Digital Forensic Analyst

Job Description

Digital Forensics Investigations Team is looking for a candidate who will conduct forensic analysis in sensitive cases, establish and maintain positive relationships with internal business partners, report on and present findings to investigative business partners, develop solutions to increase efficiency in technical processes, and research operating system and file system forensic artifacts. This is a unique opportunity for someone to be able to join and impact a large software company.

Job Description

• Minimum 5-10 years of experience in digital forensic investigations

• Proven expertise in filesystem analysis in one or more OS: Mac, Windows, Linux/Unix

• Experience with industry standard Digital Forensics methodologies, including evidence handling, chain of custody procedures, and commonly used forensics toolsets

• Attention to detail, deep personal integrity, and high concern for data accuracy

• Strong verbal and written communication (History of writing reports, expert opinions, or providing expert testimony experience a plus)

• An investigative mind to be able to learn and discover how unfamiliar technology works

• Dependable collaborator who works with peers in a team-oriented environment

• Ability to switch mindset and wear many hats (e.g investigator, interviewer, trouble-shooter) without impacting performance

Top Skills' Details

1. Prior law/military/corporate investigation experience (candidates from power companies, intel companies, government work)

2. MacOS/iOS exposure – utilizing commercial tools on Apple devices.

3. DFIR, SAM, use of 3rd party tooling (Axium, Oxygen, etc.)

4. Understanding of forensic toolsets (network logs and scripting)

5. Team player, a problem solver and can work independently

Additional Skills & Qualifications

Understanding of chain of custody, written reports, testify as experts in their fields.

Technical report vs. summary report.

Past experience: Large company that has employees using devices, incident response, infra security.

Remote –working in PST mostly (Santa Clara would be ideal)

Global team – will also have to work some off hours from time to time.

Possibility to go full time - pending headcount*