Digital Forensics and Incident Response (DFIR) Analyst

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Peraton is seeking a Digital Forensics and Incident Response (DFIR) Analyst to support our Corporate Cybersecurity Operations Center (CSOC). In this role, you will conduct large-scale cyber data analytics, lead the use of detection technologies, perform advanced threat hunting, and provide technical review of team member work. The ideal candidate is decisive, deadline‑oriented, and produces high‑quality analytic output. The DFIR Analyst works closely with the CSOC Manager to deliver detailed security event analysis, support business units, and foster collaboration across IT teams.

 

Key Responsibilities

• Protect the organization's IT assets as a member of the Cybersecurity Operations Center (CSOC).
• Implement DFIR strategies to identify risks and reduce gaps in host and network security controls.
• Collaborate with IT Operations and end users to proactively prevent intrusions and support incident response efforts.
• Prepare CSOC reports documenting security incidents from discovery through remediation.
• Support vulnerability and cyber risk management by continuously monitoring threats and exposures.
• Test and evaluate technology solutions in preparation for both small and large-scale deployments.
• Participate in periodic on-call rotations supporting 24/7 cybersecurity operations.

• Bachelor’s Degree or 4 additional years of experience in a cybersecurity-related field in lieu of degree, or equivalent Security Operations work experience.
• Experience with Splunk Enterprise Security or Splunk Certified Power User. Advanced Splunk certification is a plus.
• DFIR experience using Endpoint Detection and Response (EDR) technologies.
• Experience performing forensic analysis on various evidence types including disk, memory, network, and cloud artifacts.
• Proficient with common scripting and programming languages.
• Experience with Risk Management Frameworks.
• In-depth understanding of common security controls for Windows, Linux, and network equipment.
• Strong attention to detail, time‑management skills, and a professional demeanor.
• US Citizenship.

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.