CaryRecruiter Since 2001
the smart solution for Cary jobs

Computer Forensic and Intrusion Analyst

Company: Raytheon Technologies Corp
Location: Morrisville
Posted on: November 17, 2021

Job Description:

This position is CONTINGENT upon funding, an open position, customer approval, completion of a favorable background investigation, and the ability to obtain & maintain a USPS sensitive clearance. An experienced Computer Forensic & Intrusion Analyst is needed to support our customer's Incident Response (IR) program at the in Morrisville, NC. The resource will: * support IR Team Requirements. * Work with the Incident Response (IR) team to Perform in-depth forensics examinations of computers and other electronic devices. * Use a variety of digital forensics tools to conduct forensic examination activities including assisting in the analysis of network, computer and other devices which may contain digital evidence. Responsibilities: * Perform analysis on hosts running on a variety of platforms and operating systems, to include, but not limited to, Microsoft Windows, UNIX, Linux, as well as embedded systems and mainframes. * Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system logs) to identify possible threats to network security. * Leverage tools including Splunk, Tanium, RedSeal, FirePower Forensic Sandboxes, Threat Connect..etc as part of duties performing cyber incident response analysis. * Perform forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems. * Perform deep dive analysis (manual and automated) of malicious links and files. * Analyze malicious activity to determine tactics, techniques, and procedures used * Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation. * Work with a diverse team of analysts in conducting incident triage, incident handling, and remediation. Handle major, high impact incidents with the ability to generate clear, concise recommendations and coordinate activities and professional communications across a range of stakeholders. Requirements: * Must be eligible to obtain a sensitive clearance - Position of Public Trust - and may be required to obtain a higher security clearance. * 5+ years' experience with incident response and Cybersecurity forensics * Experience with host level scripting, eg. Powershell. * Experience with conducting threat hunts using and adhering to the MITRE ATT&CK framework. * Able to conduct network analysis to determine root cause and impact of security incident. * Knowledge of exploit kits and adversary techniques. * Experience and knowledge to investigate suspicious activity and identify indicators of compromise * Experience with analysis software (i.e. EnCase) * Experience with memory analysis * Experience in working with one or more Cloud Platforms * Familiarity with cybersecurity operation center functions Strong working knowledge of: * Security Information and Event Management (SIEM) systems. * Network Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS). * Host Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS). * Network and Host malware detection and prevention. * Network and Host forensic applications. * Web/Email gateway security technologies. * Sysmon. * Log aggregation tools. * Demonstrated ability to establish priorities, manage shifting priorities, and handle numerous time-sensitive projects with multiple deadlines * Ability to accomplish goals working through formal and informal channels, with diplomacy and tactfulness * Demonstrated solid planning and organizational skills * Demonstrated experience working independently and as part of a team * Weekday shift (M-F, 7AM-4PM) personnel in Morrisville, NC. Required Education: Bachelors Degree or higher in Computer Science, in an information technology discipline or a related technical discipline; or the equivalent combination of education, professional training or IT work experience. #RIScyber191691

Keywords: Raytheon Technologies Corp, Cary , Computer Forensic and Intrusion Analyst, IT / Software / Systems , Morrisville, North Carolina

Click here to apply!

Didn't find what you're looking for? Search again!

I'm looking for
in category

Log In or Create An Account

Get the latest North Carolina jobs by following @recnetNC on Twitter!

Cary RSS job feeds