• Possess ability to monitor and track progress towards achievable measures. Clearance Requirements: Must have a TS/SCI with the ability to pass a CI Poly Physical Requirements: The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.
Job DescriptionJob DescriptionResponsibilities include but are not limited to:• Ensure Reporting Excellence & Process Adherence: Guarantee the completion of accurate and timely reports, ensuring all processes and activities align with established timeframes and standard operating procedures.• Provide Comprehensive CI Cyber Support: Offer written and technical analysis to support teammates in completing forensic reports, CI Cyber inquiries, and all recurring monthly, quarterly, and annual CI Cyber Threat reports, contributing to a deeper understanding of specific threats.• Conduct Threat Detection and Analysis: Detect anomalous network activity through data analysis, evaluate intrusion detection systems, incident tickets, event and log analysis, and security change tracking. Perform thorough threat analysis, generate forecasts and alerts, and recommend effective countermeasures.• Investigate Malicious Code and Mitigate Risks: Investigate instances of malicious code to determine attack vectors, payloads, origins, and the extent of damage or data exfiltration. Identify risks to computer systems and propose corrective actions or software recommendations to mitigate malware intrusions.• Develop Requirements and Document Best Practices: Identify, analyze, define, and coordinate user, customer, and stakeholder needs, translating them into technical requirements. Document best practices, lessons learned, processes, and procedures for quality assurance.• Collaborate and Liaise for CI Cyber Mission: Collaborate extensively with internal NGA teams (including the CI Office, Insider Threat, and CSOC) and external IC/Cyber community members. Participate in technical meetings and working groups to address malware threats and vulnerabilities, and coordinate CI Cyber activities stemming from Enterprise Incident Response Events.• Lead Malware Threat Awareness and Program Development: Assist in developing and delivering malware threat awareness products and briefings. Work independently to drive the development of a premier malware program through active collaboration with computer security and CI investigators, forensic analysts, and other relevant organizations. Minimum Qualifications:• Shall possess a minimum of 7 years Network Analysis experience.• Shall identify, decipher, and understand network artifacts.• Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification. Desired Qualifications:• Be a credentialed graduate of an accredited federal or DoD CI training academy. • Possess a Bachelor's degree in a Science, Technology, Engineering or Mathematics discipline.• Possess a DoD Cyber Crimes Investigator certification.• Possess a post-graduate degree in a Science, Technology, Engineering or Mathematics discipline.• Experience with malware analysis.• Possess knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Gov. • Possess ability to coach teammates to achieve objectives.• Possess ability to monitor and track progress towards achievable measures. Clearance Requirements: Must have a TS/SCI with the ability to pass a CI Poly Physical Requirements: The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.
Viperion Tech Llc
Springfield, Virginia
Job DescriptionJob DescriptionThe CI Digital Forensic Examiner is tasked to produce, on average per annum, 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements. Responsibilities include but are not limited to:• Produce 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements. • Perform Digital Media Acquisition and Digital Forensic Review of various platforms to include Windows, Linux, and Mac OS based systems using a variety of digital forensic tools. • Investigate suspected instances of computer, mobile device, and network penetrations. • Ingest media into an archive, copy media images, and employ advanced media forensics tools during a forensic examination (ENCASE and Windows Forensic Toolkit are two of the many tools used for media forensics). • Investigate computer viruses and malicious code and prepare, write, and present reports and briefings. • Provide weekly status updates when conducting forensics • Provide a written report at the conclusion of each forensics examination. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance): o Case File Number o Computer Name o User Name, File Names, etc o Background o Investigation Details o Status/Disposition o Recommendations • Intelligence Information Report (if deemed necessary by government lead) o Case File Number o Computer Name o User Name o Background o Investigation Details o Status/Disposition • Personnel will support CI Incident Assessments to determine possible foreign intelligence entity involvement with an NGA computer system. In the process of supporting an Incident Assessment, reports must be produced and updated weekly. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance): • Perform in-depth forensics examinations of computers, mobile devices, networks and other electronic and digital devices. • Possess experience conducting computer forensics analysis within the Department of Defense and/or Intelligence Community. • Attend periodic CI and law enforcement community cyber investigations awareness briefings. • Brief CI cyber products and CI cyber service results to senior NGA leadership. • Collaborate with internal and external Intelligence Community partners to share and gather technical threat information to enhance forensics examinations. • Integrate information from forensics examinations and compile results into reports as required. • Prepare and present forensic findings in the form of briefings and/or reports, to government leads and managers as required. • Participate in Intelligence Community and Department of Defense technical exchange and collaboration meetings as required. • Produce detailed CI cyber forensics reports as required. • Provide support to all CI mission functions as required. • Participate in IC Community and NGA technical meetings and working groups to address issues related to computer security and vulnerabilities. • Investigate suspected instances of computer, mobile device, and network penetrations. • Effectively utilize all applications and common analytic software tools (i.e., Word, Excel, PowerPoint, Analyst Notebook). • Coordinate CI Cyber activities originating from Enterprise Incident Response Events. • Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission Minimum Qualifications:• Shall possess a minimum of 7 years forensic experience in CI or law enforcement investigations • Gain and maintain a digital forensic examiner certification within six months of assignment. Qualifying certification sources include government, military, and industry. • Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification. Desired Qualifications:• Be a credentialed graduate of an accredited federal CI, federal law enforcement, DoD CI, or DoD Law Enforcement training academy (ex. FBI Academy). • Possess a Bachelor's degree in a Science, Technology, Engineering or Mathematics discipline.• Possess and demonstrate knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and cyber threats posed to NGA, DoD, and IC partners.• Possess a DoD Cyber Crimes Investigator certification.• Experience with the latest forensic technologies such as Access Data Forensic Toolkit (FTK). • Possess a digital forensic examiner certification. Qualifying certification sources include government, military, and industry. • Possess ability to coach teammates to achieve objectives.• Possess ability to monitor and track progress towards achievable measures. Clearance Requirements: Must have a TS/SCI with the ability to pass a CI Poly Physical Requirements: The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.
Job DescriptionJob DescriptionThe CI Digital Forensic Examiner is tasked to produce, on average per annum, 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements. Responsibilities include but are not limited to:• Produce 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements. • Perform Digital Media Acquisition and Digital Forensic Review of various platforms to include Windows, Linux, and Mac OS based systems using a variety of digital forensic tools. • Investigate suspected instances of computer, mobile device, and network penetrations. • Ingest media into an archive, copy media images, and employ advanced media forensics tools during a forensic examination (ENCASE and Windows Forensic Toolkit are two of the many tools used for media forensics). • Investigate computer viruses and malicious code and prepare, write, and present reports and briefings. • Provide weekly status updates when conducting forensics • Provide a written report at the conclusion of each forensics examination. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance): o Case File Number o Computer Name o User Name, File Names, etc o Background o Investigation Details o Status/Disposition o Recommendations • Intelligence Information Report (if deemed necessary by government lead) o Case File Number o Computer Name o User Name o Background o Investigation Details o Status/Disposition • Personnel will support CI Incident Assessments to determine possible foreign intelligence entity involvement with an NGA computer system. In the process of supporting an Incident Assessment, reports must be produced and updated weekly. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance): • Perform in-depth forensics examinations of computers, mobile devices, networks and other electronic and digital devices. • Possess experience conducting computer forensics analysis within the Department of Defense and/or Intelligence Community. • Attend periodic CI and law enforcement community cyber investigations awareness briefings. • Brief CI cyber products and CI cyber service results to senior NGA leadership. • Collaborate with internal and external Intelligence Community partners to share and gather technical threat information to enhance forensics examinations. • Integrate information from forensics examinations and compile results into reports as required. • Prepare and present forensic findings in the form of briefings and/or reports, to government leads and managers as required. • Participate in Intelligence Community and Department of Defense technical exchange and collaboration meetings as required. • Produce detailed CI cyber forensics reports as required. • Provide support to all CI mission functions as required. • Participate in IC Community and NGA technical meetings and working groups to address issues related to computer security and vulnerabilities. • Investigate suspected instances of computer, mobile device, and network penetrations. • Effectively utilize all applications and common analytic software tools (i.e., Word, Excel, PowerPoint, Analyst Notebook). • Coordinate CI Cyber activities originating from Enterprise Incident Response Events. • Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission Minimum Qualifications:• Shall possess a minimum of 7 years forensic experience in CI or law enforcement investigations • Gain and maintain a digital forensic examiner certification within six months of assignment. Qualifying certification sources include government, military, and industry. • Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification. Desired Qualifications:• Be a credentialed graduate of an accredited federal CI, federal law enforcement, DoD CI, or DoD Law Enforcement training academy (ex. FBI Academy). • Possess a Bachelor's degree in a Science, Technology, Engineering or Mathematics discipline.• Possess and demonstrate knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and cyber threats posed to NGA, DoD, and IC partners.• Possess a DoD Cyber Crimes Investigator certification.• Experience with the latest forensic technologies such as Access Data Forensic Toolkit (FTK). • Possess a digital forensic examiner certification. Qualifying certification sources include government, military, and industry. • Possess ability to coach teammates to achieve objectives.• Possess ability to monitor and track progress towards achievable measures. Clearance Requirements: Must have a TS/SCI with the ability to pass a CI Poly Physical Requirements: The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.