MANTECH seeks a motivated, career, and team-oriented Forensics Lead to support a DHS customer in Chandler, AZ OR the National Capital Region.

As part of this mission, you will help the organization maintain its prestigious designation as a Cybersecurity Service Provider (CSP) and Center of Excellence (COE). Our team provides comprehensive, 24/7/365 security services supporting an expansive network across LANs, WANs, and advanced Cloud-based infrastructures. This is a unique opportunity to utilize a "kill chain" process to thwart Advanced Persistent Threats (APT).

Key Responsibilities:

• Conduct remote imaging and digital media analysis using enterprise forensic tools.

• Perform reverse engineering of malicious code to identify indicators of compromise.

• Support legal and investigative organizations by preserving forensically sound data.

• Respond to email attacks by identifying and blocking malicious domains and metadata.

• Thwart Advanced Persistent Threats (APT) using forensic "kill chain" processes.

Minimum Qualifications:

• Bachelor's Degree.

• 5 years of security-related experience with extensive digital forensics background.

• One of the following: CISSP (Associate), CCSP, SSCP, GMON, GCIH, GCIA, GECD, CEH, or CASP AND one from the DOD 8570 CSSP list.​

Preferred Skills:

• Experience in a malware analysis lab using VM sandboxing and packet-level traffic analysis.

• Technical expertise in performing packet-level traffic analysis.

Clearance Requirements:

• Must be a U.S. Citizen.

• Active Secret clearance, AND TS/SCI Eligibility

• Must be able to obtain and maintain an ICE Entry on Duty (EOD) Suitability.

Physical Requirements:

• Must be able to remain in a stationary position 50% of the time.

• Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers and customers.

• Proven ability to reverse engineer malicious code and identify indicators of compromise.

• Experience supporting legal organizations with forensically sound data preservation.

• Experience with post-quantum computing assessment/implementation