Computer Forensics Sr Professional
CSC is seeking Computer Forensics Sr Professionals to handle rapid response to emergency situations involving virus, Trojan, work and intrusion investigations and remediation. The selected candidates will investigate possible network and host based intrusions to find the source and extent of the compromise and analysis of Wndows/UNIX based systems to locate and analyze Trojan files and systems; reverse engineer malicious software using a disassembler and debugger and consult with clients to plan remediation and secure the site from further compromise.
Essential Job Functions
- Applies more complex computer investigation and analysis techniques in the interests of determining potential security problems and to provide data recovery services for users.
- Discovers files on the subject system including existing normal files, deleted yet remaining files, hidden files, password-protected files, and encrypted files. Recovers discovered and deleted files to ensure that company information retained.
- Documents overall analysis of the subject computer system, as well as a listing of possibly relevant files and discovered file data. Determines approaches for analysis in order to ensure integrity and protection of the system.
- Preserves the subject computer to insure that it is protected against alteration, damage, viruses, and data loss or corruption.
- Identifies evidence when computers systems and networks are used in the commission of crimes or in the abuse of company policies.
- Creates custom investigative reports and presentations for courtroom use.
- Provides support for management and more experienced personnel in preparing for legal disputes.
- Researches more complex security and recovery problems in order to determine origins and recommend best practices for prevention of future problems. Makes recommendations for improved security and recovery procedures as appropriate.
Qualifications
Basic Qualifications
- Bachelor's degree or equivalent combination of education and experience
- Bachelor's degree in computer science or related field preferred
- Microsoft Certified Systems Engineer (MCSE) and Information Systems Security Professional (ISSP) certifications preferred
- Five or more years of experience in computer forensic analysis
- Experience working with a wide range of computer hardware and software
- Experience working with computer forensics software and hardware
- Experience working with systems infrastructure including hardware configuration, operating system, and networks
- Pass background checks such as NAC, NACLC, and/or SSBI
Other Qualifications
- Communication skills to communicate with customers
- Strong analytical and creative problem solving skills
- Ability to keep sensitive and confidential material private
- Willingness to travel
- Strong understanding of principals of computer forensics including seizure, evidence handling, chain of custody, and incident response.
- Knowledgeable of procedural forensic analysis including data gathering, imaging, investigation, report writing and briefing.
- Must be able to perform network invetionation in the areas of virus remediation, intrusions, or vulnerablility assessments.