Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

This position is CONTINGENT upon funding, an open position, customer approval, completion of a favorable background investigation, and the ability to obtain and maintain our customer's sensitive clearance.

An experienced Forensic Scientist - NC is needed to support our customer’s CSOC Support Team in Morrisville, North Carolina.

Responsibilities/Requirements

• Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations.

• Conduct research that focuses on rapidly emerging cyber threats, and the methods and processes employed by adversary employment of cyber warfare techniques, as well as offensive capabilities.

• Resolves highly complex malware and intrusion issues using computer host analysis, forensics, and reverse engineering.

• Discovers, analyzes, diagnoses, and reports on malware events, files and network intrusion and vulnerability issues.

• Recommends counter measures to malware and other malicious type code and applications that exploit customer communication systems.

• Skill in using forensic tool suites (e.g., EnCase, Sleuthkit, FTK).

• Skill in conducting forensic analyses in multiple operating system environments (e.g., mobile device systems).

• Ability to conduct forensic analyses in and for both Windows and Unix/Linux environments.

• Knowledge of investigative implications of hardware, Operating Systems, and network technologies.

• Knowledge of data carving tools and techniques (e.g., Foremost).

• Knowledge of anti-forensics tactics, techniques, and procedures.

• Knowledge of concepts and practices of processing digital forensic data.

• Ability to decrypt digital data collections.

• Knowledge of types and collection of persistent data.

• Knowledge of types of digital forensics data and how to recognize them

• Knowledge of forensics lab design configuration and support applications (e.g., VMWare, Wireshark).

• Must be eligible to obtain a sensitive clearance – Position of Public Trust – and may be required to obtain a higher security clearance.

• 5+ years’ experience with digital forensics

Desired skills/experience

• Must demonstrate a solid understanding of dead box, network forensics, and aptitude for memory forensics.

• Knowledge of Splunk, Sentinel One, and Magnet Forensics preferred.

• Create a forensically sound duplicate of the evidence (i.e., forensic image) that ensures the original evidence is not unintentionally modified, to use for data recovery and analysis processes. This includes, but is not limited to, hard drives, floppy diskettes, CDs, PDAs, mobile phones, GPS, and all tape formats.

• Perform real-time forensic analysis (e.g., using Helix in conjunction with LiveView).

• Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs).

• Extract data using data carving techniques (e.g., Forensic Tool Kit [FTK], Foremost).

• Knowledge of forensics lab design configuration and support applications (e.g., VMWare, Wireshark).

Required Education

Bachelor’s Degree or higher in Computer Science, in an information technology discipline or a related technical discipline; or the equivalent combination of education, professional training or IT work experience.

The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Previously part of a leading Fortune 100 company and headquartered in Dulles, VA; Nightwing became independent in 2024 but continues to support the nation’s most mission impactful initiatives.

When we formed Nightwing, we brought a deep set of credentials and an unfaltering commitment to the mission. For over four decades, our team has been providing some of the world’s most technically advanced full-spectrum cyber, data operations, systems integration and intelligence support services to the U.S. government on its most important missions.

At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.