CSIS Digital Forensic Investigator

Citi • Tampa, FL

7d • $114,720 - $172,080 • Onsite

About The Position

The CSIS Lead Investigator is a strategic professional who stays abreast of developments within their field and contributes to directional strategy by considering their application in their job and the business. This role is recognized as a technical authority within an area of the business and requires basic commercial awareness. Typically, there are multiple individuals within the business who provide the same level of subject matter expertise. Developed communication and diplomacy skills are required to guide, influence, and convince others, particularly colleagues in other areas and occasional external customers. This role has a significant impact on the area through complex deliverables and provides advice and counsel related to the technology or operations of the business. The work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.

Requirements

• 6-10 years of experience
• Ability to conduct investigative interviews and recording techniques that tie the facts and evidence together
• Experience investigating complex and variable case(s) that has substantial impact
• Understanding of forensic and eDiscovery processes and procedures to include the collection, examination, and analysis of data while preserving integrity and maintaining a strict chain of custody
• Experience representing/testifying in criminal and civil court matters
• Conveys mastery of investigative concepts
• Demonstrated report writing that would present the case and evidences gathered in a cohesive and comprehensive manner
• Knowledge of financial products, frauds and trends
• Previous US Intelligence, military, law enforcement, law firm or government service background
• Experience working in an in-house investigations team
• Professional certifications (GCFE, GCFA, or equivalent)
• Proficiency in Microsoft Office products - Word, Excel, Outlook, PowerPoint, & SharePoint for compiling written reports and spreadsheets on an investigation
• Flexibility to work on call off hours/weekends during critical project phases, if necessary
• Computer forensics experience with knowledge of Windows and Linux operating systems and their file systems.
• Experience conducting various system log analysis, such as Proxy logs, Window event logs, Purview and firewall logs.
• Experience with various standard forensic acquisition and analysis suites, such as Encase, Axiom, FTK, and Cellebrite.
• Excellent communication for conducting case work and obtaining cooperation of other parties.
• An ability to multi-task, demonstrated attention to detail with ability to manage caseload and produce accurate, concise analytical reports.
• Expresses ideas or facts in a clear, concise, and open manner

Nice To Haves

• Knowledge of enterprise cloud computing environments (AWS, Azure, GCP) and associated security controls.
• Knowledge in utilizing Log Aggregation tools (Splunk) and the ability to query and analyze large datasets.
• Experience in Memory forensics, analyzing volatile memory detecting hiding processes, and rootkits.
• Experience in Network analysis investigating network connections and active sockets to identify various communication channels.
• Experience is utilizing various open-source forensic tools such as: (Autopsy, Volatility, and Wireshark)
• Experience in Automation and Scripting developing custom scripts utilizing Python and PowerShell to automate artifact collection and log parsing.

Responsibilities

• Coordination and investigation of high-level fraud matters and/or network security incidents.
• Utilize sophisticated expertise in investigative interviewing, fraud identification, loss prevention, network security, and cyber-enabled fraud to identify fraud activities, schemes, trends, and organized rings that create a risk to the firm, its employees, shareholders, systems, assets, and clients.
• Conduct proactive, complex, variable, and high profile/sensitive investigations with the goal of developing cases to a successful conclusion and providing timely fraud preventive intelligence to business and functional partners.
• Actively engage partners and management to ensure they are kept apprised of any significant changes during the progress of an investigation.
• Responsible for the recovery of losses through court-ordered restitution, property, or direct payment by suspects.
• Build external relationships with members of law enforcement, industry peers, and other sources of support.
• Engage with internal and external suspects, witnesses, and third parties through interview and interrogation, evidence collection, and forensic examination.
• Represent Citi in criminal and civil court matters and have the ability to show knowledge and provide accurate and supportive testimony.
• Mentor and train junior staff members.
• Brief others on ongoing investigations/investigative projects.
• Operate with a limited level of direct supervision, exercising independence of judgment and autonomy.
• Act as SME to senior stakeholders and/or other team members.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients, and assets, by driving compliance with applicable laws, rules, and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct, and business practices, and escalating, managing, and reporting control issues with transparency.

Benefits

• medical, dental & vision coverage
• 401(k)
• life, accident, and disability insurance
• wellness programs
• paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Senior