> Markdown version of [/jobs/ext/2713012-host-based-systems-analyst-iv-in-arlington](https://www.wearedevelopers.com/jobs/ext/2713012-host-based-systems-analyst-iv-in-arlington). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Host Based Systems Analyst IV in Arlington

- **Company:** Energy Jobline
- **Location:** Arlington, VA, United States
- **Experience:** Expert
- **Salary:** $42,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Computer Engineering, Computer Forensics, Digital Forensics, Wireshark, Forensic Toolkit, Snort (Software), Software Security, Information Technology, Encase, Splunk
- **Published:** September 4, 2026
- **Apply:** https://www.energyjobline.com/job/host-based-systems-analyst-iv-arlington-31477289

## About the Role

* BS Computer Science, Cybersecurity, Computer Engineering, or related degree; or HS Diploma and 10+ years of host or digital forensics experience
 * 8+ years of directly relevant experience in cyber forensic investigations using leading-edge technologies and industry-standard forensic tools
 * Ability to create forensically sound duplicates of evidence (forensic images)
 * Able to write cyber investigative reports documenting digital forensics findings
 * Experience with the analysis and characterization of cyber attacks
 * Experience with proper evidence-handling procedures and chain of custody protocols
 * Skilled in identifying different classes of attacks and attack stages
 * Knowledge of system and application security threats and vulnerabilities
 * Knowledgeable in proactive analysis of systems and networks, including creating trust levels for critical resources
 * Must be able to work collaboratively across physical locations.

Qualifications

 * Experience with or knowledge of two or more of the following tools:
 * EnCase
 * FTK
 * SIFT
 * X-Ways
 * Volatility
 * WireShark
 * Sleuth Kit/Autopsy
 * Splunk
 * Snort
 * Other EDR Tools (CrowdStrike, Carbon Black, Etc.)
 * Proficiency in conducting all-source research.
 * GCFA, GCFE, EnCE, CCE, CFCE, CISSP

## Description

ARSIEM is looking for a Host Forensics Analyst. This position will support one of our Government clients in Arlington, VA. Responsibilities

 * Assisting Federal leads with overseeing and leading forensic teams at onsite engagements by coordinating evidence collection operations.
 * Providing technical assistance on digital evidence matters and forensic investigative techniques to appropriate personnel when necessary
 * Writing in-depth reports, supports peer reviews, and provides quality assurance reviews for junior personnel.
 * Supporting forensic analysis and mentoring/providing guidance to others on data collection, analysis, and reporting in support of onsite engagements.
 * Assisting with leading and coordinating forensic teams in preliminary investigation
 * Planning, coordinating, and directing the inventory, examination, and comprehensive technical analysis of computer-related evidence
 * Distilling analytic findings into executive summaries and in-depth technical reports
 * Serving as a technical forensics liaison to stakeholders and explaining investigation details to include forensic methodologies and protocols
 * Tracking and documenting on-site incident response activities and providing updates to leadership throughout the engagement
 * Evaluating, extracting, and analyzing suspected malicious code


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [How I saved 200K/yr in direct costs writing 0 code lines in K8s](https://www.wearedevelopers.com/videos/1055-how-i-saved-200k-yr-in-direct-costs-writing-0-code-lines-in-k8s)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)