<h3>Job Description</h3>
Job DescriptionSalary: 55,000 
What Is MyBambu?
MyBambu is a cutting-edge fintech platform delivering the first all-in-one mobile digital financial solution for underserved, primarily Hispanic communities. With a focus on financial inclusion, MyBambu offers easy access to a range of services, including checking accounts without credit checks, remittance services, bill payments, and mobile top-ups. Recognized with the FIS Impact Award for innovation in 2020, MyBambu is dedicated to breaking down barriers to financial access and literacy, empowering users through a bilingual, user-friendly mobile experience tailored to diverse needs. MyBambuparticipates in E-verify and will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new hires Form I-9 to confirm work authorization. Find out more information: E-Verify Participation Poster orRight to Work Poster.
Your Opportunity
The impact that you can have at MyBambu is powerful. Were looking for someone whos eager to take on a meaningful role in the success of MyBambu on a massive scale. Someone who takes works seriously, but also isnt afraid to have some fun either. Someone whos ready to take MyBambuand their careerto the next level. 
This position is a full-time, in person position reporting to the Compliance Manager. As the Digital Compliance and Fraud Investigator. You will be responsible for analyzing and managing accounts focused on anti-money laundering, counter-terrorist financing, financial intelligence, suspicious activity reporting, sanctions screening, anti-bribery and corruption, and digital fraud analysis.
 
Job Responsibilities
<ul>
<li>Fraud Detection and Prevention: Conduct thorough analyses of accounts and activities to identify and assess fraudulent behavior, utilizing advanced digital tools and techniques.</li>
<li>Digital Forensics: Perform detailed digital forensic analyses to investigate fraudulent activities, ensuring the security and integrity of digital financial transactions.</li>
<li>Transaction Monitoring: Oversee and review daily transactions to ensure compliance with BSA/AML regulatory standards, including the reconciliation of daily transactions and new customer accounts.</li>
<li>Suspicious Activity Management: Evaluate potentially suspicious activities, prepare and file Suspicious Activity Reports (SARs) for confirmed incidents, and validate high-risk KYC files.</li>
<li>Sanctions Screening: Screen live payments for potential OFAC violations and review and validate transaction filtering and monitoring programs.</li>
<li>Regulatory Compliance: Stay informed about changes in US and global financial crime compliance regulations, incorporating new regulations into ongoing programs to ensure continuous compliance.</li>
</ul>
 
Skill and Skills &amp; Abilities:
<ul>
<li>Exceptional Writing Skills: Ability to create high-quality documents that prescribe or govern activities and relationships, such as policies and procedures, commercial contracts, corporate transactional documents, or legislation/regulations.</li>
<li>Analytical Thinking: Capability to understand dynamic contexts comprising legal requirements, business objectives, resource constraints, and stakeholder interests, and to exercise creativity and judgment in guiding and organizing activities effectively.</li>
<li>Strong Communication: Excellent interpersonal skills to support effective collaboration and consensus-building among diverse interests or viewpoints.</li>
<li>Attention to Detail: Strong work ethic, good humor, and enthusiasm for tackling complex challenges with the ability to manage multiple projects simultaneously and resolve competing priorities effectively.</li>
<li>Technical Proficiency: Proficiency in digital forensics and related software tools.</li>
</ul>
 
Job Requirements:
<ul>
<li>Bilingual proficiency Spanish and English.</li>
</ul>
<ul>
<li>At least one year of professional experience in financial crimes compliance and risk management, with knowledge of legal, policy, and/or operational aspects of financial crime compliance programs (e.g., AML/CTF, CDD, SARs, sanctions/OFAC, ABC, KYC, CIP and/or financial crime investigations).</li>
<li>CAMS or CFCS certification is preferable but not require</li>
</ul>
 
Physical Requirements:
<ul>
<li>Prolonged periods sitting at a desk and working on a computer.</li>
<li>Must be able to lift up to 15 pounds at times.</li>
</ul>
 
MyBambu Benefits
<ul>
<li>Excellent medical coverage.</li>
<li>Fifteen (15) days of Paid Time Off.</li>
<li>Seven (7) days of Paid Holidays. </li>
</ul>

Compliance and Fraud Investigator - Bilingual Required (English/Spanish)

<h3>Job Description</h3>
Job DescriptionCompany Description 
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to accomplish their financial goals and help them save time and money.
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.
Job Description 
Overview
We are looking for a Senior Cyber Forensic Investigator to join our Cyber Fusion Centre. Our Cyber Fusion Center (CFC) uses the latest technology and trained security experts to detect and investigate security attacks and insider risks globally.This critical role leads complex investigations into cyber incidents, data breaches, insider threats, and other digital security events. You will bring expertise in digital forensics, incident response, and threat intelligence to protect Experian's digital assets and ensure compliance with global regulatory standards.
You will report to the Senior Director of Cyber Forensics and Cyber Threat Hunting and offers the opportunity to work with a global team of elite cybersecurity professionals.
Responsibilities
<ul>
<li>You must reside within commuting distance to our Allen, Texas Office. Occasional on-site presence is required to manage the forensic lab, receive and process physical evidence and conduct high-priority investigations.</li>
<li>Independently conduct detailed forensic investigations into cyber incidents, data breaches, malware infections, unauthorized access, insider threats, fraud and abuse, and employee misconduct.</li>
<li>Analyze digital evidence from sources such as cloud platforms, networks, servers, endpoints, and mobile devices.</li>
<li>Interpret device and application logs from a variety of sources (e.g., firewalls, proxies, web servers, system logs, Splunk, packet captures) to identify anomalies or evidence of compromise.</li>
<li>Prepare comprehensive investigative reports, including findings, conclusions, and recommendations for remediation and future prevention.</li>
<li>Present findings to technical and non-technical team members, including legal and executive leadership.</li>
<li>Ensure all forensic activities adhere with legal and regulatory requirements, including chain of custody and data protection laws.</li>
<li>Provide training and mentorship to other forensic investigators and collaborate with cybersecurity teams</li>
<li>Support real-time incident response efforts and participate in on-call rotations</li>
<li>Manage the Digital Forensics Lab environment, including tools, evidence handling, and process integrity.</li>
<li>Enhance forensic capabilities by building tools, scripts, and methodologies.</li>
<li>Travel domestically and internationally occasionally for meetings, training sessions, and on-site investigations.</li>
<li>#LI-Remote</li>
</ul>
Qualifications 
Qualifications
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Equivalent professional experience (typically 8+ years in digital forensics or incident response)</li>
<li>5–7+ years in digital forensics, incident response, or a related cybersecurity discipline.</li>
<li>In-depth understanding of network intrusion methods and cyber attack TTPs</li>
<li>Hands-on experience conducting forensics and incident response in cloud environments (e.g., AWS, Google Cloud, Microsoft Azure) and across multiple operating systems, including Windows, Linux, and macOS.</li>
<li>Experience using Endpoint Detection and Response (EDR/XDR) tools for threat hunting, log analysis, and investigative support.</li>
<li>Proficiency in the MITRE ATT &amp; CK Framework with experience applying these to digital forensics investigations.</li>
<li>Experience with digital forensics tools (e.g., Axiom, Autopsy, Volatility, EnCase, FTK, Cellebrite), and decryption and data recovery tools.</li>
<li>Familiarity with SIEM and SOAR platforms (e.g., Splunk, Chronicle, Sentinel) for log correlation and automated response.</li>
<li>One or more certifications such as GCFA, GCFE, EnCE, or equivalent</li>
<li>Expertise in cyber threats, attack vectors, and advanced mitigation strategies and guiding strategic response efforts.</li>
<li>Proficiency with forensic tools (e.g., EnCase, Magnet AXIOM, X-Ways, SANS SIFT), including both commercial and open-source solutions.</li>
<li>Expertise in forensic techniques such as memory forensics, network forensics, malware analysis, and timeline reconstruction.</li>
<li>Scripting and programming capabilities in languages such as PowerShell, Bash, Python, Ruby, or Java to automate forensic tasks and develop custom analysis tools.</li>
<li>Knowledge of legal, regulatory, and evidentiary standards related to digital forensics and incident response</li>
</ul>
 Additional Information 
Benefits/Perks
<ul>
<li>Great compensation package and bonus plan</li>
<li>Core benefits including medical, dental, vision, and matching 401K</li>
<li>Flexible work environment, ability to work remote, hybrid or in-office</li>
<li>Flexible time off including volunteer time off, vacation, sick and 12-paid holidays</li>
<li>Explore all our exciting benefits here: <a href="https://yourexperianbenefits.com/cand-index.html" target="_blank">https://yourexperianbenefits.com/cand-index.html</a></li>
</ul>
Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, collaboration, wellness, reward &amp; recognition, volunteering... the list goes on. Experian's people first approach is award-winning; World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Senior Cyber Forensic Investigator, Hybrid

<h3>Job Description</h3>
Job DescriptionCompany Description 
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them save time and money.
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com
Job Description 
As a member of Experian's Global Security Office (EGSO)/Cyber Fusion Center (CFC), you will respond, contain, escalate, investigate, and coordinate mitigation of security events relative to anomalies detected and escalated by the Cyber Fusion Center according to Experian's Incident Response Plan. As an individual contributor, this team member will join a new, growing team of specialized, advanced responders to support escalations of complex and prioritized matters from Experian's existing 24x7 security monitoring and response functions. You will work with end-users, technical support teams, and management to ensure remediation and recovery from these threats.
You will report to the Senior Manager, Global Incident Response. You will have a regular Monday – Friday schedule, with the expectation to participate in an on-call schedule or work outside of normal work hours to respond to cybersecurity incidents.
You'll have the opportunity to:
<ul>
<li>Conduct advanced incident response activities to investigate and contain complex or larger-scale cybersecurity matters.</li>
<li>Orchestrate workstreams across teams (Forensics and Cyber Threat Hunting) and explain the CFC's overall understanding of the timeline of attacker activity.</li>
<li>Respond to cybersecurity events and alerts associated with threats, intrusions, or compromises per any applicable SLOs.</li>
<li>Manage multiple cases related to security incidents throughout the incident response lifecycle, including Analysis, Containment, Eradication, Recovery, and Lessons Learned.</li>
<li>Coordinate successful conclusion of security incidents according to Process &amp; Procedures, and escalate severe incidents according to Experian's Incident Response Plan.</li>
<li>Maintain case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident.</li>
<li>Maintain assigned caseload and move incidents through each phase of the IR Lifecycle, handing off cases as needed for progress.</li>
<li>Maintain an understanding of common Operating Systems (Windows, Linux, Mac OS), Security Technologies (Anti-Virus, Intrusion Prevention), and Networking (Firewalls, Proxies).</li>
<li>Interpret device and application logs from a variety of sources (Firewalls, Proxies, Web Servers, System Logs, Splunk, Packet Captures) to identify the root cause and determine the next steps for containment, eradication, and recovery.</li>
<li>Support overall direction for the CFC and input to the security strategy.</li>
<li>Mentor and provide advanced support to analysts (Logs review, IP Block question).</li>
</ul>
Qualifications 
Your background:
<ul>
<li>8+ years of experience working within cybersecurity or information technology roles, at least 4+ of which includes working as an investigator, analyst, or leader in a Cyber Incident Response Team.</li>
<li>Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security, or a related field. 11+ years of experience working within a Security Operations Center, Incident Response Team, law enforcement, or military experience may be accepted in lieu of this requirement.</li>
<li>Knowledge of network protocols (TCP/IP, UDP, ICMP), standard protocols (HTTP/S, DNS, SSH, SMTP, SMB), wireless networking, networking infrastructure, and network topologies (DMZ, VPN, WAN) and network technologies (WAF, IPS, Routers, or Firewalls).</li>
<li>Experience with commercial and open-source SIEMs, full packet capture tools, and network analysis tools (Splunk, Wireshark, SOF-ELK).</li>
<li>Exhibit skills using common Incident Response and Security Monitoring applications such as SIEM (Splunk), EDR (FireEye HX, CrowdStrike Falcon, McAfee mVision EDR), WAF, IPS.</li>
<li>Have at least one certification involving incident response, ethical hacking, cyber security (GCIH, E CEH, E CIH), or network forensics (GIAC Network Forensic Analyst (GNFA), NICCS Certified Network Forensics Examiner (CNFE)).</li>
<li>Hold one Security Management certification (ISC2 CISSP, CISM) or obtain such certification within the first two years as a Cyber Incident Response Lead.</li>
</ul>
 Additional Information 
Benefits/Perks:
<ul>
<li>Great compensation package and bonus plan.</li>
<li>Core benefits including medical, dental, vision, and matching 401K.</li>
<li>Flexible work environment, ability to work remote, hybrid or in-office.</li>
<li>Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.</li>
</ul>
Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, collaboration, wellness, reward &amp; recognition, volunteering... the list goes on. Experian's people first approach is award-winning; World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why.
Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience, and education. This position is also eligible for a variable pay opportunity and a comprehensive benefits package.
Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. Innovation is an important part of Experian's DNA and practices, and our inclusive workforce allows everyone to succeed and bring their whole self to work. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
#LI-Remote
This is a remote position.

Cyber Incident Response Lead - Advanced Response Team (Remote)

<h3>Job Description</h3>
Job Description VACANCY ANNOUNCEMENT General Investigations Detective (DCJS L.E. certified) – Part Time Starting Salary: $30-40/ hourly (Negotiable with qualifications and experience) Background: The Fredericksburg Police department is accepting applications for the position of General Investigations Detective. Detectives are responsible for the prevention, detection, investigation, and prosecution of criminal violations related to crimes against persons and property in the City of Fredericksburg. Detectives may be assigned to investigate any type of crime, but assignments are typically made based upon the detective's training and experience. Detectives may be required to specialize in particular areas including, but not limited to: sex offenses, domestic violence, fraud, property crimes, major felonies and forensics. Part-time Detectives at the Fredericksburg Police Department work a flexible schedule approved by the Division Commander.&nbsp; This position may also require work outside the normal schedule to complete the mission.&nbsp; This part-time position requires a total of 24 hours of work commitment per week, for a total of 48 hours in a two-week work cycle. Salary will be commensurate with training and experience. Minimum requirements include: 
<ul>
<li>Current Virginia DCJS Certified officer with 3 years’ experience in law enforcement.</li>
<li>Have previously documented experience as a detective, investigator, agent, or other field of specialized criminal investigatory activities</li>
<li>Full Resume </li>
<li>No more than two moving violations within previous 24 months</li>
<li>No current or previous revocations of suspension of license within previous 60 months due to a moving violation</li>
<li>Undergo a background investigation including fingerprint-based criminal history records inquiries to both the CCRE and FBI</li>
<li>Undergo a physical examination, subsequent to a conditional offer of employment</li>
<li>Polygraph Examination</li>
<li>Must complete lawfit course</li>
</ul>
Duties: All detectives assigned to the General Investigations section are responsible for the following:
<ul>
<li>Upon being hired, completing a modified Field Training &amp; Evaluation Program </li>
<li>Producing well-documented reports, supplements, and investigations</li>
<li>Testifying in Court and Grand Jury proceedings</li>
<li>Assisting patrol officers with certain cases</li>
<li>Maintaining liaison with other agencies and detectives</li>
<li>Sharing information with other detectives and agencies regarding certain investigations</li>
<li>Working irregular hours upon short notice and participating in call-outs for major incidents</li>
<li>Carrying a department issued cell phone and subject to be called back to work when needed</li>
<li>Willing to work in an undercover capacity as required</li>
<li>Working closely with victim advocates, Commonwealth Attorneys, Social Services, and other service providers</li>
<li>Any other duties requested by a supervisor or the Detective Division Commander</li>
</ul>
Preferred Skills and Abilities: Candidates must possess an avid interest in being a General Investigations Detective and should possess the following in order to be successful:
<ul>
<li>Knowledge of laws and procedures related to criminal investigations</li>
<li>Knowledge of search and seizure laws and procedures</li>
<li>Knowledge of crime scene and evidence management</li>
<li>Knowledge of interview techniques to include but not limited to:
<ul>
<li>Reid Interview and Interrogation</li>
<li>ChildFirst Forensic Interviewing</li>
<li>Polygraph Examinations</li>
<li>Crisis Stabilization/Crisis Negotiation</li>
</ul>
</li>
</ul>
<ul>
<li>Knowledge of Virginia Department of Forensic Science Evidence Handling Techniques</li>
<li>Virginia Department of Forensic Science academy alumni</li>
<li>Fingerprint Examination/AFIS experience</li>
<li>Knowledge of Computer/Mobile Device forensics</li>
<li>Experience from any specialty task force assignment</li>
<li>Ability to work with minimal supervision or direct supervision where applicable</li>
<li>Ability to use computers to research information</li>
<li>Willingness to follow directions to achieve the goals and objectives of the division</li>
<li>Ability to react quickly both mentally and physically to potentially dangerous situations</li>
</ul>
 NOTE: No significance should be placed on the order of these skills and abilities. Come be part of a knowledgeable and amazing work team committed to excellence in serving a thriving and growing community.&nbsp; All City employees are committed to our City’s Core Values. This position is open until filled. For questions or to apply, contact Sergeant Heather Shepherd at <a href="mailto:hshepherd@pd.fredericksburgva.gov" target="_blank">hshepherd@pd.fredericksburgva.gov</a> or 540-654-5912.&nbsp; Additional information about our hiring process may be found on the Fredericksburg Police Department’s web page: Employment | Fredericksburg, VA - Official Website (fredericksburgva.gov) &nbsp;City of Fredericksburg Human Resources Department P. O. Box 7447 Fredericksburg, VA&nbsp; 22404-7447 <a href="mailto:Fxbghire@fredericksburgva.gov" target="_blank">Fxbghire@fredericksburgva.gov</a> &nbsp;
Powered by JazzHR
UjezEkc9O0

General Investigations Detective (DCJS L.E. Certified) - Part Time

<h3>Job Description</h3>
Description
Leidos is seeking a highly skilled and experienced Insider Threat Senior Analyst to support and maintain an agency-wide plan and program for insider threat awareness, response consultation, policy enhancement, continuous monitoring, and reporting requirements. During execution of their duties the candidate may be required to deliver and receive sensitive briefings within SSA secured spaces such as the SCIF at SSA or an approved alternate secured location.&nbsp; Join one of our high performing teams responsible for administering and assessing the agency’s suite of security controls and safeguarding the agency’s data from improper disclosure, abuse and fraud, supporting the Social Security
Administration (SSA) and their mission to meet the changing needs of the public, positively impacting at least 65 million American lives per month.&nbsp; We are a team of forward-looking professionals in need of a strong candidate with these key required skills:&nbsp; Strong background and expertise in Insider Threat and will undertake an agile approach to provide strategic planning support, iterative program improvements, Operations &amp; Maintenance (O&amp;M), and overall programmatic support services for the Office of Information Security (OIS) and its Insider Threat Program Management Officer (PMO). Collaborate with stakeholders to prioritize data sources for onboarding into risk models and gathering requirements for dashboards to provide a holistic view on operations. Services include supporting and advising the OIS insider threat PMO in the ongoing development of the insider threat products and program roadmap(s), using analytical methods to understand insider risk patterns and establish models for forecasting insider risk scenarios, and providing services to implement, execute, and maintain necessary activities in support of an OIS-wide counter insider threat program. &nbsp;
*** Selected candidate must be willing to work on-site in Woodlawn, MD 5 days a week.
If this sounds like a mission you want to be a part of, keep reading!
TEAM CULTURE
Your passion and values might be a good fit for our teams if you answer “yes” to the following questions:
<ul>
<li>Are you looking for a company that puts employees first, with a focus on career, flexibility, and well-being?</li>
<li>Do you enjoy collaborating with colleagues and teammates and believe that the best ideas are fostered in an inclusive environment?</li>
<li>Are you searching for a team with a strong sense of ownership, urgency, and drive for daily mission success?</li>
<li>Are you comfortable with proactive outward communication and technical leadership?</li>
<li>Do you enjoy being a catalyst, solving complex problems, and providing innovative solutions?</li>
<li>Do you have the flexibility, creativity, and resilience to pivot the mission for success?</li>
<li>Do you have the courage to make tough ethical decisions with pride, transparency, and respect?</li>
</ul>
MENTORSHIP &amp; CAREER GROWTH
Our teams are dedicated to supporting new team members in an environment that celebrates knowledge sharing and mentorship. Experienced team members will be assigned to new hires for one-on-one mentoring, collaborative reviews, and coaching on customer engagement to help each new hire successfully onboard and demonstrate their skills. Projects and tasks are assigned in a way that leverages your strengths and will help you further develop your skillset.
DAY TO DAY RESPONSIBILITIES
Every position we take is more rewarding when you know the why behind it.&nbsp;Know your work makes a difference to support those who need it most. If your passion is enabling life changing service to those around, you this is the place for you. Find you passion in a team environment where all members are valued regardless of contractor or employee status.&nbsp;&nbsp; Find your “Why” with us and take your place in our Leidos Family!!
<ul>
<li>Support updates to insider threat policies and procedures for the agency, interagency, or federal intelligence community-wide initiatives.</li>
<li>Provide technical expertise in cyber and insider adversary capabilities, assessing the intentions of adversary groups to conduct computer network exploitation and attacks against U.S. private sector and government networks.</li>
<li>Develop methods and procedures to extract data from existing SSA IT systems to identify potential insider threats and vulnerabilities in SSA IT assets.</li>
<li>Recommend new or amended technical indicators for implementation in insider threat detection systems (e.g., SIEM, UBA, UAM) in accordance with approved SSA policies and procedures.</li>
<li>Collaborate with the insider threat team to enhance enterprise-level Standard Operating Procedures (SOPs) for automation and orchestration.</li>
<li>Provide cyber intelligence support activities in collaboration with other OIS intelligence partners, including supply chain and cyber threat analysis units, and the Security Operations Center (SOC).</li>
<li>Review and disseminate information from cyber news feeds, incident reports, threat briefs, and vulnerability alerts to assess their applicability and impact on the SSA environment.</li>
<li>Develop and test new trigger policies to address emerging security challenges within tight timelines.</li>
<li>Monitor, analyze, and report on non-classified cyber activity, trends, and incidents that may pose threats to the confidentiality, availability, and integrity of the SSA network.</li>
<li>Utilize findings from risk assessments and trend analysis to determine possible causes of network alerts and assist in developing mitigation and remediation control measures.</li>
<li>Prepare and present professional briefings and reports on insider threat cases to the Insider Threat Program Manager and the Chief Forensic Investigator, following established formats and agency writing guidelines.</li>
<li>Monitor external data sources (e.g., cyber intelligence vendor sites, NITTF, CISA, ODNI, NCSC) and analyze trends to interpret the relevance of information concerning active and potential insider threats.</li>
<li>Submit analysis reports, including text, charts, and spreadsheets, for inclusion in Insider Threat Work Status Reports as requested by the Program Management Office (PMO).</li>
</ul>
FOUNDATION FOR SUCCESS (Basic Qualifications)
<ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field and 8 years of experience. Additional years of experience may be substituted in lieu of degree.</li>
<li>Proven experience in cybersecurity, insider threat analysis, or a related area.</li>
<li>Strong understanding of cyber threat landscapes, adversary tactics, techniques, and procedures (TTPs).</li>
<li>Familiarity with security information and event management (SIEM) systems and user behavior analytics (UBA).</li>
<li>Excellent analytical skills to assess vulnerabilities and identify potential insider threats.</li>
<li>Strong written and verbal communication skills for preparing reports and conducting briefings.</li>
<li>Must be able to obtain and maintain a Public Trust. Contract requirement.</li>
</ul>
FACTORS TO HELP YOU SHINE (Required Skills)
These skills will help you succeed in this position:
<ul>
<li>Expertise in Insider Threat</li>
<li>Ability to make decisions based upon analysis of documentation.</li>
<li>Ability to provide advice and technical support to SSA staff.</li>
</ul>
HOW TO STAND OUT FROM THE CROWD (Desired Skills)
Showcase your knowledge of modern development through the following experience or skills:
<ul>
<li>Experience with federal regulatory requirements and compliance standards related to cybersecurity.</li>
<li>Knowledge of risk management frameworks and methodologies.</li>
<li>Familiarity with tools and technologies used for threat detection and analysis.</li>
<li>Security certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.</li>
</ul>
At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams and contribute to our communities. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. Every position we take is more rewarding when you know the why behind it.&nbsp;Know your work makes a difference to support those who need it most. If your passion is enabling life changing service to those around, you this is the place for you. Find your passion in a team environment where all members are valued regardless of contractor or employee status.&nbsp; We are excited for you to take your place in our Leidos Family.
Are you an US citizen, US resident, or Visa candidate and think you might fit? We recommend you apply and start the conversation today! Join us in supporting our SSA contracts in Woodlawn, Maryland.
ITSSCII
Original Posting:May 19, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:Pay Range $104,650.00 - $189,175.00
The Leidos pay range for this job level is a general guideline only&nbsp;and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Insider Threat Analyst

The Company
Our client is a multi-national information technology company with its headquarters in Singapore.
It is also the largest Systems Integrator domestically.
The Project:
This project consists of multiple teams deployed within Cybersecurity Operations Command Centre delivering mission critical 24x7 threat monitoring, prevention, analysis, intelligence to high-valued clients.
 
The Role:
<ul>
<li>Provide 24x7 Level 1 network monitoring support based on the standard operating procedure (SOP) as well as training by the IT Service Operations /IT Service Manager.</li>
<li>12hr-shift rotational basis. 8am to 8pm, 8pm to 8am (including public holidays where necessary)</li>
<li>Conduct daily, weekly, scheduled checks using automated tools/solutions to initiate vulnerability scans of servers and determine the status of network routers/switches with reference to the SOP.</li>
<li>Upon failure, troubleshoot, re-activate and re-schedule scanning.</li>
<li>Escalate issues beyond level 1, to the Security Engineer for follow-ups, upon detection of security vulnerabilities.</li>
<li>Track patch management activities on a daily basis</li>
<li>Initial reporting of vulnerabilities / availabilities of patches to successful remediation for servers and network routers / switches.</li>
<li>Leverage on provided tools and solutions to monitor, track and escalate to the relevant stakeholders for all outstanding vulnerabilities detected in the scans as well to the internal security team for remediation.</li>
<li>Ensure ongoing maintenance of asset inventory for onboarding of new systems and offboarding of existing systems to be scanned by the relevant tools.</li>
<li>Conduct monthly / ad-hoc compliance audit scan for servers and routers / switches.</li>
<li>Escalate identified issues to the Security Engineer that are follow-ups and security compliance related.</li>
<li>Conduct ad-hoc scan of servers upon detection and identification of emerging threats.</li>
<li>Rotational shifts: 1st Shift (08:00 - 20:00 Hrs) &amp; 2nd Shift (20:00 - 08:00 hrs)</li>
</ul>
Requirements
<ul>
<li>Minimum Diploma grad with module in IT or Cyber Security</li>
<li>Preferably with experience in one or more of the following areas:
<ul>
<li>Management of IDS/IPS, firewall systems.</li>
<li>Vulnerability Assessment, penetrating testing &amp; risk assessment using various scanning and penetration testing tools</li>
</ul>
<ul>
<li>Unix, WIN2K, NT and web server security such as OS tightening, SSO and virus scanning</li>
</ul>
</li>
<li>General Working knowledge of Information Security concepts</li>
<li>Possess adequate understanding of Layer 1-7 Networking Concepts • Good communication skills (verbally, reading &amp; in writing)</li>
<li>Ability to follow predefined procedures, policies &amp; processes, work under pressure;</li>
<li>Willingness to work in shifts</li>
<li>Advantages for those in Possession of security Analyst certification eg Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA) or Computer Hacking Forensic Investigator (CHFI) will be advantageous but not mandatory.</li>
</ul>
Benefits
<ul>
<li>End of contract bonus</li>
</ul>

Security Analyst - (WL-FRW230525 039/05)

<h3>Job Description</h3>
Job Description
<ul>
<li>Responsible for training students with the knowledge necessary to detect, identify, disrupt, and gather evidence of Foreign Intelligence Entity (FIE) espionage and foreign terrorism related activities within the cyber domain. </li>
<li>ICDC provides foundational knowledge in digital theory, Advanced Persistent Threat (APT) nation state sponsored actors, the Tactics, Techniques, and Procedures (TIP) employed by FIE threat actors, acquisition and analysis of network logs and associated artifacts, proper internet search techniques, and physical and digital evidence collection. </li>
<li>ICDC involves both online and in-residence instruction and is intended as a follow-on to the Defense Cyber Crime Center (DC3) Cyber Training Academy's (CTA) Cyber Incident Response Course (CJRC), Windows Forensic Examinations (WFE) and Forensic Intrusions in a Windows Environment.</li>
<li>Deliver classroom-based instruction and assess student performance in field exercises that frequently exceed 8-hours a day, including weekends during course(s).</li>
<li>Devise plans that leverage all CI functions and investigative tools. </li>
<li>Provide CI subject matter expert expertise for course development, instruction, and mentorship in OFCO support to CI.</li>
</ul>
Skills &amp; Abilities: 
<ul>
<li>Experience employing a variety of learning techniques, i.e., eLearning tools, lectures, classroom discussions, team exercises, readings, case studies, role plays and demonstrations of required skills through work-related tasks.</li>
<li>Candidates must be able to sit and stand for up to two (2) hours at one time; and be able to walk for up to five (5) hours in one day. </li>
<li>Demonstrated expertise in CI Investigations in a cyber environment, verifiable through demonstrated knowledge attained through a combination of industry training, DoD training, or academia.</li>
<li>Demonstrated skills attained through verifiable assignments exercising increased levels of responsibility; demonstrated skills attained through verifiable assignments exercising increased levels of responsibility.</li>
<li>Demonstrated abilities through attained industry certifications, DoD recognized cyber security certifications or digital forensics certifications. </li>
</ul>

Education and Experience: 
<ul>
<li>Must be a graduate from an accredited Cl Special Agent credentialing school.
<ol>
<li>JCITA NSIC, ACIIC, AFCITC or an equivalent course (subject to approval by the customer)</li>
</ol>
</li>
<li>Must have a minimum of three (3) years of demonstrated experience conducting or supporting CI investigations as a Special Agent in support of CI investigations in Cyberspace. </li>
<li>Experience with Wireshark, Splunk, cloud based we services, VMWare, Python (or other scripting languages), mobile, vehicle or wireless forensics, computer forensics methodology and tools (e.g., EnCase, FTK, Magnet Axiom), and memory and/or malware analyses.</li>
<li>Required to have a DoD Windows Forensics Examiner certificate, DoD Certified Computer Crime Investigator certificate, or equivalent (subject to customer approval). </li>
</ul>
Citizenship and Security Clearance Requirements:
<ul>
<li>Applicants must be U.S. Citizens </li>
<li>TS/SCI with Poly or ability to obtain Polygraph.</li>
</ul>
About Garud:
<ul>
<li>Garud Technology Services, Inc. (Garud), is a Maryland-based, Woman Owned Small Business (WOSB), and a highly specialized provider of Technical and Professional services to organizations with demanding requirements. Our portfolio of customers includes the Department of Defense (DoD), Department of Education (ED), Department of Homeland Security (DHS), Department of Transportation (DOT) and federal, state and local authorities tasked with developing and fielding cutting-edge technologies. Our team includes engineers, scientists and Subject Matter Experts with hard-to-find experience and qualifications, and we apply industry accepted quality processes that include CMMI-DEV (Level II Appraised). ISO-9001 &amp; 14001:2015 and ISO/IEC 20000-1:2011 &amp; 27001:2013 (Certified). </li>
<li>Learn more about Garud at <a href="http://www.garudtechnology.com" target="_blank">www.garudtechnology.com</a>.</li>
</ul>
 Garud provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

ICDC CI SME/Instructor

<h3>Job Description</h3>
Job DescriptionImagine One Technology &amp; Management is currently seeking an Information Security Analyst “contingent” on award of the associated work to the Imagine One Team. This position supports the U.S. Navy in Lexington Park, Maryland. The Information Security Analyst will plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. They may ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. They may also respond to computer security breaches and viruses. Experience Requirements: 
<ul>
<li>
Qualifying candidates must possess ONE of the following required qualifications: 
<ul>
<li>Minimum of five (5) years of experience carrying out duties similar to the functions above </li>
<li>NAVEDTRA 43350 (Malware)</li>
<li>NAVEDTRA 43469 Watchstation 303 - Information Assurance Technician Level III</li>
<li>NAVEDTRA 43301-5B LCS Total Shipboard Computing Environment (TSCE)</li>
<li>NAVEDTRA 43469 Watchstation 304 - Information Assurance Manager</li>
<li>JQR Incident Handling QC Analyst (306)</li>
<li>JQR Incident Handling Trends Analyst (305)</li>
<li>JQR Information Assurance Vulnerabilities Management (VAAP - Vulnerability Analysis and Assistance Program) </li>
<li>Experience in the following areas: </li>
<li>Enterprise Mission Assurance Support Service (eMASS) </li>
<li>Vulnerability Remediation Asset Manager (VRAM)</li>
<li>Navy Risk Management Framework (RMF) SOPs </li>
<li>Microsoft Defender for Endpoint (MDE)</li>
<li>Continuous Monitoring and Risk Scoring (CMRS)</li>
</ul>
</li>
<li>Experience with performing STIG implementation</li>
<li>Experience performing vulnerability assessments with the Assured Compliance Assessment Solution (ACAS) tool</li>
<li>Experience remediating vulnerability findings to include implementing vendor patches</li>
<li>Experience reviewing RMF documentation such as system categorization, Security Plan, Implementation Plan, Security Assessment Plan, System Level Continuous Monitoring (SLCM) Plan, System POA&amp;M</li>
</ul>
Educational Requirements:   
<ul>
<li>
Qualifying candidates must possess ONE of the following required educational qualifications: 
<ul>
<li>Bachelor’s degree</li>
<li>CNSSI 4012-Senior Systems Managers/4013-System Administrators/4014-Information Systems Security Officers (ISSO) /4015-Systems Certifiers/4016-Risk Analysts</li>
<li>NDU CIO certificate-Chief Information Officer (CIO)</li>
<li>Computer Hacking Forensic Investigator (CHFI)</li>
<li>GIAC Reverse Engineering Malware (GREM)</li>
<li>CISM</li>
<li>GIAC Certified Incident Handler (GCIH)</li>
<li>EC-Council Certified Incident Handler (ECIH)</li>
<li>GIAC Certified Forensics Analyst (GCFA)</li>
<li>CEH</li>
<li>CISSP</li>
<li>GSEC</li>
<li>Licensed Penetration Tester (LPT) *Retired </li>
<li>CASP+</li>
<li>GSLC</li>
<li>CSSLP</li>
<li>NEC 741A Information System Security Manager</li>
<li>NEC 742A Network Security Vulnerability Technician </li>
<li>NEC H10A Basic Cyber Analyst/Operator </li>
<li>NETW 4001 Security Plus</li>
<li>SSC 6209-Network Operations and Technology</li>
<li>Hunt Methodologies Course (HMC)</li>
<li>Intermediate Cyber Core (ICC)</li>
<li>CYBR2100 Certified Ethical Hacker</li>
<li>CYBR2150</li>
<li>CYBR3420 Intermediate Cyber Core </li>
</ul>
</li>
</ul>
Security Requirements: 
<ul>
<li>
Candidates must have U.S. Citizenship
</li>
<li>
Candidates must have an ACTIVE DoD Secret Clearance (or higher)
</li>
</ul>
 
Imagine One Technology &amp; Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master’s degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more! 
ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013 CMMI Development and Services - Maturity Level 3 An Employee-Owned Business
EEO/Veterans/Disabled
 *Imagine One “Contingent” offers for employment may stipulate that one or more requirements be satisfied before final commitment between candidate and Imagine One is established; namely, award of contract to the Imagine One Team. Contingent requirements vary and may also include, but not be limited to additional factors (i.e., the position still being available after negotiations with the Government; final approval of your qualifications by the Government; or ability to successfully acquire and/or transfer a DoD security clearance).

Information Security Analyst

<h3>Job Description</h3>
Job Description
T2 Incident Responder - (w/ active Secret) 
Location: Ashburn, Virginia 
Clearance: Secret 
Full-time/ No Remote 
Shift Schedule: Day Shift 7am - 7pm ET
 
JOB DESCRIPTION
Critical Solutions is seeking an experienced Incident Response Analyst to support a cyber security operations center (SOC) for a federal program in Ashburn, Virginia. 
The IR will Utilize state of the art technologies such as host forensics tools(FTK/Encase), Endpoint Detection &amp; Response tools, log analysis (Splunk) and network forensics (full packet capture solution) to perform hunt and investigative activity to examine endpoint and network-based data.
 
PRIMARY ROLES AND RESPONSIBILITIES:
<ul>
<li>Conduct malware analysis, host and network, forensics, log analysis, and triage in support of incident response.</li>
<li>Recognize attacker and APT activity, tactics, and procedures as indicators of compromise (IOCs) that can be used to improve monitoring, analysis and incident response.</li>
<li>Develop and build security content, scripts, tools, or methods to enhance the incident investigation processes.</li>
<li>Lead Incident Response activities and mentor junior SOC staff.</li>
<li>Work with key stakeholders to implement remediation plans in response to incidents.</li>
<li>Effectively investigative and identify root cause findings then communicate findings to stakeholders including technical staff, and leadership.</li>
<li>Flexible and adaptable self-starter with strong relationship-building skills</li>
<li>Strong problem-solving abilities with an analytic and qualitative eye for reasoning</li>
<li>Ability to independently prioritize and complete multiple tasks with little to no supervision</li>
</ul>
 
BASIC QUALIFICATIONS:
<ul>
<li>Active DoD Secret Clearance. Ability to obtain and maintain TS/SCI</li>
<li>Bachelor's degree in Science or Engineering Field, IT, or Cybersecurity or related field</li>
<li>3+ years of experience be in the areas of incident detection and response, remediation malware analysis, or computer forensics.</li>
<li>Prior relevant experience should be in the areas of incident detection and response, malware analysis, or computer forensics.</li>
<li>Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell</li>
</ul>
 
MUST HAVE ONE OF THE FOLLOWING CERTIFICATIONS:
<ul>
<li>CCFP - Certified Cyber Forensics Professional</li>
<li>CCNA Security</li>
<li>CCNP Security</li>
<li>CEH - Certified Ethical Hacker</li>
<li>CHFI - Computer Hacking Forensic Investigator</li>
<li>CISSP - Certified Information Systems Security</li>
<li>CIRC</li>
<li>ECES - EC-Council Certified Encryption Specialist</li>
<li>ECIH - EC-Council Certified Incident Handler</li>
<li>ECSA - EC-Council Certified Security Analyst</li>
<li>ECSS - EC-Council Certified Security Specialist</li>
<li>EnCE</li>
<li>ENSA - EC-Council Network Security Administrator</li>
<li>FIWE</li>
<li>GCFA - Forensic Analyst</li>
<li>GCFE - Forensic Examiner</li>
<li>GCIH - Incident Handler</li>
<li>GISF - Security Fundamentals</li>
<li>GNFA - Network Forensic Analyst</li>
<li>GREM - Reverse Engineering Malware</li>
<li>GWEB - Web Application Defender</li>
<li>GXPN - Exploit Researcher and Advanced Penetration Tester</li>
<li>LPT - Licensed Penetration Tester</li>
<li>OSCE (Certified Expert)</li>
<li>OSCP (Certified Professional)</li>
<li>OSEE (Exploitation Expert)</li>
<li>OSWP (Wireless Professional)</li>
<li>WFE-E-CI</li>
<li>FTK-WFE-FTK</li>
<li>CompTIA Cyber Security Analyst (CySA+)</li>
<li>CompTIA Linux Network Professional (CLNP)</li>
<li>CompTIA PenTest+</li>
<li>GCTI - Cyber Threat Intelligence</li>
<li>GOSI - Open Source Intelligence</li>
<li>CTIA - Certified Threat Intelligence Analyst</li>
<li>Splunk Core Certified Advanced Power User</li>
<li>Splunk Core Certified Consultant</li>
<li>Splunk SOAR Certified Automation Developer</li>
<li>IACRB Certified Security Awareness Practitioner (CSAP)</li>
</ul>
 
PREFERRED QUALIFICATIONS:
<ul>
<li>Experience in Federal Government, DOD or Law Enforcement in CND, IR or SOC role</li>
<li>Cyber Kill Chain Knowledge</li>
<li>One of the following certs: CCNA, CCNP, CCSP, CEH, CNDA, DCITA, ECES, ECSA, ECSP, ECSS, ENSA, GCIA, GCIH, GISF, GNFA, GPPA, GWEB, LPT, OSCP, OSEE, SEI, CCISO</li>
</ul>
 
SCHEDULE
Shift schedule will be determine at the time of the start date
<ul>
<li>Day shift Front: 7am - 7pm ET, Sunday - Tuesday and every other Wednesday (8hr shift)</li>
<li>Day Shift Back: 7am - 7pm ET, Thursday - Saturday and every other Wednesday (8hr shift)</li>
</ul>
 
LOCATION:
<ul>
<li>In Office - Ashburn, VA</li>
<li>Must be willing and able to commute to Ashburn, VA</li>
</ul>
 
Clearance Requirement: Must be a US Citizen and possess an active DoD Secret Clearance. In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED.
 
CRITICAL SOLUTIONS PAY AND BENEFITS:
Salary range $80,000 - $103,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements.
BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more
 Job Posted by ApplicantPro

12 computer-forensic-investigator Jobs