<h3>Job Description</h3>
Summary/Objective
The Regional Fraud Investigator position is a key role in the Fraud Investigations Unit of the Corporate Security Department. This position is responsible for conducting comprehensive external fraud investigations on check fraud, wire fraud, account take over, identity theft, new account fraud, elderly exploitation, and other types of fraud, to detect and prevent fraud losses to the bank and the customer.
They are responsible for reviewing all allegations of suspected fraud, analyzing data, making critical decisions, and interviewing witnesses, suspects, employees, and other related parties. They are responsible for reporting findings, taking the appropriate action, and effectively managing cases. Furthermore, they are responsible for the facilitation of fraud recovery, in an effort to minimize fraud losses to the bank and its customers. May perform general account handling functions such as, close account determination, holds, restraints, etc.
 Routinely contacts customers and other bank team members to confirm the legitimacy of high-risk transactions prior to occurrence and takes appropriate action, to mitigate the risk to the Bank and the customer. May provide support in other investigations as assigned by the Director of Security. Will serve as liaison with the business lines, financial institution partners and law enforcement. Position role and responsibilities must be performed in adherence to the compliance of bank and department operational policies and regulations.
Essential Duties and Responsibilities include the following: Other duties and special projects may be assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
<ul>
<li>Investigate and manage external fraud investigations, such as check fraud, new account fraud, elder exploitation, wire fraud, online take over and other, ensuring cases are handled timely, and documented accurately with a concise case summary, following existing procedures.</li>
<li>Conduct research, compile, save and retrieve data for the preparation of investigative reports for assigned cases.</li>
<li>Review surveillance systems and extract photos/videos for use by the bank and law enforcement personnel.</li>
<li>Use internal and external resources to obtain forensic evidence for investigative purposes when reviewing fraud detection reports or investigating cases.</li>
<li>Notify and work with law enforcement and prosecutor's office regarding criminal cases to ensure proper resolution.</li>
<li>May attend criminal and civil court proceedings as necessary to complete the prosecution of cases.</li>
<li>Facilitate fraud recovery efforts to minimize losses to the bank and the customers.</li>
<li>May prepare and submit Suspicious Activity Reports SARs as required. Proper SAR determination is essential.</li>
<li>Provide business lines with support and guidance associated with fraud incidents and any reported unusual/suspicious activity.</li>
<li>Provide guidance to customer victims on the appropriate course of action and provide fraud prevention counseling as needed (i.e., ID Theft, wire fraud, malware, phishing)</li>
<li>Remain current with arising fraud trends and activities by attending networking workshops and/or training.</li>
<li>May prepare security alerts/bulletins for internal dissemination.</li>
<li>May travel to off-site locations for investigative purposes.</li>
<li>Prioritize tasks to ensure deadlines and expectations are met.</li>
<li>Work cases with a sense of urgency while ensuring the accuracy of information.</li>
<li>Maintain confidentiality surrounding fraud methods and investigations.</li>
<li>Build effective relationships with internal/external stakeholders (e.g., law enforcement agencies and other Financial Institutions to collaborate in investigations).</li>
<li>Network and develop effective contacts in the private, public and government sector, to assist in fraud investigations.</li>
</ul>
Education and Experience
<ul>
<li>Bachelor's Degree Criminal Justice preferred.</li>
</ul>
<ul>
<li>Three (3) to Five (5) years in fraud investigations or law enforcement capacity required.</li>
<li>Strong understanding of financial transactions required.</li>
</ul>
<ul>
<li>Conducts interviews of witnesses and suspects as required by the investigations.</li>
</ul>
<ul>
<li>Working knowledge of bank products, services, bank systems and transaction types preferred</li>
<li>Strong verbal and written communication skills preferred.</li>
</ul>
<ul>
<li>Detail oriented with strong research and problem-solving skills preferred.</li>
<li>Have a good understanding of the Uniform Commercial Code (UCC), Bank Secrecy Act, Bank Protection Act, Regulation E and Regulation CC. </li>
</ul>
Certifications, Licenses, Registrations:
<ul>
<li>Certified Fraud Examiner (CFE)-ACFE preferred.</li>
<li>Certified Financial Crimes Investigator (CFCI) preferred.</li>
</ul>
Salary Grade – 9 

Supervisory Responsibility
This position has no supervisory responsibilities.
Work Environment
This job operates in a clerical office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. Office environment with job duties conducted via telephone, face to face meetings, and on the computer. 
Physical Demands
This position requires manual dexterity, the ability to lift files and opening cabinets. This position requires bending, stooping or standing as necessary.
Travel
Travel may be required for this position.
 Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Regional Fraud Investigator

<h3>Job Description</h3>

Senior Project Manager
Job Description 
The Senior Project Manager positions will perform day-to-day management of the project, identify issues and risks, and recommend and implement approved mitigation strategies associated with the project. 
Role and Responsibilities 

<ul>
<li>Provide weekly scope, budget, and schedule status updates on the accomplishments, milestones, tasks, roadblocks, issues, and risks related to each cybersecurity remediation project. </li>
<li>Lead teams of technical resources to prioritize the delivery of high-quality IT solutions that meet business needs. </li>
<li>Oversee the development and approval of project plans across all remediation work streams or remediation roadmap areas.</li>
<li>Ensure alignment between Department of Information Technology priority initiatives, cybersecurity assessment results, work orders, and Statewide Cybersecurity Initiatives. </li>
<li>Ensure alignment between contractor and staff timesheets, completed work, and deliverables required as defined in both issued work orders and project plans. 6. Develop and update project charters, scope statements, and scope management to align work efforts to organizational goals and objectives. </li>
<li>Develop transition activities and rollout schedules during both pre- and post-implementation. </li>
<li>Manage work activities to ensure conformity to the project scope, timelines, and budgets. </li>
<li>Develop performance and quality measures for product management activities and provide tracking and periodic reporting on these measures. </li>
<li>Motivate the project teams and forge consensus around program goals and objectives. </li>
<li>Develop and manage budgets and resourcing plans, and track performance against these budgets and resourcing plans. </li>
<li>Develop and implement communication strategies to improve transparency and promote awareness of program areas and issues. </li>
<li>Develop written documentation and oral correspondence of outstanding quality. </li>
<li>Integrate change management and change control practices into the program as required. </li>
<li>Identify, track, manage, and reduce the impact of risks and issues. </li>
<li>Manage vendor relationships to ensure high levels of quality deliverables and performance. </li>
<li>Meet legal, regulatory, and policy mandates.</li>
</ul>
Qualifications and Requirements: 
To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below: 
<ul>
<li>Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Information Systems, Business or other related discipline. </li>
<li>Major in Cybersecurity or other related discipline is preferred. </li>
<li>Master’s degree or project management certification is preferred. </li>
<li>At least five (5) years of experience in project management.</li>
</ul>
Preferred Skills: 
<ul>
<li>At least two (2) years’ experience designing, developing, and implementing ITSM processes, services, and capabilities (e.g., Incident, Change, CMDB). </li>
<li>At least five (5) years of experience managing IT-related projects and must demonstrate a leadership role in at least three (3) successful projects that were delivered on time and on budget. </li>
<li>At least five (5) years of experience implementing or managing cybersecurity-related projects. </li>
<li>At least two (2) years’ experience implementing Identity and Access Management (IAM) technologies. </li>
</ul>
Certifications: 
● Proposed candidates must possess active and current project management certification(s) and shall provide certification license numbers for validation. 
Preferred Certifications: 
One or more of the following project management certifications, including but not limited to: PMI-PBA, PMI-RMP, PMI-SP, PgMP, PfMP, PMI-ACP, DASM, DASSM, CSM, CSPO, PSM, CSP, SSM, or PSPO. 
One or more of the following: cybersecurity certifications including but not limited to: Cisco Certified Network Associate-Security (CCNA-Security), Cisco Certified Network Professional-Security (CCNP-Security), Cybersecurity Specialty Certification (SCYBER); CompTIA: Cloud Plus (Cloud+), Security+ Continuing Education (CE), CompTIA Advanced Security Practitioner (CASP) Continuing Education (CE), Network+ Continuing Education (CE), Cybersecurity Analyst (CySA+ **), PenTest+; EC-Council: Certified Ethical Hacker (CEH), Certified Chief Information Security Officer (CCISO), Computer Hacking Forensics Investigator (CHFI), Certified Network Defender (CND); (ISC)2: Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), Certification Authorization Professional (CAP), Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), Information Systems Security Management Professional (ISSMP), System Security Certified Practitioner (SSCP), Certified Cloud Security Professional (CCSP), Health Care Information Security and Privacy Practitioner (HCISPP); ISACA: Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC); GIAC: GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Enterprise Defender (GCED), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), GIAC Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials Certification (GSEC), GIAC Security Leadership Certificate (GSLC), GIAC Systems and Network Auditor (GSNA)

SENIOR PROJECT MANAGER

<h3>Job Description</h3>
Cyber Crime Investigator
<ul>
<li>Clearance: Must currently possess an active TS/SCI security clearance and be able to obtain a CI polygraph after hire</li>
<li>Location: Quantico, VA | Washington, DC | Reston, VA</li>
<li>Years of Experience: Must have at least 3-5 years of experience providing digital forensics and/or cyber support to investigations, preferably counterintelligence investigations.</li>
<li>Description: The Cyber Crime Investigator (CCI) serves as a technical subject matter expert supporting the agencies counterintelligence program. The CCI will leverage traditional and cyber experience while conducting sensitive national security investigations to ensure the conduct of a fair, unbiased, and professional investigation.</li>
</ul>
Responsibilities: 
<ul>
<li>Shall support counterintelligence (CI) and counterterrorism (CT) investigations research, design, deploy, and lead training events</li>
<li>Shall evaluate emerging forensic technologies</li>
<li>Shall provide operational security assessments</li>
<li>Shall support cyber forensic and cyber security tasks</li>
<li>Shall be responsible for all phases of the forensic examination of digital media, including on-site and off-site evidence acquisition/seizures, forensic analysis, and reporting, while maintaining chain of custody and following rules of evidence</li>
<li>Shall provide support for incident response activities, intrusion events, and malware analysis</li>
</ul>
Required Qualifications: 
<ul>
<li>Must currently possess an active TS/SCI security clearance and be able to obtain a CI polygraph after hire</li>
<li>Must have at least 3-5 years of experience supporting national security investigations to include the conduct of Digital Forensic Examinations ISO of such investigations.</li>
<li>Must be capable of operating within a diverse environment and comfortable operating with limited guidance and oversight, maturity and self-motivation required.</li>
<li>Must possess recognized digital forensic analysis/cyber security certifications and experience.</li>
</ul>
Desired Qualifications: 
<ul>
<li>Bachelor’s Degree from an accredited school in a related discipline</li>
<li>Completion of Defense Cyber Investigations Training Academy (DCITA) courses to include, Forensic Intrusion in a Windows Environment (FIWE), Windows Forensic Examiner (WFE), Computer Incident Responders Course (CIRC).</li>
<li>Familiarity with digital forensic tools such as EnCase, AccessData FTK, Autopsy/Sleuth Kit, SIFT, Magnet Forensics, or others.</li>
<li>Advanced certifications in digital forensics to include GCFA, GCFE, FTK/EnCase Certified Examiner, or equivalent training.</li>
<li>Graduate of Counterintelligence Special Agent credentialing course such as CISAC, DCAC, or other service component school.</li>
<li>Possess the Cyber Crime Investigator Certification from the Defense Cyber Investigations Training Academy (DCITA)</li>
</ul>
US Government COVID-19 Requirements: 
<ul>
<li>In accordance with the latest guidance, all personnel supporting covered contracts must provide proof of COVID-19 vaccination or an approved accommodation.</li>
<li>Additional requirements may apply as agencies interpret and implement their own policies in response to Presidential Executive Order.</li>
<li>Sphinx will consider Religious and Medical Waiver requests for all candidates who request them. Please submit questions or requests to Jobs@SphinxSecure[.]com</li>
</ul>
Job Type: Full-time
Salary: $135,000.00 - $195,000.00 per year
Benefits:
<ul>
<li>401(k)</li>
<li>401(k) matching</li>
<li>Dental insurance</li>
<li>Flexible schedule</li>
<li>Health insurance</li>
<li>Health savings account</li>
<li>Life insurance</li>
<li>Paid time off</li>
<li>Parental leave</li>
<li>Professional development assistance</li>
<li>Referral program</li>
<li>Relocation assistance</li>
<li>Retirement plan</li>
<li>Tuition reimbursement</li>
<li>Vision insurance</li>
</ul>
Schedule: 
<ul>
<li>8 hour shift</li>
</ul>
Supplemental pay types:
<ul>
<li>Bonus pay</li>
<li>Signing bonus</li>
</ul>

Cyber Crime Investigator

<h3>Job Description</h3>
We connect our employees with some of the best opportunities around.
Time and time again, our employees tell us that the most important thing we offer is respect. Federal Staffing Solutions puts people to work in all types of jobs. When you work with us, you build a relationship with a team of employment professionals in your community who have, in turn, built personal relationships with the businesses that are hiring.
We are looking for a Threat Detection Engineer to work onsite in Ashburn, VA supporting our client.

The Threat Detection Engineer shall have the following qualifications: 
<ul>
<li>In-depth knowledge of Firewalls/Proxies/Intrusion Detection Systems/ Domain Name Servers/DHCP/VPN and other network technologies and tools </li>
<li>Experience updating, maintaining, and creating IDS variables within a complex enterprise network </li>
<li>Expert in creating, modifying, tuning IDS signatures/SIEM Correlation Searches/yara rules and/or other detection signatures </li>
<li>Familiarity with disk based forensic methodologies, Windows, and Linux forensic artifacts </li>
<li>Experience with Endpoint Detection and Response (EDR) tools such as Carbon Black, Tanium, Crowdstrike, etc </li>
<li>Able to create, modify, update, and maintain Python and Powershell scripts that enhance endpoint detection capabilities </li>
<li>In-depth knowledge of attacker tactics, techniques, and procedures </li>
<li>Author, test, and maintain automation scripts within SOAR platform </li>
<li>The candidate must currently possess a Secret Clearance. </li>
</ul>
Additional Qualifications: 
In addition to clearance requirement, all personnel must have a current or be able to favorably pass a 5 year background investigation (BI).
<ul>
<li>BS degree in Science, Technology, Engineering, Math or related field and 8 years of prior relevant experience with a focus on cyber security or Masters with 6 years of prior relevant experience. </li>
<li>Should have 5 years of experience serving as a digital media analyst or as a computer forensic analyst. </li>
<li>Ability to work independently with minimal direction; self-starter/self-motivated </li>
<li>Must have one of the following: </li>
<ul>
<li>CCFP – Certified Cyber Forensics Professional </li>
<li>CHFI – Computer Hacking Forensic Investigator </li>
<li>CISSP – Certified Information Systems Security</li>
<li>ECSA – EC-Council Certified Security Analyst </li>
<li>EnCE GCFA – Forensic Analyst </li>
<li>GCFE – Forensic Examiner</li>
<li>GCIH – Incident Handler </li>
<li>GISF – Security Fundamentals </li>
<li>GREM – Reverse Engineering Malware </li>
<li>GXPN – Exploit Researcher and Advanced Penetration Tester </li>
<li>LPT – Licensed Penetration Tester </li>
<li>OSCE (Certified Expert) </li>
<li>OSCP (Certified Professional) </li>
<li>OSEE (Exploitation Expert) </li>
<li>OSWP (Wireless Professional) </li>
<li>CIRC </li>
<li>FIWE </li>
<li>WFE-E-CI </li>
<li>FTK-WFE-FTK </li>
</ul>
</ul>
Preferred Qualifications: 
<ul>
<li>One of the following certifications:</li>
<ul>
<li>SANS Global Information Assurance Certification (GIAC) </li>
<li>Certified Intrusion Analyst (GCIA) SANS </li>
<li>Global Information Assurance Certification (GIAC) </li>
<li>Certified Forensic Analyst (GCFA) SANS </li>
<li>Global Information Assurance Certification (GIAC) </li>
<li>Certified Network Forensic Analyst (GNFA) </li>
<li>Certified Information System Security Professional (CISSP) </li>
</ul>
</ul>
Essential Requirements: 
<ul>
<li>US Citizenship is required. </li>
<li>Active secret clearance. </li>
</ul>
Job Duties:
<ul>
<li>Identify gaps in malicious activity detection capabilities </li>
<li>Create new signatures / rules to improve detection of malicious activity </li>
<li>Test and tune existing signatures / rules to ensure low rate of false positives </li>
<li>Assist in playbook development for alert triage and Incident Response </li>
<li>Define and implement alert and threat detection metrics, statistics, and analytics </li>
<li>Recommend new tools/technologies to improve network visibility</li>
<li>Support Incident Response and Forensic operations as required to include static/dynamic malware analysis and reverse engineering </li>
<li>Author and maintain scripts for threat detection and automation
</li>
</ul>

Equal Opportunity Employer

Detection Engineer- Secret Cleared

<h3>Job Description</h3>
Who is Fusion Technology? 
Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an Engineer-by-trade, Fusion Technology dedicates our valuable resources to providing comprehensive IT services and solutions to mission-critical US Government programs and the Intel Community.  
Who are you? 
<ul>
<li>Security-cleared Professional: You are really trustworthy. You have an active Secret clearance and the ability to obtain and maintain an Interim Top Secret clearance. </li>
<li>Seasoned Leader: You have four (4) years of experience working as a security guru in a security operations center (SOC) or relevant field. Experience in lieu of degree is also acceptable.  </li>
</ul>
<ul>
<li>Field Certified: You are a go-getter and an excellent test taker. You earned and maintain at least one of the following certifications: 
<ul>
<li>CERT Certified Computer Security Incident Handler </li>
<li>Certified Ethical Hacker (CEH) </li>
<li>Certified Information Systems Security Professional (CISSP) </li>
<li>Global Information Assurance Certification (GIAC) Certified Incident Handler GCIH </li>
<li>GIAC Information Security Fundamentals (GISF) Network+ </li>
</ul>
</li>
</ul>
<ul>
<li>Inquisitive: You’re well-versed in cybersecurity and it shows. You have a solid understanding of cyber landscapes and multiple types of typical threat and attack vectors. You like to problem solve incidents and remediated high-profile incident cases. </li>
<li>Cyber Sleuth: You can track incidents like no one else against a framework such as MITRE ATT&amp;CK or Cyber Kill Chain methodologies. </li>
<li>Adaptable: You are not averse to working long hours. We don’t need you to work 24x7, but we do need you to be on-call following a fair rotation schedule. You will work on an on-call rotation for SOC escalation as needed for night and weekends. </li>
<li>Specialized: You are a preferred candidate if you specialize in niche cybersecurity services. You know how to perform forensic investigation and malware analysis and can analyze malicious files through code analysis and reverse engineering.  </li>
</ul>
What we do: 
The National Oceanic and Atmospheric Administration (NOAA) is a bureau within the Department of Commerce (DOC) focused on understanding and predicting changes in the Earth's environment. The demand for NOAA’s products and information continues to grow as global climate change and the threat of natural disasters remain at the forefront of the Nation’s attention. Fusion Technology aims to protect the delivery of this critical demand by modernizing NOAA’s IT security infrastructure, increasing security awareness throughout the department, and coordinating security efforts with the intelligence community and stakeholders. 
What you’ll do: 
<ul>
<li>Prepare situational awareness reports for DOC, its bureaus, and/or DOC management </li>
<li>Act as the main investigator for potential incidents identified by cyber analysts </li>
<li>Work with DOC users to analyze, triage, contain, and remediate security incidents </li>
<li>Communicate guidance to end users, DOC bureaus, and senior officials  </li>
<li>Identify process improvements and generate ideas to improve the Enterprise Security Operations Center (ESOC)’s capabilities  </li>
</ul>
<ul>
<li>Provide timely dissemination of information to the appropriate stakeholders  </li>
<li>Provide incident response related duties as assigned  </li>
<li>Analyze firewall logs, Full Packet Capture (PCAP), intrusion detection system (IDS) alerts, anti-malware alerts, Host Intrusion Prevent System (HIPS), and server and application logs to investigate events and incidents for anomalous activity and produce reports of findings </li>
<li>Conduct reviews and analysis of proxy logs, Microsoft Windows and Active Directory logs, Orchestrator logs, and malicious code to identify, contain, eradicate, and ensure recovery from incidents </li>
</ul>
Preferred skills/experience, but not required:  
<ul>
<li>Ability to perform deep dive investigations from start to finish of a security incident using data from both host-based and network-based devices  </li>
<li>Forensically investigate both Windows and Linux devices for compromise  </li>
<li>Ability to analyze malicious files through code analysis/reverse engineering  </li>
<li>Perform introspection of incident for after action reports to both technical and non-technical staff  </li>
</ul>
<ul>
<li>Ability to perform threat hunting  </li>
<li>Scripting capabilities  </li>
<li>Possess an understanding of SIEM and SOAR products  </li>
</ul>
What matters to you matters to us. 
Fusion Technology values its employees and works hard to ensure proper care for them and their families. We desire to compensate employees in a competitive, motivational, fair, and equitable way with other employers in the marketplace. Salary is only one component of employee compensation but an integral part of recruiting and retaining qualified employees. However, at Fusion Technology, we take a comprehensive approach and consider each employee's needs to tailor a compensation plan that provides financial security and peace of mind. Our competitive package includes a best-in-class matching 401K program, comprehensive Cigna healthcare plan, a competitive employer contribution to a health savings account, vision and dental plans, life insurance, short- and long-term disability, and personal leave, in addition to paid certifications and training. 
Fusion Technology LLC is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills and experiences within our workforce. Qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. 
Powered by JazzHR
5Xrdk0RElN

Incident Responder (ESOC)

<h3>Job Description</h3>
We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO &amp; paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: <a href="https://www.onezerollc.com/careers/" target="_blank">https://www.onezerollc.com/careers/</a>

Position Title: Cyber Network Defense Analyst (Tier 2)
Location: FEMA - Bluemont, VA - The position is a hybrid of telework and on-site. 3 days on-site and 2 days telework a week
Shift: 2nd shift - 2-10 PM (Tuesday - Saturday) 
Clearance: Top Secret with SCI eligibility. DHS EOD is also required to start on-site.
Program: Federal Emergency Management Agency
Job Description:
Department of Homeland Security (DHS), Federal Emergency Management Agency (FEMA) Security Operations is responsible for preventing, identifying, containing, and eradicating cyber threats to FEMA networks through monitoring, intrusion detection, and protective security services to FEMA information systems, including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public-facing websites, wireless, mobile/cellular, cloud, security devices, servers, and workstations. The FEMA Security Operations is responsible for the overall security of FEMA Enterprise-wide information systems and collects, investigates, and reports any suspected and confirmed security violations.
The ideal candidate will have a basic understanding of cyber threats, information security, security monitoring, threat detection, incident response, and incident handling (NIST SP 800-61). The candidate should be familiar with conducting security monitoring in an SIEM such as Splunk or other like tools. The candidate must be familiar with TCP/IP ports and protocols, IDS/IPS systems, and basic incident handling and response concepts. 
The Tier 2 Analyst should have experience with one or more of the following tools:
<ul>
<li>Splunk Enterprise Security</li>
<li>Crowdstrike Falcon</li>
<li>Swimlane</li>
<li>M365 Office and EOP</li>
<li>ElasticSearch</li>
<li>Axonius</li>
</ul>
Qualifications:
<ul>
<li>Active Top Secret with SCI eligibility </li>
<li>Minimum 3 years of MD&amp;A (Monitoring, Detection, &amp; Analysis) experience</li>
<li>Firm understanding of basic network protocols and common network architectures</li>
<li>Familiarity with host/network logs and log analysis.</li>
<li>Familiarity with common cybersecurity frameworks such as MITRE ATT&amp;CK, MITRE D3FEND, Cyber Kill Chain, etc.</li>
<li>Strong communication (writing and speaking) skills and ability to foster and work within a team-oriented environment.</li>
<li>Experience in the use of various OSINT tools.</li>
<li>Critical thinking and problem-solving skills.</li>
<li>Ability to prioritize and triage events.</li>
<li>Familiarity with cyber-attack patterns, common IOC, and threat actor actions.</li>
<li>Knowledge of common incident response and remediation actions.</li>
<li>Experience in writing reports and delivering oral presentations</li>
<li>Familiarity with the types of PII and classification levels.</li>
</ul>
Required Certifications: 
<ul>
<li>DoD 8570 IAT II certification</li>
</ul>
One or more of the following certifications are preferred:
<ul>
<li>CEH</li>
<li>BWEB - Web Application Defender</li>
<li>GNFA - Network Forensic Analyst</li>
<li>CCNA Security</li>
<li>CCNP Security</li>
<li>CHFI - Computer Hacking Forensic Investigator</li>
<li>ENSA - EC Council Network Security Administrator</li>
<li>ECIH - EC Council Certified Incident Handler</li>
<li>ECSS - EC Council Certified Security Specialist</li>
<li>GCIA - Intrusion analyst</li>
<li>GREM - Reverse Engineering Malware</li>
<li>GPPA - Perimeter Protection Analyst</li>
<li>GISF - Security fundamentals</li>
<li>GMON - Continuous Monitoring Certification</li>
</ul>

OneZero Solutions, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access <a href="http://www.onezerollc.com/careers" target="_blank">www.onezerollc.com/careers</a> as a result of your disability.
To request an accommodation, please contact us at <a href="mailto:recruiting@onezerollc.com" target="_blank">recruiting@onezerollc.com</a> or call (202) 987-2580.

Job Posted by ApplicantPro

Cyber Network Defense Analyst (Tier 2)

<h3>Job Description</h3>
Salary: 
Founded in 1998, Goldschmitt and Associates LLC (G&amp;A) has grown from a one-man consulting firm to over 200 employees in 9 states and across 12 Federal Agencies. Specializing in Custom Computer Programming and Systems Design, Management Consulting and Business Support Services, Asset Management and Data Analytics, and Custom Training Development and Delivery, G&amp;A is the #1 federal contractor in the VA/DC-Metro area, #2 provider of Information Technology services in America, and one of the top 50 fastest growing businesses according to the INC500. G&amp;A was also named to the INC VET100 Top Fastest Growing Service-Disabled Veteran Owned Businesses and awarded the 2022 SECAF Award of Excellence. G&amp;A could only have achieved this growth and success due to the outstanding support of what we like to call our “family” of talented personnel. To show our appreciation, we offer a diverse and inclusive environment with competitive benefits including flexible schedules and telework whenever the customer allows. 
Summary:
Goldschmitt and Associates is seeking a Fraud Investigator III  to bolster a Government customer’s fraud detection capabilities. Specifically, we require fraud investigation expertise to conduct SBA pandemic relief program eligibility and fraud screening/ analysis.  
Job Duties and Responsibilities:  
<ul>
<li> Adjudicate loans flagged for potential fraud. </li>
<li> Implement loan review procedures that include a manual quality control review process for all loan investigations and dispositions. </li>
<li> Leverage RFPs and subsequent documentation provided by borrowers/lenders to review bank records, tax records, payroll records, incorporation records, and other documentation for potential fraud or falsification.  </li>
<li> Conduct research via open source methods including government databases (OFAC, SAM, Secretaries of State, etc.) as well as commercial databases and Internet sources. </li>
<li> Use commercial databases such as LexisNexis, CLEAR, Duns &amp; Bradstreet, etc. for purposes of conducting fraud investigations.  </li>
<li> Use a case management system with productivity goals and oversight expectations. </li>
<li> Assist with pulling data within &lt;24 hours for documentation requests made by the U.S. Treasury Department, U.S. Congress, SBA OGC, and SBA OIG.  </li>
<li> Assist SBA with drafting responses to inquiries or findings made by government agencies and oversight committees such as the PRAC, GAO, and SBA OIG.  </li>
<li> Assist SBA with drafting responses to requests made by external oversight reviewers related to SBA financial audits, fraud risk assessments, or other PPP evaluations.   </li>
<li> Assist SBA with updating and maintaining PPP policies and procedures. </li>
<li> Provide detailed daily and weekly reporting on investigative activities.  </li>
<li> Other duties as assigned. </li>
</ul>
Minimum Qualifications:
<ul>
<li> Possess at least 10 years of investigative experience in federal law enforcement, financial institution, or Inspector General expertise focused on the areas of fraud, payroll fraud, white collar crime, and other financial crime investigations.  </li>
<li> Possess at least 2 years of experience investigating potential fraud within Covid pandemic relief programs, whether at SBA or another government agency.  </li>
<li> Possess prior experience investigating fraud in federally underwritten loan programs.  </li>
<li> Possess prior experience conducting forensic reviews of loan, tax, and business records to identify potentially fraudulent and/or falsified records.  </li>
<li> Possess prior experience coordinating/ collaborating on potential fraud referrals with law enforcement. </li>
<li> Possess the ability to obtain and maintain a Public Trust clearance </li>
</ul>
remote work

Fraud Investigator III

<h3>Job Description</h3>
Sphinx Digital Forensic Examiners (DFEs) support sensitive national security investigations and computer network defense operations on behalf of our clients. DFEs operate in a variety of environments ranging from the field to a formal digital forensic laboratory. DFEs will conduct full-spectrum digital forensic tasks to include digital evidence acquisition, triage, analysis, reporting, and testimony. In support of enterprise intrusion investigations, DFEs support incident response procedure and malware analysis to determine the extent of damage and actions taken by cyber criminal and Advanced Persistent Threat (APT) actors.
The roles and responsibilities of the Digital Forensic Examiner can vary depending upon the mission they are supporting and the needs of our clients. Common responsibilities include, providing digital evidence subject matter expertise in support of national security investigations and criminal investigations, providing expert witness testimony regarding digital forensic analysis findings, supporting incident response processes to identify, contain, eradicate, and remediate compromised environments, and conducting dynamic or static malware analysis of suspicious binaries and files.
Candidates seeking a Digital Forensic Examiner position with Sphinx must be mature, motivated, and dedicated to the mission. They must be flexible and adaptable as priorities and mission focus can routinely change from client to client and day to day as cases develop. You will be expected to remain knowledgeable on emerging technologies and threats targeting those technologies and the digital forensic procedures required to investigate their exploitation. Candidates will be expected to possess the ability to translate technical findings into understandable information for consumption by clients, leadership, and jury personnel. 
Ideal Digital Forensic Examiner candidates will meet the following requirements:
<ul>
<li>Clearance: Must currently possess an active TS/SCI security clearance and be able to obtain a CI polygraph after hire</li>
<li>Years of Experience: Must have at least 3-5 years of experience conducting, or supporting the conduct of, digital forensic analysis, digital media acquisition, mobile device acquisition/analysis, malware analysis, and/or incident response processes</li>
<li>Technical Certification: Possess industry recognized technical certifications relevant to the field of Digital Forensics (i.e, GIAC GCFA, GIAC GCFE, EnCE, ACE, DC3 Cyber Crime Investigator, US Army Counterintelligence Digital Threat Investigator (CDTI), DC3 Forensic Examiner, GIAC GREM, etc)</li>
</ul>

Desired Qualifications: 
<ul>
<li>Bachelor’s Degree from an accredited school in a related discipline</li>
<li>Completion of Defense Cyber Investigations Training Academy (DCITA) courses to include, Forensic Intrusion in a Windows Environment (FIWE), Windows Forensic Examiner (WFE), Computer Incident Responders Course (CIRC)</li>
<li>Familiarity with digital forensic tools such as EnCase, AccessData FTK, Autopsy/Sleuth Kit, SIFT, Magnet Forensics, or others</li>
<li>Advanced certifications in digital forensics to include GCFA, GCFE, FTK/EnCase Certified Examiner, or equivalent training</li>
<li>Current or former Federal Law enforcement of Counterintelligence qualification or graduate of LE/CI credentialing course (i.e, US Army CISAC (35L/97B), US AFOSI, NCIS, USMC CI/HUMINT, or other 1811 qualification course)</li>
</ul>

Job Type: Full-time
Pay: $85,000.00 - $145,000.00 per year
Benefits:
<ul>
<li>401(k)</li>
<li>401(k) matching</li>
<li>Dental insurance</li>
<li>Flexible schedule</li>
<li>Health insurance</li>
<li>Health Savings Account (HSA)</li>
<li>Life insurance</li>
<li>Paid time off</li>
<li>Parental leave</li>
<li>Professional development assistance</li>
<li>Referral program</li>
<li>Retirement plan</li>
<li>Vision insurance</li>
</ul>

Digital Forensic Examiner

<h3>Job Description</h3>
Sphinx Digital Forensic Examiners (DFEs) support sensitive national security investigations and computer network defense operations on behalf of our clients. DFEs operate in a variety of environments ranging from the field to a formal digital forensic laboratory. DFEs will conduct full-spectrum digital forensic tasks to include digital evidence acquisition, triage, analysis, reporting, and testimony. In support of enterprise intrusion investigations, DFEs support incident response procedure and malware analysis to determine the extent of damage and actions taken by cyber criminal and Advanced Persistent Threat (APT) actors.
The roles and responsibilities of the Digital Forensic Examiner can vary depending upon the mission they are supporting and the needs of our clients. Common responsibilities include, providing digital evidence subject matter expertise in support of national security investigations and criminal investigations, providing expert witness testimony regarding digital forensic analysis findings, supporting incident response processes to identify, contain, eradicate, and remediate compromised environments, and conducting dynamic or static malware analysis of suspicious binaries and files.
Candidates seeking a Digital Forensic Examiner position with Sphinx must be mature, motivated, and dedicated to the mission. They must be flexible and adaptable as priorities and mission focus can routinely change from client to client and day to day as cases develop. You will be expected to remain knowledgeable on emerging technologies and threats targeting those technologies and the digital forensic procedures required to investigate their exploitation. Candidates will be expected to possess the ability to translate technical findings into understandable information for consumption by clients, leadership, and jury personnel. 
Ideal Digital Forensic Examiner candidates will meet the following requirements:
<ul>
<li>Clearance: Must currently possess an active TS/SCI security clearance and be able to obtain a CI polygraph after hire</li>
<li>Years of Experience: Must have at least 3-5 years of experience conducting, or supporting the conduct of, digital forensic analysis, digital media acquisition, mobile device acquisition/analysis, malware analysis, and/or incident response processes</li>
<li>Technical Certification: Possess industry recognized technical certifications relevant to the field of Digital Forensics (i.e, GIAC GCFA, GIAC GCFE, EnCE, ACE, DC3 Cyber Crime Investigator, US Army Counterintelligence Digital Threat Investigator (CDTI), DC3 Forensic Examiner, GIAC GREM, etc)</li>
</ul>

Desired Qualifications: 
<ul>
<li>Bachelor’s Degree from an accredited school in a related discipline</li>
<li>Completion of Defense Cyber Investigations Training Academy (DCITA) courses to include, Forensic Intrusion in a Windows Environment (FIWE), Windows Forensic Examiner (WFE), Computer Incident Responders Course (CIRC)</li>
<li>Familiarity with digital forensic tools such as EnCase, AccessData FTK, Autopsy/Sleuth Kit, SIFT, Magnet Forensics, or others</li>
<li>Advanced certifications in digital forensics to include GCFA, GCFE, FTK/EnCase Certified Examiner, or equivalent training</li>
<li>Current or former Federal Law enforcement of Counterintelligence qualification or graduate of LE/CI credentialing course (i.e, US Army CISAC (35L/97B), US AFOSI, NCIS, USMC CI/HUMINT, or other 1811 qualification course)</li>
</ul>

Job Type: Full-time
Pay: $95,000.00 - $140,000.00 per year
Benefits:
<ul>
<li>401(k)</li>
<li>401(k) matching</li>
<li>Dental insurance</li>
<li>Flexible schedule</li>
<li>Health insurance</li>
<li>Health Savings Account (HSA)</li>
<li>Life insurance</li>
<li>Paid time off</li>
<li>Parental leave</li>
<li>Professional development assistance</li>
<li>Referral program</li>
<li>Retirement plan</li>
<li>Vision insurance</li>
</ul>

9 computer-forensic-investigator Jobs