Location: Richland, Washington
Title: Cyber Security Analyst II - Digital Forensics and Incident Response
Schedule (FT/PT): Regular Full Time
Travel Required: No
Clearance: Ability to Obtain
North Wind Solutions is a Government contracting small business with operations at military and civilian installations across the United States. The company's focus is on facilities operation and maintenance, waste management and radiological services, security control and force protection, and environmental services.
POSITION PURPOSE:
As a Cyber Security Analyst II in Digital Forensics and Incident Response (DFIR), you will play a key role in detecting, analyzing, and responding to cybersecurity incidents affecting critical national infrastructure. This mid-level position is ideal for cybersecurity professionals with foundational experience in DFIR who are ready to take on greater responsibility and work more independently. You will collaborate with senior team members, contribute to investigations, lead portions of incident response efforts, and support continuous improvement of the organization's security posture.
Why North Wind Solutions?
This is an opportunity to deepen your expertise in digital forensics and cyber incident response while supporting national security objectives. You will engage with seasoned professionals, expand your technical capabilities, and contribute directly to securing DOE environments.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
- Monitor, triage, and analyze security events and alerts from various security platforms (SIEM, EDR, SOAR).
- Conduct forensic investigations, including evidence acquisition, analysis, and preservation in accordance with legal and regulatory standards.
- Respond to cybersecurity incidents in coordination with internal teams, documenting findings and recommending containment and remediation actions.
- Produce incident reports and root cause analyses with minimal supervision.
- Develop and refine indicators of compromise (IOCs) and detection use cases based on emerging threat intelligence.
- Assist in improving incident response playbooks and standard operating procedures.
- Collaborate with cross-functional teams during incident handling, exercises, and after-action reviews.
- Maintain chain of custody and ensure the integrity of forensic evidence during all stages of analysis.
ADDITIONAL DUTIES AND RESPONSIBILITIES:
- Mentor junior analysts and support knowledge sharing across the cybersecurity team.
- Perform other duties as assigned.
MINIMUM QUALIFICATIONS:
Education and Experience:
- Bachelor's Degree in Cybersecurity, Computer Science, Information Assurance, Digital Forensics, or a related field.
- 2 years of relevant professional experience in cybersecurity with a focus on digital forensics or incident response.
Skills and Abilities:
- Experience with forensic tools and analysis platforms (e.g., EnCase, FTK, Autopsy, Volatility, or similar).
- Experience with SIEM, SOAR, and EDR platforms (e.g., Splunk, Sentinel, CrowdStrike).
- Solid understanding of network protocols, malware behavior, and threat actor tactics, techniques, and procedures (TTPs).
- Strong analytical, troubleshooting, and problem-solving skills.
- Effective verbal and written communication skills with experience drafting incident documentation and technical reports.
- Ability to operate independently and prioritize tasks in a high-pressure, mission-focused environment.
Special Requirements:
- Must pass pre-employment background check.
- Must pass pre-employment drug screening.
- Applicants are required to have REAL ID ACT compliant documentation at time of hire and nothing on record that would prohibit you from gaining access to Department of Energy sites.
PREFERRED QUALIFICATIONS:
- Experience supporting cybersecurity operations at U.S. Department of Energy or similar federal environments.
PHYSICAL DEMANDS:
This position is primarily sedentary in nature. The work involves sitting most of the time but may involve walking or standing for brief periods of time. The work may involve exerting up to 10 pounds of force occasionally or a negligible amount of force frequently to lift, carry, push, pull, or otherwise move objects, including the human body.
WORKING ENVIRONMENT:
Can work in a typical office or work-from-home environment (WFH). The noise level in the office work environment is usually quiet.
North Wind offers a competitive pay and benefits package to include health, life, and disability insurance benefits, 401(k) with company match, generous paid leave and tuition reimbursement for eligible employees. As a company, we are committed to employee wellness, professional development, and work-life balance. We value safety, reliability, and commitment to our people! For more information about our benefits or hiring philosophy, visit the North Wind Career Opportunities Page.
Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. The nature of those accommodations will be determined on a case-by-case basis. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact our Helpline +1.208.528.8718 or use the Request for Reasonable Accommodation form to get assistance.
North Wind is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, veteran status, genetic data, religion, or other legally protected status. All qualified applicants will receive consideration for employment without regard to their protected veteran status and will not be discriminated against on the basis of disability.
Proof of citizenship will be required as a condition of employment.
Candidates may be required to obtain and hold a Secret or Higher US Government Clearance.