Cyber Security Analyst III - Digital Forensics and Incident Response

Accountabilities:: Conduct digital forensic investigations on targeted endpoints using appropriate forensic tools and methodologies. Monitor, analyze, and respond to security events across the enterprise using SIEM, NIDS, SOAR, endpoint protection, firewall, DLP, email filtering, vulnerability scanning, and PCAP technologies. Identify reportable security incidents in accordance with established procedures and serve as an incident handler throughout investigation and response activities. Collect and analyze relevant data, evidence, and artifacts; document findings; prepare incident reports; communicate results to management; and execute mitigation, containment, and recovery activities. Monitor security reports and threat intelligence from multiple sources and translate relevant findings into actionable response activities. Distribute threat advisories, vulnerability reports, and official cybersecurity directives to appropriate customers and leadership. Participate in disaster recovery exercises and cybersecurity-related events. Support the operation, maintenance, and continuous improvement of cybersecurity tools and technologies. Contribute to cybersecurity audits, assessments, investigations, and information requests. Independently manage assigned projects and processes while maintaining appropriate priorities and meeting operational objectives. Review and coach the work of junior professionals and provide technical mentoring and training to developing analysts. Perform additional cybersecurity duties and responsibilities as assigned. Maintain the physical capabilities required for extended computer use, including repetitive keyboarding, visual and communication activities, occasional bending, kneeling, reaching, lifting, and safe travel by vehicle or aircraft. Requirements Bachelor’s degree and 5+ years of relevant experience, or an equivalent combination of education, training, and professional experience. Experience in cybersecurity, information technology, systems analysis, or a related field, with hands-on experience in incident response and/or digital forensics. Working knowledge of recognized cybersecurity compliance frameworks such as NIST, CIS Critical Security Controls, or ISO 27001/27002. Strong analytical and investigative abilities, with the capacity to collect evidence, assess security events, identify threats, and determine appropriate response actions. Ability to independently set priorities, manage multiple responsibilities, and complete projects with limited supervision. Excellent written, verbal, and interpersonal communication skills, including the ability to communicate technical findings clearly to different audiences. Strong teamwork and collaboration skills, combined with a customer-focused approach. Experience working in industrial control system (ICS), operational technology (OT), or federal FISMA-regulated environments is preferred. Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline is preferred. Industry certifications such as GCFA, GCIH, GNFA, CySA+, or CEH are preferred. Ability to pass required pre-employment background and drug screening. Must have identification compliant with the REAL ID Act at the time of hire. Ability to obtain and maintain a Department of Energy access authorization and HSPD-12 Personal Identity Verification (PIV) credential, including successful completion of the required federal background investigation. Ability to comply with applicable federal requirements governing controlled substances as a condition of employment. Benefits Annual salary range of $100,457–$161,384 USD . Paid holidays. Paid time off. 401(k) retirement plan with employer matching. Health insurance options through the Federal Employee Health Benefits (FEHB) program. Dental insurance. Vision insurance. Life insurance benefits. Disability benefits. Full-time remote work within the United States. Opportunity to work on mission-critical cybersecurity operations in a federal environment. Professional development through exposure to digital forensics, incident response, threat intelligence, security operations, and regulated cybersecurity frameworks.