About the role
- Evidence Collection and Preservation: Identify, collect, and preserve digital evidence from various sources, including laptops, desktops, servers, mobile devices, cloud environments, and network logs, ensuring strict adherence to chain-of-custody protocols.
- Forensic Analysis: Conduct in-depth forensic analysis to reconstruct digital events, identify the tactics used by attackers, recover deleted or hidden data, and analyze file metadata and network traffic.
- Malware Analysis and Data Recovery: Utilize specialized software to perform malware triage and analysis, and recover data from damaged, corrupted, or encrypted storage devices.
- Documentation and Reporting: Prepare detailed, high-quality technical reports and investigative briefs that clearly explain findings in a manner that can be understood by both technical and non-technical audiences and withstand legal scrutiny.
- Client Consultation and Presentation: Engage with internal and external clients, law enforcement, and legal counsel to understand case requirements, manage expectations, and present investigative findings.
- Expert Testimony: Serve as an expert witness in legal and court proceedings, providing credible testimony regarding forensic procedures and findings.
- Process Improvement: Develop and refine forensic methodologies, standard operating procedures (SOPs), and recommend enhanced cybersecurity measures to prevent future incidents.
- Continuous Learning: Stay up-to-date with the latest forensic tools, techniques, and evolving cybercrime methods and technologies.
- Education: Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, or a related STEM field; Master's degree preferred.
- Experience: [e.g., 6+] years of experience in digital forensic investigations or incident response.
- Technical Expertise:
- Proficiency with industry-standard forensic tools and software (e.g., EnCase, FTK, X-Ways, Cellebrite, Autopsy).
- Strong understanding of various operating systems (Windows, macOS, Linux, iOS, Android), file systems, and network architectures.
- Knowledge of data recovery techniques, encryption methods, and malware analysis.
- Familiarity with programming or scripting languages (e.g., Python, Bash) is beneficial.
- Soft Skills:
- Exceptional analytical and problem-solving abilities.
- Excellent written and verbal communication skills, with the ability to convey complex technical information clearly.
- Meticulous attention to detail and strong organizational skills.
- High ethical standards and the ability to handle highly sensitive and confidential information with discretion.
- Ability to work independently, manage multiple tasks, and adapt to changing priorities under pressure.
- GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Forensic Examiner (GCFE)
- Certified Computer Examiner (CCE) or Certified Forensic Computer Examiner (CFCE)
- Computer Hacking Forensic Investigator (CHFI)