<h3>Job Description</h3>
Job Description VACANCY ANNOUNCEMENT General Investigations Detective (DCJS L.E. certified) – Part Time Starting Salary: $30-40/ hourly (Negotiable with qualifications and experience) Background: The Fredericksburg Police department is accepting applications for the position of General Investigations Detective. Detectives are responsible for the prevention, detection, investigation, and prosecution of criminal violations related to crimes against persons and property in the City of Fredericksburg. Detectives may be assigned to investigate any type of crime, but assignments are typically made based upon the detective's training and experience. Detectives may be required to specialize in particular areas including, but not limited to: sex offenses, domestic violence, fraud, property crimes, major felonies and forensics. Part-time Detectives at the Fredericksburg Police Department work a flexible schedule approved by the Division Commander.&nbsp; This position may also require work outside the normal schedule to complete the mission.&nbsp; This part-time position requires a total of 24 hours of work commitment per week, for a total of 48 hours in a two-week work cycle. Salary will be commensurate with training and experience. Minimum requirements include: 
<ul>
<li>Current Virginia DCJS Certified officer with 3 years’ experience in law enforcement.</li>
<li>Have previously documented experience as a detective, investigator, agent, or other field of specialized criminal investigatory activities</li>
<li>Full Resume </li>
<li>No more than two moving violations within previous 24 months</li>
<li>No current or previous revocations of suspension of license within previous 60 months due to a moving violation</li>
<li>Undergo a background investigation including fingerprint-based criminal history records inquiries to both the CCRE and FBI</li>
<li>Undergo a physical examination, subsequent to a conditional offer of employment</li>
<li>Polygraph Examination</li>
<li>Must complete lawfit course</li>
</ul>
Duties: All detectives assigned to the General Investigations section are responsible for the following:
<ul>
<li>Upon being hired, completing a modified Field Training &amp; Evaluation Program </li>
<li>Producing well-documented reports, supplements, and investigations</li>
<li>Testifying in Court and Grand Jury proceedings</li>
<li>Assisting patrol officers with certain cases</li>
<li>Maintaining liaison with other agencies and detectives</li>
<li>Sharing information with other detectives and agencies regarding certain investigations</li>
<li>Working irregular hours upon short notice and participating in call-outs for major incidents</li>
<li>Carrying a department issued cell phone and subject to be called back to work when needed</li>
<li>Willing to work in an undercover capacity as required</li>
<li>Working closely with victim advocates, Commonwealth Attorneys, Social Services, and other service providers</li>
<li>Any other duties requested by a supervisor or the Detective Division Commander</li>
</ul>
Preferred Skills and Abilities: Candidates must possess an avid interest in being a General Investigations Detective and should possess the following in order to be successful:
<ul>
<li>Knowledge of laws and procedures related to criminal investigations</li>
<li>Knowledge of search and seizure laws and procedures</li>
<li>Knowledge of crime scene and evidence management</li>
<li>Knowledge of interview techniques to include but not limited to:
<ul>
<li>Reid Interview and Interrogation</li>
<li>ChildFirst Forensic Interviewing</li>
<li>Polygraph Examinations</li>
<li>Crisis Stabilization/Crisis Negotiation</li>
</ul>
</li>
</ul>
<ul>
<li>Knowledge of Virginia Department of Forensic Science Evidence Handling Techniques</li>
<li>Virginia Department of Forensic Science academy alumni</li>
<li>Fingerprint Examination/AFIS experience</li>
<li>Knowledge of Computer/Mobile Device forensics</li>
<li>Experience from any specialty task force assignment</li>
<li>Ability to work with minimal supervision or direct supervision where applicable</li>
<li>Ability to use computers to research information</li>
<li>Willingness to follow directions to achieve the goals and objectives of the division</li>
<li>Ability to react quickly both mentally and physically to potentially dangerous situations</li>
</ul>
 NOTE: No significance should be placed on the order of these skills and abilities. Come be part of a knowledgeable and amazing work team committed to excellence in serving a thriving and growing community.&nbsp; All City employees are committed to our City’s Core Values. This position is open until filled. For questions or to apply, contact Sergeant Heather Shepherd at <a href="mailto:hshepherd@pd.fredericksburgva.gov" target="_blank">hshepherd@pd.fredericksburgva.gov</a> or 540-654-5912.&nbsp; Additional information about our hiring process may be found on the Fredericksburg Police Department’s web page: Employment | Fredericksburg, VA - Official Website (fredericksburgva.gov) &nbsp;City of Fredericksburg Human Resources Department P. O. Box 7447 Fredericksburg, VA&nbsp; 22404-7447 <a href="mailto:Fxbghire@fredericksburgva.gov" target="_blank">Fxbghire@fredericksburgva.gov</a> &nbsp;
Powered by JazzHR
UjezEkc9O0

General Investigations Detective (DCJS L.E. Certified) - Part Time

<h3>Job Description</h3>
Marketing Statement
 
The Philadelphia Housing Authority, America's fourth largest public housing authority and leader in real estate development and property management is seeking an Investigator in the Office of Public Safety.
Under general supervision, investigates and resolves a variety of criminal, civil and internal complaints, charges and allegations regarding Philadelphia Housing Authority (PHA) clients, staff, and property to protect the integrity of the PHA Public Housing (PH) and Housing Choice Voucher (HCV) programs; performs other related duties as needed.
The Salary Range for this position is $53,659.00 - $67,073.00 annually. Placement at any specific point within the stated range is not guaranteed for any candidate. Final compensation will be determined based on the selected candidate's qualifications, experience, and skills, as well as internal equity and organizational considerations.
 
Qualifications
 
Physical demands, Activities, Environmental Conditions
Work is performed indoors and outdoors at PHA facilities and sites throughout the city of Philadelphia. Work settings may depend on their assignment or case. For example, some spend time in offices to research cases, or they work in the field/sites while doing surveillance. In addition, investigator may work outdoors or from a vehicle, in all kinds of weather, in order to obtain information. Investigators will obtain information and work with others while conducting surveillance or carrying out small or large, complex assignments. Their schedules may vary to include early mornings, nights, and weekends, especially when they conduct surveillance or contact people outside of normal business hours.

Travel required
Regular Travel throughout the City of Philadelphia

Minimum education
High School Diploma or GED equivalent.

Certifications, Clearances, and Licenses required
<ul>
<li>A valid Commonwealth of Pennsylvania Driver's License is required.</li>
<li>Training certifications in the use of the Philadelphia Crime Information Center database, the Pennsylvania Justice Network (JNET) and Commonwealth Law Enforcement Assistance Network (CLEAN) database, and the National Crime Information Center database are required.</li>
<li>Act 235 Lethal Weapons Certification (PA) required.</li>
</ul>
 
-Candidates must possess a valid Act 235 Certification at the time of hire, or be able to obtain certification prior to beginning armed duties.
 
-Applicants without current certification must demonstrate eligibility and willingness to complete all Act 235 requirements, including background checks, physical/psychological evaluations, and certified training.
 
Minimum experience
Two (2) or more years’ of experience in law enforcement or investigations.

Alternative Qualifications
An equivalent combination of education, training, certification and experience may be considered.

Preferred Qualifications/Experience
Bachelor's degree in criminal justice, forensic science, or a related field. Preferred experience includes prior law enforcement experience, such as a few years as a patrol officer, and specialized training from a police academy.
 
Responsibilities
 
Essential functions
Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of this position.
<ul>
<li>Investigates a variety of criminal, civil and internal complaints regarding PHA clients, staff and property.</li>
<li>Responds to complaints reported by tenants and others, and inspects PHA properties for malfunctions, component failures, and damages.</li>
<li>Collects and compiles criminal and financial investigative case information; interviews complainants, witnesses, PHA staff, and PHA clients and tenants.</li>
<li>Coordinates investigations and background checks with local law enforcement, community service agencies, and public utilities.</li>
<li>Creates, develops, and maintains case files; collects data from Police Records Checks, Philadelphia Crime Information Center (PCIC) and National Crime Information Center (NCIC) computer systems, and other local and regional information sources.</li>
<li>Prepares reports on investigations, and special projects and assignments.</li>
<li>Exercises independent judgment within specific policy guidelines; evaluates PH and HCV Program housing issues, and recommends solutions.</li>
<li>Stays abreast of trends and innovations in PH and HCV Program investigative issues.</li>
<li>Maintains absolute confidentiality of work-related issues and PHA information; performs related duties and responsibilities as assigned.</li>
</ul>
 
How To Apply
 
All applications will be accepted through the Philadelphia Housing Authority's Jobs Board at <a href="http://www.pha.phila.gov" target="_blank">www.pha.phila.gov</a>.

 
Closing Statement
 
About the Philadelphia Housing Authority (PHA)
Established in 1937, and with an employment workforce of over 1,100, the Philadelphia Housing Authority is a municipal agency providing public housing services to over 76,000 residents in the city of Philadelphia, Pennsylvania.
 
Financial support for Authority operations and capital needs comes primarily from rent payments and subsidies provided by the U.S. Department of Housing and Urban Development (HUD). PHA is one of a very select group of housing authorities across the nation that has attained Moving to Work (MTW) status. This designation allows housing agencies the opportunity and flexibility, on a local level, to develop and implement innovative housing and self-sufficiency strategies to benefit public housing residents and Housing Choice Voucher Program (HCVP) participants.
 
PHA is an equal opportunity employer and makes all employment decisions on the basis of individual qualifications without regard to race, creed, color, sex, sexual orientation, gender identify, pregnancy, national origin, ethnicity or ancestry, religion, age, disability, citizenship, marital status, military or veteran status, genetic information, or any other protected characteristic.
 
.

Investigator

<h3>Job Description</h3>
Job DescriptionDescription:
CI Cyber Threat Technical Analyst (Level III)
Primary Location: Springfield, VA and St. Louis, MO
Clearance: Active TS/SCI
Ability to work remotely: No
 
Job Summary
The CI Cyber Threat Technical Analyst will ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted within established timeframes. The analyst will also ensure team members are trained in and follow current standard operating procedures while providing technical analysis that contributes to the understanding of particular threats or situations.
Specific Responsibilities
<ul>
<li>Support team members in completing forensics reports, CI Cyber Inquiries, and monthly, quarterly, and annual CI Cyber Threat reports through written and technical analysis</li>
<li>Identify, analyze, define, and coordinate user, customer and stakeholder needs and translate them into technical requirements</li>
<li>Detect anomalous activity through network data analysis</li>
<li>Record best practices, lessons-learned, processes and procedures, and other pertinent quality topics in appropriate formats</li>
<li>Evaluate Intrusion Detection, incident tickets, event and log analysis, security change tracking and other network security systems and devices</li>
<li>Provide written reports based on findings and perform work without appreciable direction, exercising considerable latitude in determining technical objectives</li>
<li>Participate in special projects and assist in the development and delivery of malware threat awareness products and briefings</li>
<li>Participate in technical meetings and working groups to address issues related to malware threats and vulnerabilities</li>
<li>Collaborate with customers and team members consisting of computer security and CI investigators, forensic analysts, and other internal and external organizations</li>
<li>Thoroughly investigate instances of malicious code to determine attack vector, payload, potential origin, extent of damage, and data exfiltration</li>
<li>Develop analysis and make recommendations for the purchase of software that will mitigate malware intrusions</li>
<li>Identify risks to computer systems and make recommendations for corrective actions</li>
<li>Coordinate CI Cyber activities originating from Enterprise Incident Response Events</li>
<li>Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to the CI Cyber Mission</li>
<li>Perform threat analysis, threat forecasts, threat alerts, and recommend countermeasures</li>
</ul>
 
Requirements:
Required Qualifications
<ul>
<li>Minimum of 7 years of network analysis experience</li>
<li>Ability to identify, decipher, and understand network artifacts</li>
<li>Possess or obtain DoD 8570.01-M Information Assurance (IA) III certification within one calendar year of assignment at the sole expense of the vendor</li>
<li>Active TS/SCI clearance required</li>
</ul>
Desired Qualifications
<ul>
<li>Credentialed graduate of an accredited federal or DoD CI training academy</li>
<li>Bachelor's degree in science, Technology, Engineering or Mathematics disciplines</li>
<li>DoD Cyber Crimes Investigator certification</li>
<li>Post-graduate degree in Science, Technology, Engineering or Mathematics disciplines</li>
<li>Experience with malware analysis</li>
<li>Knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Government</li>
<li>Experience translating Government vision into understandable and achievable measures</li>
<li>Ability to coach teammates to achieve objectives</li>
<li>Ability to monitor and track progress towards achievable measures</li>
</ul>
Physical Requirements and Work Environment
<ul>
<li>Standard office environment with extended periods of computer work</li>
</ul>
Travel
<ul>
<li>Minimal travel may be required</li>
</ul>
Company Description
Obsidian Solutions Group LLC (OSG) is a fast-growing professional services firm based in Fredericksburg, VA. We create value for our customers by delivering technology-enabled &amp; mission-oriented technical solutions that solve complex problems, protecting people, information, and assets. Our core capabilities are in providing Enterprise IT, Intelligence Analysis, Production &amp; Development and Knowledge-Based Professional Services Solutions that enable the customer's mission. Obsidian Solutions Group LLC is a certified 8(a), service-disabled, veteran-owned small business.
A career at Obsidian Solutions Group means you are able to put your expertise, credentials, and talents to great use working with customers in the DOD and Intelligence Community, while enjoying the excitement of working in a fast-growing organization committed to making a difference for our customers and in our community. Contribute independently and collaboratively alongside our amazing team of doers and thinkers. Obsidian Solutions Group is small enough to offer a family atmosphere yet large enough to deliver a highly competitive compensation package. We hire and retain the best in the industry, offering exceptional benefits that protect the well-being of our employees, their spouses and domestic partners, and their families.
Our corporate philosophy is centered on hiring and retaining employees with the requisite skills, professional experience, personal commitment, and ethical standards necessary to foster a culture of operational excellence necessary to surpass our customer's expectations.
Disclaimer
The above information on this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Obsidian Solutions Group is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, parental status, protected veteran status, and any other non-merit factor, or any other characteristic protected by law.

CI Cyber Threat Technical Analyst III

<h3>Job Description</h3>
Job Description
Overall Assignment Description: The CI Cyber Threat Technical Analyst will ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted with in established time frames. He or she will also ensure analysts are trained in and follow the current standard operating procedures.
Duties: • Support team members in completing forensics reports, CI Cyber Inquiries, and monthly, quarterly, and annual CI Cyber Threat reports. Support includes, but is not limited to, written and technical analysis that contributes to the understanding of a particular threat or situation. • Identify, analyze, define, and coordinate user, customer and stakeholder needs and translate them into technical requirements. • Detect anomalous activity through network data analysis.
• Record best practices, lessons-learned, processes and procedures, and other pertinent quality topics in appropriate formats. • Evaluate Intrusion Detection, incident tickets, event and log analysis, security change tracking and other network security systems and devices. • Provide written reports based on findings. • Perform work without appreciable direction and exercising considerable latitude in the determination of technical objectives of assignments. • Participate in special projects as required. • Assist in the development and delivery of malware threat awareness products and briefings. • Participate in technical meetings and working groups to address issues related to malware threats and vulnerabilities. • Collaborate with customers and team members consisting of computer security and CI investigators and forensic analysts and other internal and external organizations to facilitate a premier malware program. • Thoroughly investigate instances of malicious code to determine attack vector, payload, potential origin, and determine extent of damage and data exfiltration. • Develop analysis and make recommendations for the purchase of software that will mitigate malware intrusions. • Identify risks to computer systems and make recommendations for corrective actions. • Coordinate CI Cyber activities originating from Enterprise Incident Response Events. • Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission. • Perform threat analysis, threat forecasts, threat alerts, and recommend countermeasures.
Skills and Experience: Required: • Shall possess at least 7 years of network analysis experience. • Shall identify, decipher, and understand network artifacts. • Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment at the sole expense of the vendor. Shall possess or obtain and maintain IA III certification. See DoD 8570.01-M for acceptable certifications for each IA level. Desired: • Be a credentialed graduate of an accredited federal or DoD CI training academy. • Possess a Bachelor's Degree in Science, Technology, Engineering or Mathematics disciplines. • Possess a DoD Cyber Crimes Investigator certification.
• Possess post-graduate degree in Science, Technology, Engineering of Mathematics disciplines. • Experience with malware analysis. • Possess knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Gov. • Experience translating Government vision into understandable and achievable measures. • Possess ability to coach teammates to achieve objectives • Possess ability to monitor and track progress towards achievable measures.
 Job Posted by ApplicantPro

CI Cyber Threat Technical Analysis (Level III) support - TS/SCI Clearance required

<h3>Job Description</h3>
Job Description
Overall Assignment Description: The CI Cyber Threat Technical Analyst will ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted with in established time frames. He or she will also ensure analysts are trained in and follow the current standard operating procedures.
Duties: • Support team members in completing forensics reports, CI Cyber Inquiries, and monthly, quarterly, and annual CI Cyber Threat reports. Support includes, but is not limited to, written and technical analysis that contributes to the understanding of a particular threat or situation. • Identify, analyze, define, and coordinate user, customer and stakeholder needs and translate them into technical requirements. • Detect anomalous activity through network data analysis.
• Record best practices, lessons-learned, processes and procedures, and other pertinent quality topics in appropriate formats. • Evaluate Intrusion Detection, incident tickets, event and log analysis, security change tracking and other network security systems and devices. • Provide written reports based on findings. • Perform work without appreciable direction and exercising considerable latitude in the determination of technical objectives of assignments. • Participate in special projects as required. • Assist in the development and delivery of malware threat awareness products and briefings. • Participate in technical meetings and working groups to address issues related to malware threats and vulnerabilities. • Collaborate with customers and team members consisting of computer security and CI investigators and forensic analysts and other internal and external organizations to facilitate a premier malware program. • Thoroughly investigate instances of malicious code to determine attack vector, payload, potential origin, and determine extent of damage and data exfiltration. • Develop analysis and make recommendations for the purchase of software that will mitigate malware intrusions. • Identify risks to computer systems and make recommendations for corrective actions. • Coordinate CI Cyber activities originating from Enterprise Incident Response Events. • Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission. • Perform threat analysis, threat forecasts, threat alerts, and recommend countermeasures.
Skills and Experience: Required: • Shall possess at least 7 years of network analysis experience. • Shall identify, decipher, and understand network artifacts. • Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment at the sole expense of the vendor. Shall possess or obtain and maintain IA III certification. See DoD 8570.01-M for acceptable certifications for each IA level. Desired: • Be a credentialed graduate of an accredited federal or DoD CI training academy. • Possess a Bachelor's Degree in Science, Technology, Engineering or Mathematics disciplines. • Possess a DoD Cyber Crimes Investigator certification.
• Possess post-graduate degree in Science, Technology, Engineering of Mathematics disciplines. • Experience with malware analysis. • Possess knowledge and understanding of foreign adversaries' security and intelligence services, terrorist organizations, and threats posed to US Gov. • Experience translating Government vision into understandable and achievable measures. • Possess ability to coach teammates to achieve objectives • Possess ability to monitor and track progress towards achievable measures.

<h3>Job Description</h3>
Job DescriptionThe CI Digital Forensics Examiner will contribute to the publication of required reports and ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted with in established time frames. He or she will also ensure examiners are trained in and follow the current standard operating procedures.&nbsp;Responsibilities include but are not limited to:•&nbsp; &nbsp; &nbsp; &nbsp;Contribute to the publication of required reports and ensure all required reports are complete with minimal errors and that all processes, activities, and reports are conducted with in established time frames. Ensure examiners are trained in and follow the current standard operating procedures.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Perform Digital Media Acquisition and Digital Forensic Review of various platforms to include Windows, Linux, and Mac OS based systems using a variety of digital forensic tools.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Investigate suspected instances of computer, mobile device, and network penetrations.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Ingest media into an archive, copy media images, and employ advanced media forensics tools during a forensic examination (ENCASE and Windows Forensic Toolkit are two of the many tools used for media forensics).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Investigate computer viruses and malicious code and prepare, write, and present reports and briefings.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Provide weekly status updates when conducting forensics&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Provide a written report at the conclusion of each forensics examination. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance):&nbsp;o &nbsp; Case File Number&nbsp;o &nbsp; Computer Name&nbsp;o &nbsp; User Name, File Names, etc…&nbsp;o &nbsp; Background&nbsp;o &nbsp; Investigation Details&nbsp;o &nbsp; Status/Disposition&nbsp;o &nbsp; Recommendations&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Intelligence Information Report (if deemed necessary by government lead)&nbsp;o &nbsp; Case File Number&nbsp;o &nbsp; Computer Name&nbsp;o &nbsp; User Name&nbsp;o &nbsp; Background&nbsp;o &nbsp; Investigation Details&nbsp;o &nbsp; Status/Disposition&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Personnel will support CI Incident Assessments to determine possible foreign intelligence entity involvement with an NGA computer system. In the process of supporting an Incident Assessment, reports must be produced and updated weekly. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance):&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Perform in-depth forensics examinations of computers, mobile devices, networks and other electronic and digital devices.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess experience conducting computer forensics analysis within the Department of Defense and/or Intelligence Community.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Attend periodic CI and law enforcement community cyber investigations awareness briefings.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Brief CI cyber products and CI cyber service results to senior NGA leadership.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Collaborate with internal and external Intelligence Community partners to share and gather technical threat information to enhance forensics examinations.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Integrate information from forensics examinations and compile results into reports as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Prepare and present forensic findings in the form of briefings and/or reports, to government leads and managers as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Participate in Intelligence Community and Department of Defense technical exchange and collaboration meetings as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Produce detailed CI cyber forensics reports as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Provide support to all CI mission functions as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Participate in IC Community and NGA technical meetings and working groups to address issues related to computer security and vulnerabilities.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Investigate suspected instances of computer, mobile device, and network penetrations.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Effectively utilize all applications and common analytic software tools (i.e., Word, Excel, PowerPoint, Analyst Notebook).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Coordinate CI Cyber activities originating from Enterprise Incident Response Events.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission&nbsp;Minimum Qualifications:•&nbsp; &nbsp; &nbsp; &nbsp;Shall possess a minimum of 11 years forensic experience in CI or law enforcement investigations&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Gain and maintain a digital forensic examiner certification within six months of assignment. Qualifying certification sources include government, military, and industry.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification.&nbsp;Desired Qualifications:•&nbsp; &nbsp; &nbsp; &nbsp;Be a credentialed graduate of an accredited federal CI, federal law enforcement, DoD CI, or DoD Law Enforcement training academy (ex. FBI Academy).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess a Bachelor’s degree in a Science, Technology, Engineering or Mathematics discipline.•&nbsp; &nbsp; &nbsp; &nbsp;Possess a post-graduate degree in a Science, Technology, Engineering or Mathematics discipline.•&nbsp; &nbsp; &nbsp; &nbsp;Possess and demonstrate knowledge and understanding of foreign adversaries’ security and intelligence services, terrorist organizations, and cyber threats posed to NGA, DoD, and IC partners.•&nbsp; &nbsp; &nbsp; &nbsp;Possess a DoD Cyber Crimes Investigator certification.•&nbsp; &nbsp; &nbsp; &nbsp;Experience with the latest forensic technologies such as Access Data Forensic Toolkit (FTK).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess a digital forensic examiner certification. Qualifying certification sources include government, military, and industry.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess ability to coach teammates to achieve objectives.•&nbsp; &nbsp; &nbsp; &nbsp;Possess ability to monitor and track progress towards achievable measures.&nbsp;Clearance Requirements:·&nbsp; &nbsp; &nbsp; &nbsp;Must have a TS/SCI with the ability to pass a CI Poly Physical Requirements:The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations&nbsp;

Digital Forensics Examiner (Level IV)

<h3>Job Description</h3>
Job DescriptionThe CI Digital Forensic Examiner Subject Matter Expert (SME) is tasked to produce, on average per annum, 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements.Responsibilities include but are not limited to:•&nbsp; &nbsp; &nbsp; &nbsp;Produce 48 weekly status reports and 12 final digital forensics reports, while providing expert support to CI Cyber Threat and Technical Analyst requirements.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Perform Digital Media Acquisition and Digital Forensic Review of various platforms to include Windows, Linux, and Mac OS based systems using a variety of digital forensic tools.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Investigate suspected instances of computer, mobile device, and network penetrations.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Ingest media into an archive, copy media images, and employ advanced media forensics tools during a forensic examination (ENCASE and Windows Forensic Toolkit are two of the many tools used for media forensics).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Investigate computer viruses and malicious code and prepare, write, and present reports and briefings.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Provide weekly status updates when conducting forensics&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Provide a written report at the conclusion of each forensics examination. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance):&nbsp;o &nbsp; Case File Number&nbsp;o &nbsp; Computer Name&nbsp;o &nbsp; User Name, File Names, etc…&nbsp;o &nbsp; Background&nbsp;o &nbsp; Investigation Details&nbsp;o &nbsp; Status/Disposition&nbsp;o &nbsp; Recommendations&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Intelligence Information Report (if deemed necessary by government lead)&nbsp;o &nbsp; Case File Number&nbsp;o &nbsp; Computer Name&nbsp;o &nbsp; User Name&nbsp;o &nbsp; Background&nbsp;o &nbsp; Investigation Details&nbsp;o &nbsp; Status/Disposition&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Personnel will support CI Incident Assessments to determine possible foreign intelligence entity involvement with an NGA computer system. In the process of supporting an Incident Assessment, reports must be produced and updated weekly. Reports will include, at a minimum, the following information (a template and standard operating procedures will be made available on site to provide additional guidance):&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Perform in-depth forensics examinations of computers, mobile devices, networks and other electronic and digital devices.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess experience conducting computer forensics analysis within the Department of Defense and/or Intelligence Community.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Attend periodic CI and law enforcement community cyber investigations awareness briefings.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Brief CI cyber products and CI cyber service results to senior NGA leadership.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Collaborate with internal and external Intelligence Community partners to share and gather technical threat information to enhance forensics examinations.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Integrate information from forensics examinations and compile results into reports as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Prepare and present forensic findings in the form of briefings and/or reports, to government leads and managers as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Participate in Intelligence Community and Department of Defense technical exchange and collaboration meetings as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Produce detailed CI cyber forensics reports as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Provide support to all CI mission functions as required.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Participate in IC Community and NGA technical meetings and working groups to address issues related to computer security and vulnerabilities.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Investigate suspected instances of computer, mobile device, and network penetrations.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Effectively utilize all applications and common analytic software tools (i.e., Word, Excel, PowerPoint, Analyst Notebook).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Coordinate CI Cyber activities originating from Enterprise Incident Response Events.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Conduct liaison between CI Office, Insider Threat, Cyber Security Operations Center (CSOC), and other NGA Offices as applicable to conducting the CI Cyber Mission&nbsp;Minimum Qualifications:•&nbsp; &nbsp; &nbsp; &nbsp;Shall possess a minimum of 7 years forensic experience in CI or law enforcement investigations&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Gain and maintain a digital forensic examiner certification within six months of assignment. Qualifying certification sources include government, military, and industry.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess or obtain certification to comply with DoD 8570.01-M Information Assurance (IA) requirements within one calendar year of assignment. Shall possess or obtain and maintain IA III certification.&nbsp;Desired Qualifications:•&nbsp; &nbsp; &nbsp; &nbsp;Be a credentialed graduate of an accredited federal CI, federal law enforcement, DoD CI, or DoD Law Enforcement training academy (ex. FBI Academy).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess a Bachelor’s degree in a Science, Technology, Engineering or Mathematics discipline.•&nbsp; &nbsp; &nbsp; &nbsp;Possess and demonstrate knowledge and understanding of foreign adversaries’ security and intelligence services, terrorist organizations, and cyber threats posed to NGA, DoD, and IC partners.•&nbsp; &nbsp; &nbsp; &nbsp;Possess a DoD Cyber Crimes Investigator certification.•&nbsp; &nbsp; &nbsp; &nbsp;Experience with the latest forensic technologies such as Access Data Forensic Toolkit (FTK).&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess a digital forensic examiner certification. Qualifying certification sources include government, military, and industry.&nbsp;•&nbsp; &nbsp; &nbsp; &nbsp;Possess ability to coach teammates to achieve objectives.•&nbsp; &nbsp; &nbsp; &nbsp;Possess ability to monitor and track progress towards achievable measures.&nbsp;Clearance Requirements:·&nbsp; &nbsp; &nbsp; &nbsp;Must have a TS/SCI with the ability to pass a CI Poly Physical Requirements:
<ul>
<li>The person in this position must be able to remain in a stationary position 50% of the time. Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and or virtual communication, which may involve delivering presentations.</li>
</ul>

Digital Forensics Examiner (Level III)

<h3>Job Description</h3>
Job DescriptionCompany Description 
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to accomplish their financial goals and help them save time and money.
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.
Job Description 
Overview
We are looking for a Senior Cyber Forensic Investigator to join our Cyber Fusion Centre. Our Cyber Fusion Center (CFC) uses the latest technology and trained security experts to detect and investigate security attacks and insider risks globally.This critical role leads complex investigations into cyber incidents, data breaches, insider threats, and other digital security events. You will bring expertise in digital forensics, incident response, and threat intelligence to protect Experian's digital assets and ensure compliance with global regulatory standards.
You will report to the Senior Director of Cyber Forensics and Cyber Threat Hunting and offers the opportunity to work with a global team of elite cybersecurity professionals.
Responsibilities
<ul>
<li>You must reside within commuting distance to our Allen, Texas Office. Occasional on-site presence is required to manage the forensic lab, receive and process physical evidence and conduct high-priority investigations.</li>
<li>Independently conduct detailed forensic investigations into cyber incidents, data breaches, malware infections, unauthorized access, insider threats, fraud and abuse, and employee misconduct.</li>
<li>Analyze digital evidence from sources such as cloud platforms, networks, servers, endpoints, and mobile devices.</li>
<li>Interpret device and application logs from a variety of sources (e.g., firewalls, proxies, web servers, system logs, Splunk, packet captures) to identify anomalies or evidence of compromise.</li>
<li>Prepare comprehensive investigative reports, including findings, conclusions, and recommendations for remediation and future prevention.</li>
<li>Present findings to technical and non-technical team members, including legal and executive leadership.</li>
<li>Ensure all forensic activities adhere with legal and regulatory requirements, including chain of custody and data protection laws.</li>
<li>Provide training and mentorship to other forensic investigators and collaborate with cybersecurity teams</li>
<li>Support real-time incident response efforts and participate in on-call rotations</li>
<li>Manage the Digital Forensics Lab environment, including tools, evidence handling, and process integrity.</li>
<li>Enhance forensic capabilities by building tools, scripts, and methodologies.</li>
<li>Travel domestically and internationally occasionally for meetings, training sessions, and on-site investigations.</li>
<li>#LI-Remote</li>
</ul>
Qualifications 
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Equivalent professional experience (typically 8+ years in digital forensics or incident response)</li>
<li>5–7+ years in digital forensics, incident response, or a related cybersecurity discipline.</li>
<li>In-depth understanding of network intrusion methods and cyber attack TTPs</li>
<li>Hands-on experience conducting forensics and incident response in cloud environments (e.g., AWS, Google Cloud, Microsoft Azure) and across multiple operating systems, including Windows, Linux, and macOS.</li>
<li>Experience using Endpoint Detection and Response (EDR/XDR) tools for threat hunting, log analysis, and investigative support.</li>
<li>Proficiency in the MITRE ATT &amp; CK Framework with experience applying these to digital forensics investigations.</li>
<li>Experience with digital forensics tools (e.g., Axiom, Autopsy, Volatility, EnCase, FTK, Cellebrite), and decryption and data recovery tools.</li>
<li>Familiarity with SIEM and SOAR platforms (e.g., Splunk, Chronicle, Sentinel) for log correlation and automated response.</li>
<li>One or more certifications such as GCFA, GCFE, EnCE, or equivalent</li>
<li>Expertise in cyber threats, attack vectors, and advanced mitigation strategies and guiding strategic response efforts.</li>
<li>Proficiency with forensic tools (e.g., EnCase, Magnet AXIOM, X-Ways, SANS SIFT), including both commercial and open-source solutions.</li>
<li>Expertise in forensic techniques such as memory forensics, network forensics, malware analysis, and timeline reconstruction.</li>
<li>Scripting and programming capabilities in languages such as PowerShell, Bash, Python, Ruby, or Java to automate forensic tasks and develop custom analysis tools.</li>
<li>Knowledge of legal, regulatory, and evidentiary standards related to digital forensics and incident response</li>
</ul>
 Additional Information 
Benefits/Perks:
<ul>
<li>Great compensation package and bonus plan</li>
<li>Core benefits including medical, dental, vision, and matching 401K</li>
<li>Flexible work environment, ability to work remote, hybrid or in-office</li>
<li>Flexible time off including volunteer time off, vacation, sick and 12-paid holidays</li>
<li>Explore all our exciting benefits here: <a href="https://yourexperianbenefits.com/cand-index.html" target="_blank">https://yourexperianbenefits.com/cand-index.html</a></li>
</ul>
At Experian, our people and culture set us apart. We're deeply committed to creating an environment where everyone feels they belong and can excel. From inclusion and authenticity to work/life balance, development, wellness, collaboration, and recognition, we focus on what truly matters. Our people-first approach has earned us global recognition: World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ 2025 in 26 countries, and Glassdoor Best Places to Work 2024, among others.
Want to see what life at Experian is really like? Explore Experian Life on social or visit our Careers Site.
Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience, and education. You will be also eligible for a variable pay opportunity.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Senior Cyber Forensic Investigator, Hybrid

<h3>Job Description</h3>
Job DescriptionCompany Description 
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create digital marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them to save time and money.
We operate across a range of markets, from financial services to healthcare, automotive, agrifinance, insurance, and many more industry segments.
We invest in people and new advanced technologies to unlock the power of data and to innovate. A FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 23,300 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.
Job Description 
As a member of Experian's Global Security Office (EGSO)/Cyber Fusion Center (CFC), you will respond, contain, escalate, investigate, and coordinate mitigation of security events relative to anomalies detected and escalated by the Cyber Fusion Center according to Experian's Incident Response Plan. As an individual contributor, you will join a growing team of specialized, advanced responders to support escalations of complex and prioritized matters from Experian's existing 24x7 security monitoring and response functions. You will work with end-users, technical support teams, and management to ensure remediation and recovery from these threats.
You will report to the Senior Manager, Global Incident Response. You will have a regular Monday – Friday schedule, with the expectation to participate in an on-call schedule or work outside of normal work hours to respond to cybersecurity incidents.
You'll have the opportunity to:
<ul>
<li>Conduct advanced incident response activities to investigate and contain complex or larger-scale cybersecurity matters.</li>
<li>Orchestrate workstreams across teams (Forensics and Cyber Threat Hunting) and explain the CFC's overall understanding of the timeline of attacker activity.</li>
<li>Respond to cybersecurity events and alerts associated with threats, intrusions, or compromises per any applicable SLOs.</li>
<li>Manage multiple cases related to security incidents throughout the incident response lifecycle, including Analysis, Containment, Eradication, Recovery, and Lessons Learned.</li>
<li>Coordinate successful conclusion of security incidents according to Process &amp; Procedures, and escalate severe incidents according to Experian's Incident Response Plan.</li>
<li>Maintain case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident.</li>
<li>Maintain assigned caseload and move incidents through each phase of the IR Lifecycle, handing off cases as needed for progress.</li>
<li>Maintain an understanding of common Operating Systems (Windows, Linux, Mac OS), Security Technologies (Anti-Virus, Intrusion Prevention), Cloud Security investigations and response tools, and Networking (Firewalls, Proxies).</li>
<li>Interpret device and application logs from a variety of sources (Firewalls, Proxies, Web Servers, System Logs, Splunk, Packet Captures) to identify the root cause and determine the next steps for containment, eradication, and recovery.</li>
<li>Support overall direction for the CFC and input to the security strategy.</li>
<li>Mentor and provide advanced support to analysts (Logs review, IP Block question).</li>
</ul>
Qualifications 
<ul>
<li>8+ years of experience working within cybersecurity or information technology roles, at least 4+ of which includes working as an investigator, analyst, or leader in a Cyber Incident Response Team.</li>
<li>Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security, or a related field. 11+ years of experience working within a Security Operations Center, Incident Response Team, law enforcement, or military experience may be accepted in lieu of this requirement.</li>
<li>Knowledge of network protocols (TCP/IP, UDP, ICMP), standard protocols (HTTP/S, DNS, SSH, SMTP, SMB), wireless networking, networking infrastructure, and network topologies (DMZ, VPN, WAN) and network technologies (WAF, IPS, Routers, or Firewalls).</li>
<li>Experience with commercial and open-source SIEMs, full packet capture tools, and network analysis tools (Splunk, Wireshark, SOF-ELK).</li>
<li>Exhibit skills using common Incident Response and Security Monitoring applications such as SIEM (Splunk), EDR (MDE), Tanium, WAF, IPS.</li>
<li>Preference for candidates to have at least one certification involving incident response, ethical hacking, cyber security (GCIH, E CEH, E CIH), or network forensics (GIAC Network Forensic Analyst (GNFA), NICCS Certified Network Forensics Examiner (CNFE)).</li>
<li>Hold one Security Management certification (ISC2 CISSP, CISM) or obtain such certification within the first two years as a Cyber Incident Response Lead.</li>
<li>Preference for candidates based in Mountain or Pacific Time Zone. Candidates in other U.S. time zones will also be considered.</li>
</ul>
 Additional Information 
Benefits/Perks:
<ul>
<li>Great compensation package and bonus plan.</li>
<li>Core benefits including medical, dental, vision, and matching 401K.</li>
<li>Flexible work environment, ability to work remote, hybrid or in-office.</li>
<li>Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.</li>
<li>Explore all our exciting benefits here: <a href="https://yourexperianbenefits.com/cand-index.html" target="_blank">https://yourexperianbenefits.com/cand-index.html</a>.</li>
</ul>
At Experian, our people and culture set us apart. We're deeply committed to creating an environment where everyone feels they belong and can excel. From inclusion and authenticity to work/life balance, development, wellness, collaboration, and recognition, we focus on what truly matters. Our people-first approach has earned us global recognition: World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ 2025 in 26 countries, and Glassdoor Best Places to Work 2024, among others.
Want to see what life at Experian is really like? Explore Experian Life on social or visit our Careers Site.
Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience, and education. You will be also eligible for a variable pay opportunity.
Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. Innovation is an important part of Experian's DNA and practices, and our inclusive workforce allows everyone to succeed and bring their whole self to work. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
#LI-Remote
This is a remote position.

Cyber Incident Response Lead (Remote)

<h3>Job Description</h3>
Job DescriptionCompany Description 
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to accomplish their financial goals and help them save time and money.
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.
Job Description 
We are looking for a Senior Cyber Forensic Investigator to join our Cyber Fusion Centre. Our Cyber Fusion Center (CFC) uses the latest technology and trained security experts to detect and investigate security attacks and insider risks globally.This critical role leads complex investigations into cyber incidents, data breaches, insider threats, and other digital security events. You will bring expertise in digital forensics, incident response, and threat intelligence to protect Experian's digital assets and ensure compliance with global regulatory standards.
You will report to the Senior Director of Cyber Forensics and Cyber Threat Hunting and offers the opportunity to work with a global team of elite cybersecurity professionals.
Responsibilities:
<ul>
<li>You must reside within commuting distance to our Costa Mesa, CA office. Occasional on-site presence is required to manage the forensic lab, receive and process physical evidence and conduct high-priority investigations.</li>
<li>Independently conduct detailed forensic investigations into cyber incidents, data breaches, malware infections, unauthorized access, insider threats, fraud and abuse, and employee misconduct.</li>
<li>Analyze digital evidence from sources such as cloud platforms, networks, servers, endpoints, and mobile devices.</li>
<li>Interpret device and application logs from a variety of sources (e.g., firewalls, proxies, web servers, system logs, Splunk, packet captures) to identify anomalies or evidence of compromise.</li>
<li>Prepare comprehensive investigative reports, including findings, conclusions, and recommendations for remediation and future prevention.</li>
<li>Present findings to technical and non-technical team members, including legal and executive leadership.</li>
<li>Ensure all forensic activities adhere with legal and regulatory requirements, including chain of custody and data protection laws.</li>
<li>Provide training and mentorship to other forensic investigators and collaborate with cybersecurity teams</li>
<li>Support real-time incident response efforts and participate in on-call rotations</li>
<li>Manage the Digital Forensics Lab environment, including tools, evidence handling, and process integrity.</li>
<li>Enhance forensic capabilities by building tools, scripts, and methodologies.</li>
<li>Travel domestically and internationally occasionally for meetings, training sessions, and on-site investigations.</li>
</ul>
Qualifications 
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Equivalent professional experience (typically 8+ years in digital forensics or incident response)</li>
<li>5–7+ years in digital forensics, incident response, or a related cybersecurity discipline.</li>
<li>In-depth understanding of network intrusion methods and cyber attack TTPs</li>
<li>Hands-on experience conducting forensics and incident response in cloud environments (e.g., AWS, Google Cloud, Microsoft Azure) and across multiple operating systems, including Windows, Linux, and macOS.</li>
<li>Experience using Endpoint Detection and Response (EDR/XDR) tools for threat hunting, log analysis, and investigative support.</li>
<li>Proficiency in the MITRE ATT &amp; CK Framework with experience applying these to digital forensics investigations.</li>
<li>Experience with digital forensics tools (e.g., Axiom, Autopsy, Volatility, EnCase, FTK, Cellebrite), and decryption and data recovery tools.</li>
<li>Familiarity with SIEM and SOAR platforms (e.g., Splunk, Chronicle, Sentinel) for log correlation and automated response.</li>
<li>One or more certifications such as GCFA, GCFE, EnCE, or equivalent</li>
<li>Expertise in cyber threats, attack vectors, and advanced mitigation strategies and guiding strategic response efforts.</li>
<li>Proficiency with forensic tools (e.g., EnCase, Magnet AXIOM, X-Ways, SANS SIFT), including both commercial and open-source solutions.</li>
<li>Expertise in forensic techniques such as memory forensics, network forensics, malware analysis, and timeline reconstruction.</li>
<li>Scripting and programming capabilities in languages such as PowerShell, Bash, Python, Ruby, or Java to automate forensic tasks and develop custom analysis tools.</li>
<li>Knowledge of legal, regulatory, and evidentiary standards related to digital forensics and incident response</li>
</ul>
 Additional Information 
Benefits/Perks:
<ul>
<li>Great compensation package and bonus plan</li>
<li>Core benefits including medical, dental, vision, and matching 401K</li>
<li>Flexible work environment, ability to work remote, hybrid or in-office</li>
<li>Flexible time off including volunteer time off, vacation, sick and 12-paid holidays</li>
<li>Explore all our exciting benefits here: <a href="https://yourexperianbenefits.com/cand-index.html" target="_blank">https://yourexperianbenefits.com/cand-index.html</a></li>
</ul>
At Experian, our people and culture set us apart. We're deeply committed to creating an environment where everyone feels they belong and can excel. From inclusion and authenticity to work/life balance, development, wellness, collaboration, and recognition, we focus on what truly matters. Our people-first approach has earned us global recognition: World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ 2025 in 26 countries, and Glassdoor Best Places to Work 2024, among others.
Want to see what life at Experian is really like? Explore Experian Life on social or visit our Careers Site.
Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience, and education. You will be also eligible for a variable pay opportunity.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
#LI-Hybrid

28 computer-forensic-investigator Jobs