Digital Forensic Investigator

Job Description – Senior Digital Forensics and Incident Response (DFIR) Analyst who is a motivated individual with strong technical competency that will research and implement detection measures using data from a wide spectrum of sources. The candidate will also perform opportunistic threat hunting and forensic analysis when required during incidents.

Responsibilities include –

• Provide oversight for execution of forensic projects on time, within budget and to meet or exceed client and Firm expectations
• Provide deep Forensic and related Subject Matter Expertise
• Provide support to ensure the firm’s accreditation as a PCI Forensic Investigator (PFI) company
• Provide support in determining requirements for and setting up digital forensics lab to meet PCI Forensic Investigator requirements
• Provide support for the development of forensics and related products and services
• Provide support for comprehensive cost/benefit analysis and preparation of business cases for forensic initiatives
• Assist in prospecting, marketing & business development activities for the forensic practice through subject-matter input for the development of forensics EOIs, Proposals, response to RFPs,
• RFI, ITB, SOW, presentations, etc.
• Provide result-oriented business development and market penetration support through generation of marketable services and client relationship building, especially extension of existing business
• Provide support for thought leadership by contributing to the generation of whitepapers, case studies, presentations
• Provide support for effective skills development and growth of forensic practice
• Supervise and mentor the company’s Forensic Team

Other Responsibilities:

• Work with external and internal clients to analyze criminal/civil/internal project requests and to plan and execute forensic support for both simple and complex investigations.
• Provide recommendations for identification, collection, and preservation of digital evidence.
• Determine tools and procedures required for preservation.
• Collect, process, and analyze electronically stored information (ESI) obtained from network, cloud, and end user digital sources in accordance with industry standards.
• Provide required documentation demonstrating chain of custody of evidence.
• Work with other team members to provide guidance and assistance to clients.
• Provide written and verbal status updates to external and internal clients in a clear and concise manner.
• Be responsible for finalizing and delivering project reports and delivering presentations to client management teams
• Provide mentoring, coaching and direction setting to the client forensic teams
• Provide forensics and related training facilitation services as required

Required Qualifications

• Bachelors or equivalent work experience in Computer Science, Forensic Science, or related fields
• 6+ Years of Cybersecurity experience with concentration in forensics and Incident Response, and or practical experience performing forensics on a variety of media, including Windows, OS X, Linux, Android and iOS
• Experience writing technical reports, detailing results of analysis.
• Experience with EnCase, FTK, X-Ways, Axiom, Forensic Explorer, Cellebrite and other forensic tools.
• Experience identifying and analyzing malware.
• Demonstrated success and understanding of accepted frameworks such as, ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity Framework Experience with forensic processes and procedures (chain of custody, computer acquisition techniques, and memory acquisition techniques)