Forensics Specialist Junior

Support U.S. Customs and Border Protection (CBP) Security Operations Center (SOC) investigations and Cyber Defense Forensics (CDF) activities in accordance with established policies, handbooks, and Standard Operating Procedures (SOPs).

• Conduct digital forensic investigations across Windows, Linux, macOS, cloud systems, endpoints, mobile devices, network appliances, and malware samples.
• Perform static and dynamic malware analysis; identify malware characteristics, intent, and origin; prepare formal forensic and malware analysis reports.
• Utilize commercial and open-source forensic tools to support cyber defense and insider threat investigations.
• Maintain forensic lab equipment and recommend capability enhancements and modernization.
• Preserve digital evidence and maintain proper chain of custody, storage, handling, and transmission procedures for sensitive and classified information.
• Categorize, prioritize, document, and escalate security events through ticketing systems to appropriate law enforcement entities.
• Manage CDF investigations from initiation through closure, ensuring compliance with CBP policies and procedures.
• Support incident remediation, enterprise recovery, email hygiene, and responses to internal and external security inquiries.
• Develop, update, and modernize CDF SOPs, playbooks, workflows, automation requirements, metrics, and key performance indicators (KPIs).
• Conduct pre- and post-travel forensic scans of CBP laptops and mobile devices under the Foreign Travel Service.
• Perform separation and file transfer scans to identify sensitive content, including For Official Use Only (FOUO) and Law Enforcement Sensitive (LES) information.
• Support investigation reporting, operational improvements, and compliance with applicable CBP security requirements.