Intrusion Analyst

Travel Required: Up to 10%

Clearance Required: Active TS clearance with SCI eligibility Contract: Long Term

What You Will Do: In support of a large federal law enforcement agency, this opportunity is for an Intrusion Analyst role providing technical expertise to confront complex cyber challenges. The position centers on conducting advanced digital forensic analysis, preserving evidence integrity, and supporting investigative activities through detailed technical assessments and clear reporting. Conduct advanced digital forensic investigations of devices, data, and systems to uncover evidence for legal or investigative purposes. Collect, preserve, and analyze data from multiple sources while ensuring integrity for legal admissibility. Perform scientific analysis of devices in both static and dynamic states and thoroughly document findings and conclusions. Provide expert witness testimony and successfully complete mock examinations, including courtroom defense exercises. Analyze forensic artifacts and intrusion activity across multiple operating systems (Windows, Linux, macOS, mobile). Examine volatile memory captures, log exports, and other pre-acquired forensic datasets. Identify Indicators of Compromise (IOCs) and attacker Tactics, Techniques, and Procedures (TTPs). Use forensic tools such as Magnet Axiom, X-Ways, FTK, Volatility, Splunk, ELK Stack, and relevant open-source utilities. Correlate data from multiple sources (host artifacts, logs, network captures, cloud logs) to reconstruct attack timelines and scope. Detect persistence mechanisms, privilege escalation, lateral movement, and data exfiltration indicators. Apply scripting and automation (Python, Power Shell, Bash) for artifact parsing, data correlation, and workflow acceleration. Communicate findings clearly and effectively for technical and non-technical audiences. Support operational investigative activities, which may require extended or irregular work hours across multiple locations. Conduct in-depth technical analysis for complex cyber and computer intrusion cases. Coordinate and facilitate cyber and computer intrusion investigations. Develop recommendations for process improvement.

What You Will Need: Minimum 8 years of experience in digital forensics or equivalent certifications/work history. Active TS clearance with SCI eligibility. Expertise in intrusion-focused forensic analysis across multiple operating systems. Strong knowledge of forensic artifacts, persistence mechanisms, and lateral movement indicators. Proficiency with scripting languages (Python, Power Shell, Bash) for automation. Excellent communication skills and ability to defend findings in courtroom exercises. Applied knowledge of forensic, network, and malware analysis. Experience working in team environments for software development. Ability to perform reverse engineering of compiled software, functional analysis of source code/scripts, and hardware/firmware analysis.

What Would Be Nice To Have: Advanced certifications in digital forensics. Experience supporting FBI or federal cyber investigations. Experience managing and developing for multiple environments. Strong oral and written communication skills. Pay Range $70–$85/hr (W2) About Seneca Resources At Seneca Resources, we are more than just a staffing and consulting firm—we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 organizations to government agencies, we connect professionals with opportunities that drive meaningful impact and support long-term career growth. When you join Seneca, you gain a team committed to your success. We offer competitive compensation, comprehensive health, dental, and vision coverage, 401(k) plans, and continuous support throughout your assignment. Our recruiters and account managers invest in understanding your goals and placing you in roles aligned with your talents and ambitions. Seneca Resources is proud to be an Equal Opportunity Employer, dedicated to building a diverse and inclusive workplace where all qualified applicants are encouraged to apply.