forensics analyst

Alignerr

<div>
 <strong>
  Incident Response Analyst (AI Training)
  <br/>
  <br/>
 </strong>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 We're partnering with leading AI research labs to build the next generation of AI-powered security tools &mdash; and we need experienced incident responders to help make them real.
 <br/>
 <br/>
 As an Incident Response Analyst, you'll work with realistic security incident data to evaluate, challenge, and improve AI systems designed to detect threats, correlate alerts, and support digital investigations. Your hands-on experience in security operations is exactly what's needed to make AI smarter and more accurate in this domain.
 <br/>
 <br/>
 <ul>
  <li>
   Organization: Alignerr
  </li>
  <li>
   Type: Hourly Contract
  </li>
  <li>
   Location: Remote
  </li>
  <li>
   Commitment: 10&ndash;40 hours/week
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You'll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Analyze real-world security events, alerts, and incident cases
  </li>
  <li>
   Identify root cause, assess impact, and determine appropriate remediation steps
  </li>
  <li>
   Evaluate detection rules, alerting pipelines, and investigative playbooks for accuracy and effectiveness
  </li>
  <li>
   Review and validate AI-generated incident analysis to ensure it reflects how real SOC teams operate
  </li>
  <li>
   Provide structured, expert feedback that directly shapes how AI handles security investigations
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Who You Are
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   2+ years of hands-on experience in SOC, incident response, or security operations
  </li>
  <li>
   Proficient with SIEM platforms, alert queues, and investigation tooling
  </li>
  <li>
   Skilled at separating meaningful threats from noise in high-volume alert environments
  </li>
  <li>
   Detail-oriented with strong written communication skills
  </li>
  <li>
   Self-motivated and comfortable working independently on async, task-based assignments
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Nice to Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with threat hunting, digital forensics, or malware analysis
  </li>
  <li>
   Familiarity with frameworks like MITRE ATT&amp;CK or NIST IR
  </li>
  <li>
   Background in cloud security, endpoint detection, or network forensics
  </li>
  <li>
   Prior experience in AI data annotation or evaluation workflows
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work directly on frontier AI systems alongside top research labs
  </li>
  <li>
   Fully remote and flexible &mdash; work on your own schedule
  </li>
  <li>
   Freelance perks: autonomy, variety, and global collaboration
  </li>
  <li>
   Meaningful impact &mdash; your expertise helps define how AI understands cybersecurity
  </li>
  <li>
   Potential for ongoing work and contract extension
  </li>
 </ul>
</div>


Incident Response Analyst

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Digital Forensics Engineer Job Description</b></h1><b>
Position Title: </b>Digital Forensics Engineer<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Digital Forensics Engineer supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by providing advanced digital forensics, incident response, cyber investigation, evidence preservation, malware analysis, and e-discovery support services.<br>
The Digital Forensics Engineer conducts complex forensic examinations involving workstations, servers, cloud platforms, mobile devices, email systems, network traffic, and enterprise applications in support of cybersecurity investigations, incident response activities, insider threat investigations, legal support actions, and enterprise cyber defense operations. The role supports 24x7x365 Security Operations Center (SOC) functions and coordinates closely with federal stakeholders, incident responders, threat hunters, legal teams, privacy personnel, and law enforcement partners.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Perform advanced digital forensic analysis and investigations in support of SBA ECS cybersecurity operations requirements.</li><li>
Support Task Areas 3.5.3 and 3.5.3.6 by conducting forensic examinations related to cybersecurity incidents, insider threats, malware infections, unauthorized access, and data exfiltration.</li><li>
Collect, preserve, analyze, and document digital evidence in accordance with federal forensic standards and chain-of-custody procedures.</li><li>
Perform host-based, network-based, cloud-based, and mobile device forensic investigations across enterprise environments.</li><li>
Conduct forensic acquisition and analysis of Windows, Linux, macOS, cloud, virtualized, and hybrid systems.</li><li>
Analyze endpoint telemetry, security logs, network packet captures (PCAP), SIEM data, and forensic artifacts to identify indicators of compromise (IOCs) and adversary activity.</li><li>
Support incident response activities by reconstructing attack timelines, determining root cause, identifying attack vectors, and assessing operational impact.</li><li>
Perform malware analysis and reverse engineering support activities to identify malicious behaviors, persistence mechanisms, and command-and-control communications.</li><li>
Support e-discovery operations including collection, indexing, preservation, processing, and review of electronically stored information (ESI).</li><li>
Conduct forensic examinations supporting legal, Inspector General (IG), Human Resources (HR), insider threat, privacy, and law enforcement investigations.</li><li>
Utilize forensic and cyber defense tools including EnCase, FTK, Velociraptor, Wireshark, Volatility, Splunk, Microsoft Defender, Sentinel, and endpoint detection and response (EDR) platforms.</li><li>
Perform memory analysis, disk analysis, registry analysis, browser artifact analysis, and log correlation activities.</li><li>
Develop forensic reports, technical findings, evidentiary documentation, executive briefings, and remediation recommendations.</li><li>
Maintain detailed forensic documentation, evidence handling procedures, and chain-of-custody records.</li><li>
Support cybersecurity monitoring, detection, containment, eradication, and recovery activities within the SOC environment.</li><li>
Coordinate with SOC analysts, incident responders, threat hunters, engineers, and federal stakeholders during cyber investigations and breach response activities.</li><li>
Support continuous improvement of forensic methodologies, investigative procedures, and cybersecurity operational capabilities.</li><li>
Assist with the development and maintenance of digital forensic playbooks, standard operating procedures (SOPs), and incident handling guidance aligned with NIST SP 800-61 and NIST SP 800-86.</li><li>
Research emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and evolving forensic technologies.</li><li>
Support federal cybersecurity compliance requirements, reporting activities, and operational readiness initiatives.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Digital Forensics, Information Assurance, Information Technology, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 8 years of experience supporting digital forensics, cyber investigations, incident response, cybersecurity operations, or Security Operations Center (SOC) environments.</li><li>
Hands-on experience conducting enterprise-level forensic investigations and evidence analysis.</li><li>
Experience with forensic acquisition and analysis tools including EnCase, FTK, X-Ways, Velociraptor, Volatility, or equivalent technologies.</li><li>
Experience analyzing Windows, Linux, cloud, mobile, and network forensic artifacts.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting legal hold, e-discovery, insider threat, and regulatory investigation activities.</li><li>
Experience with SIEM, EDR, IDS/IPS, packet analysis, and security monitoring technologies.</li><li>
Strong understanding of NIST cybersecurity standards including NIST SP 800-61 and NIST SP 800-86.</li><li>
Ability to prepare technical forensic reports and present investigative findings to technical and executive stakeholders.</li><li>
Strong analytical, investigative, communication, and technical documentation skills.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
EnCase Certified Examiner (EnCE)</li><li>
Certified Computer Examiner (CCE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA CySA+</li><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul><p>
</p><p>6HY6JyRiD8</p></div>

SBA - Digital Forensics Engineer

Fortinet

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines.<br>
</div><p></p><p><b>Responsibilities:
</b></p><ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li><p>Continue to focus on process improvement for the customer facing incident response services
</p></li><li><p>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</p></li><li><p>Conduct network forensics and log analysis during IR engagements
</p></li><li><p>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</p></li><li><p>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</p></li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li><p>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</p></li><li><p>Develop complete and informative reports and presentations for both executive and technical audience
</p></li><li><p>Availability during nights/weekends as needed for IR engagements<br>
</p></li></ul><p></p><p><b>Required Skills:
</b></p><ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li><p>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</p></li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul><p><b>Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

Deloitte

<div>
 <strong>
  Cyber Security I Incident Response Senior Engineer
 </strong>
 <strong>
  ,
 </strong>
 <strong>
  Cairo. Egypt
  <br/>
  <br/>
 </strong>
 <strong>
  Connect to your career at Deloitte
  <br/>
  <br/>
 </strong>
 <strong>
  Deloitte
 </strong>
 <strong>
  ,
 </strong>
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 <br/>
 <br/>
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 <br/>
 <br/>
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 <br/>
 <br/>
 <strong>
  Connect to your opportunity.
  <br/>
  <br/>
 </strong>
 As a
 <strong>
  Digital Forensics
 </strong>
 <strong>
  Incident Response Senior Engineer
 </strong>
 <strong>
  ,
 </strong>
 you will be assisting clients with response to Cyber Incidents &amp; getting back to business, this includes data leaks, ransomware, unusual network traffic. Cyber criminals, from insider threat to nation-state sponsored hackers.
 <br/>
 <br/>
 <strong>
  Your Role Will Also Include The Following
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct analysis of log files, Windows event logs (Windows artifacts), and Linux artifacts to identify correlations using EDR, network monitoring tools, and SIEM platforms (e.g., Splunk, Microsoft Security Suite, and CrowdStrike Falcon). The role requires applying knowledge of forensic artifacts across various client platforms.
  </li>
  <li>
   Conduct in-depth analysis of malware, threat intelligence, and other relevant sources.
  </li>
  <li>
   Provide tactical support such as advice on triage, containment, eradication, and broader coordination during cyber incidents.
  </li>
  <li>
   Perform forensic analysis of systems and networks.
  </li>
  <li>
   Execute memory forensics.
  </li>
  <li>
   Perform Compromise Assessments and Threat Hunting projects in SIEM and EDR tooling.
  </li>
  <li>
   Create custom scripts (using Python) for parsing special log files, data sets, and images, etc.
  </li>
  <li>
   Create complex timelines based on findings and observations.
  </li>
  <li>
   Act as a member of the broader Deloitte Response Team, adding CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
  </li>
  <li>
   Partake in the EMEA and Global technical incident responder community to build a strong network and share a knowledge base.
  </li>
  <li>
   Maintain flexible working hours to support the customer during high-impact incidents.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect To Your Skills And Professional Experience
  <br/>
  <br/>
 </strong>
 To succeed in this role, you need to have the following:
 <br/>
 <br/>
 <ul>
  <li>
   At least 3 years of experience in Cyber Incident Response and digital forensics, or similar response experiences in operational environments.
  </li>
  <li>
   Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
  </li>
  <li>
   Broader experience in other technical areas of information security, such as penetration testing, threat intelligence or security operations, is beneficial.
  </li>
  <li>
   Experience in systems and/or network administration, engineering or architecture is a highly advantageous.
  </li>
  <li>
   Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
  </li>
  <li>
   Ability to apply analytical insights at an organizational level, considering wider implications and threat actor attack paths and lifecycles.
  </li>
  <li>
   Relevant academic qualifications such as Master&rsquo;s or bachelor&rsquo;s degree in computer science, information security or related fields.
  </li>
  <li>
   Relevant industry qualifications to demonstrate understanding, for example CISSP, CISM, GCFE, GCFA, GREM, GCIH, CCIM, GCIA, CCNIA, CCHIA, CCMRE or similar
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  The Following Attributes Are Essential
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong written, verbal and presentation skills.
  </li>
  <li>
   A willingness to work as part of a diverse team.
  </li>
  <li>
   A commitment to continuous improvement and lifelong learning.
  </li>
  <li>
   A passion for technology and a drive to deliver secure, high-quality solutions.
  </li>
  <li>
   Strong analytical and problem-solving skills.
  </li>
  <li>
   Excellent communication and interpersonal abilities.
  </li>
  <li>
   Ability to work effectively in a fast-paced and dynamic environment.
  </li>
  <li>
   Proactive and self-motivated with a keen attention to detail.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Connect to your service line &ndash; Technology and Transformation
  <br/>
  <br/>
 </strong>
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 <br/>
 <br/>
 <strong>
  Personal independence
  <br/>
  <br/>
 </strong>
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 <br/>
 <br/>
 <strong>
  Connect to your Industry
  <br/>
  <br/>
 </strong>
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 <br/>
 <br/>
 <strong>
  Connect with your colleagues
  <br/>
  <br/>
 </strong>
 Location: Cairo. Egypt
 <br/>
 <br/>
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 <br/>
 <br/>
 <strong>
  Our commitment to you
  <br/>
  <br/>
 </strong>
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 <br/>
 <br/>
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 <br/>
 <br/>
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 <br/>
 <br/>
 <strong>
  Connect to your next step
  <br/>
  <br/>
 </strong>
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
</div>


Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Senior Engineer, Cairo, Egypt.

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.</p><p>
Job Description</p><div><div>
SOC ANALYST<br>
<br>
Advance your career while impacting our national security in cyber as a SOC Analyst Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.<br>
<br>
WHAT YOU&rsquo;LL NEED TO SUCCEED<br>
Bring your cyber expertise and drive for innovation to GDIT. The SOC Analyst Principal must have:<br>
<ul><li>Education: Technical Training, Certification(s) or Degree</li><li>Experience: 4+ years of related experience</li></ul></div><p></p><p>
Required certs:</p><p>
IAT II</p><p>
CSSP Analyst</p><p>
GMON</p><p>
SCCU</p><div><br>
GDIT IS YOUR PLACE<br>
At GDIT, the mission is our purpose, and our people are at the center of everything we do.<br>
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul><br>
OWN YOUR OPPORTUNITY<br>
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div><p></p><p>
#VA_2026Alumni
</p><p></p><p>#MD_2026Alumni</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
8 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Cyber SOC Incident Detector (MIDS Shift) - TS/SCI with Polygraph

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.</p><p>
Job Description</p><div><p>
SOC ANALYST</p><div>
swings: 1400-2200<br>
<br>
Advance your career while impacting our national security in cyber as a SOC Analyst Principal at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.<br>
<br>
WHAT YOU&rsquo;LL NEED TO SUCCEED<br>
Bring your cyber expertise and drive for innovation to GDIT. The SOC Analyst Principal must have:<br>
<ul><li>Education: Technical Training, Certification(s) or Degree</li><li>Experience: 4+ years of related experience</li></ul></div><p></p><p>
Required certs:</p><p>
IAT II</p><p>
CSSP Analyst</p><p>
GMON</p><p>
SCCU</p><div><br>
GDIT IS YOUR PLACE<br>
At GDIT, the mission is our purpose, and our people are at the center of everything we do.<br>
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities</li><li>Support: An internal mobility team focused on helping you achieve your career goals</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off</li><li>Community: Award-winning culture of innovation and a military-friendly workplace</li></ul><br>
OWN YOUR OPPORTUNITY<br>
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.</div><p></p><p>
#VA_2026Alumni
</p><p></p><p>#MD_2026Alumni</p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
8 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div><div></div><div>
Citizenship<div>
U.S. Citizenship Required</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Cyber SOC Incident Detector (Swing Shift) - TS/SCI with Polygraph

Cartafella Analytics

<p>We are looking for SOC Senior Analyst for Qatar location.</p><ul><li>Exposure to IT service management best practices such as ITIL and ISO27001</li><li>12+ years in SOC/IR/Digital Forencis preferable in MSSP.</li><li>Experience in ISO27001 process and procedures and can work on their own with little supervision</li><li>A good communicator at all levels.</li><li>A sound knowledge of IT security best practices, common attack types and detection / prevention methods.</li><li>Strong written and verbal communication skills</li><li>Attention to detail and great organisational skills</li><li>An active interest in Cyber Security, incident detection, network and systems security.</li><li>Experience or qualifications in network and systems monitoring</li><li>Experience in successful implementation / exposure / participation of a Business Continuity and Disaster Recovery Program</li><li>Experience in performing risk assessments and managing information security risks of an organization</li><li>University degree in any field related to Information Technology</li><li>Minimum 6+ years&rsquo; experience focused in the IT Security field (e.g. Incident Response, Incident Investigation, Incident Remediation)</li><li>Practical experience using SIEM platforms, preferably Google SecOps / Google Chronicle, including:</li><li>Maintain organization&rsquo;s compliance to various security standards such as ISO 27001/02, National Information Assurance Policy - Qatar</li></ul><p><b>Certification</b></p><ul><li>Certified Ethical Hacker</li><li>Certified Incident Responder Credentials from GIAC/SANS</li><li>Security+</li><li>CCSP / CCSE</li><li>Google SecOps</li></ul><p>If you are available, please send your cv immediately</p><p>Pay: Up to QAR2,000.00 per month</p><p>Work Location: In person</p>

SOC Senior Analyst for Qatar

Search 2122+ Forensics analyst jobs near you this May. New roles added regularly across leading industries. Apply today.