Lead Digital Investigations Engineer

The MITRE Corporation • Mclean, VA • 1d ago

Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges-and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day-working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership. If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.

MITRE's Digital Investigations Department (L515) delivers innovative technical solutions and capabilities primarily focused on support to law enforcement and investigative cyber operations conducted by sponsors, most notably within DOJ, DHS, and DoW. The department's core technology areas are:

Digital Investigations and Cases

Digital/Media/Mobile Device Access and Forensics

Digital Artifact Discovery

Digital Evidence Processing

Cryptocurrency Analysis and Seizure

Cyber Attribution

Darkweb Research

Financial Cybercrime Analysis

Social Media Exploitation

Roles & Responsibilities:

Conduct digital investigations related to cybersecurity incidents, insider threat concerns, policy violations, and suspicious activity.

Collect, preserve, analyze, and document digital evidence from endpoints, servers, mobile devices, cloud environments, logs, and network sources.

Support cybersecurity operations by triaging alerts, correlating threat activity, and assisting with incident response and containment efforts.

Perform forensic analysis using industry-standard tools and methodologies to determine attack vectors, timeline of events, impacted systems, and scope of compromise.

Maintain chain of custody and proper evidence handling procedures in support of internal investigations and potential legal or regulatory matters.

Analyze system, application, security, and network logs to identify indicators of compromise and anomalous behavior.

Collaborate with Security Operations Center, Threat Intelligence, IT, HR, Legal, and Compliance teams during investigations.

Prepare clear, concise, and defensible investigative reports, briefings, and technical documentation for both technical and non-technical audiences.

Assist in developing and improving digital investigation procedures, playbooks, and evidence collection standards.

Recommend remediation and mitigation actions based on investigative findings.

Stay current on emerging cyber threats, attacker tactics, forensic techniques, and relevant technologies.

Basic Qualifications:

Typically requires a minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or a PhD with 3 years' experience; or equivalent combination of related education and work experience

Experience supporting investigations involving endpoints, operating systems, user activity, malware, or network-based threats.

Familiarity with common forensic and investigative tools, SIEM platforms, endpoint detection and response tools, and log analysis solutions.

Knowledge of incident response processes, digital evidence handling, and forensic best practices.

Understanding of Windows, Linux, and/or macOS operating systems and associated artifacts relevant to investigations.

Strong analytical, problem-solving, and documentation skills.

Ability to communicate investigative findings clearly to technical and non-technical stakeholders.

This position requires a minimum of 50% hybrid on-site

Preferred Qualifications:

Experience in a Security Operations Center, Computer Security Incident Response Team, or digital forensics function.

Familiarity with cloud investigation techniques in environments such as Azure, AWS, or Google Cloud.

Experience with eDiscovery, insider threat investigations, or fraud-related digital analysis.

Exposure to malware analysis, threat hunting, or network forensics.

Relevant certifications such as Security+, CySA+, GCFA, GCIH, GCFE, EnCE, CHFI, or similar.

Knowledge of regulatory, compliance, and privacy considerations related to investigations.

This requisition requires the candidate to have a minimum of the following clearance(s):

None

This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):

None

Salary compensation range and midpoint:

$158,800 - $198,500 - $238,200 Annual

Work Location Type:

Hybrid

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.

MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE's employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.

Benefits information may be found here (https://careers.mitre.org/us/en/benefits) .

Similar Jobs

Senior Hardware/ Software Design Engineer

BigBear.ai • Annapolis Junction, MD • 3h ago

IT & Engineering

Overview BigBear.ai is seeking an experienced senior HW/SW Design Engineer to join a small team to design, develop, construct, and test electronic hardware (FPGA) and software processing components for subsystems support...

3h ago

Go to Apply

Linux System Administrator

ManTech • Fort Meade, MD • 3h ago

IT & Engineering

MANTECH seeks an experienced and passionate, career and customer-oriented Linux System Administrator to join our team in Ft. Meade, MD. Responsibilities include but are not limited to: Creating and managing virtual envir...

3h ago

Go to Apply

Cyber Policy & Strategy Analyst

Parsons Corporation • Arlington, VA • 3h ago

IT & Engineering

In a world of possibilities, pursue one with endless opportunities. Imagine Next! At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of v...

3h ago

Go to Apply

Cyber Policy & Strategy Analyst

Parsons Corporation • Alexandria, VA • 3h ago

IT & Engineering

3h ago

Go to Apply

Engineering Support Specialist (Design and Project Controls Focus)

Na Oiwi Kane • Washington, DC • 4h ago

IT & Engineering

Overview Job Summary Galapagos Federal Systems LLC is seeking a highly motivated and qualified Engineering Support Specialist (Design and Project Controls Focus) to join our team in support of the 100th Civil Engineer Sq...

4h ago

Go to Apply

Engineer I

UIC Government Services and the Bowhead Family of Companies • Washington, DC • 4h ago

IT & Engineering

Overview ENGINEER I (NHTSA): Bowhead is seeking an Engineer I to support the National Highway Traffic Safety Administration (NHTSA) in Washington, DC?on the New Car Assessment Program (NCAP) team.?This position requires...

4h ago

Go to Apply

Acquisition Lead (Cyber)

Parsons Corporation • Arlington, VA • 4h ago

IT & Engineering

4h ago

Go to Apply

Assistive Technology Specialist

UIC Government Services and the Bowhead Family of Companies • Lanham, MD • 4h ago

IT & Engineering

Overview Assistive Technology Specialist: Bowhead is seeking an Assistive Technology Specialist to provide program support for the Information Resources Accessibility Program (IRAP) Section 508 office. The Section 508 Pr...

4h ago

Go to Apply

LEAD INFORMATION SECURITY ENGINEER-FEDERAL MB

Lumen • Washington, DC • 4h ago

IT & Engineering

Lumen is the trusted network for the AI-powered world, connecting people, data, and applications through our expansive fiber network and connected ecosystem. We enable secure, high-performance connectivity across cloud,...

4h ago

Go to Apply

HR Data Analyst

PDS Defense • Herndon, VA • 4h ago

IT & Engineering

Administrative/Clerical HR Data Analyst Herndon, VA Posted: 8/3/2026 Job Description Job ID#: 221901 Job Category: Administrative/Clerical Position Type: Associate - W2 Shift: 1 PDS Defense, Inc. is seeking a HR Data Ana...

4h ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)