Identifies, collects, examines, and preserves evidence using controlled and documented analytical and investigative techniques.

Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation.

Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.

Conducts deep-dive investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents.