Digital Forensics Investigator

Ortho Clinical Diagnostics • San Diego, CA

439d • $115,000 - $135,000

About The Position

The Digital Forensics Investigator (DFI) at QuidelOrtho plays a vital role in the cybersecurity team, focusing on supporting cybersecurity incidents, internal investigations, and electronic discovery/litigation matters. This position requires a deep understanding of digital forensics, operating systems, file systems, and network protocols to effectively respond to security, privacy, policy, and compliance incidents. The DFI will collaborate with security stakeholders, legal teams, and business leaders to provide objective analysis and drive informed decision-making, while also defining policies and procedures for the collection and analysis of digital artifacts.

Requirements

• Bachelor's degree in computer science, information systems, engineering, or related field.
• 5+ years of experience in digital forensics, incident response, or a similar role.
• Experience using commercial and open-source forensic software (e.g., X-Ways, EnCase, KAPE, TSK, FTK, Sleuth Kit, Volatility Framework).
• Experience deploying and maintaining commercial enterprise forensic tools.
• Experience writing investigative reports, including technical components.
• Experience performing Windows/Unix/Linux forensics and network forensics.
• Ability to analyze triage collections for indicators of compromise and malicious activity.
• Experience reviewing logs from host systems to identify suspicious activities.
• Experience collecting forensic disk and memory images from endpoints and servers.
• Experience performing forensic analysis of physical systems, virtual machines, and cloud environments.
• Direct experience with large datasets and log analysis tools (e.g., SIEM, EDR, Python, PowerShell).
• Demonstrable knowledge of enterprise environments, network protocols, and operating systems.
• Experience using Splunk's Search Processing Language (SPL) and Microsoft's Kusto Query Language (KQL).
• Familiarity with common enterprise scripting languages (PowerShell, Python, Bash).
• Ability to travel up to 10-15%.
• Must be a US Citizen.

Responsibilities

• Evolve QuidelOrtho's Digital Forensics and Investigations program, developing a global capabilities roadmap and strong operational procedures.
• Assist in ensuring proper processes for legal holds throughout the company, including legal hold scoping and documentation.
• Execute information security and technical privacy investigations as requested by leadership, coordinating resources across the firm.
• Perform and oversee forensic analysis of digital information using standard techniques and tools.
• Employ industry-standard forensic tools to extract, recover, and analyze electronic data while maintaining integrity and chain of custody.
• Maintain effective relationships with law enforcement agencies at various levels.
• Demonstrate professionalism and foster a collaborative environment while maintaining confidentiality.
• Assist with eDiscovery and Litigation Hold matters across various technology environments, ensuring compliance with defensible processes.
• Participate in a rotating on-call schedule and work outside normal business hours as needed.
• Exhibit strong customer service, consulting, and project management skills.
• Prepare communications to senior leadership regarding investigations and write detailed reports summarizing findings.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• 401(k) plan
• Employee assistance program
• Employee Stock Purchase Plan
• Paid time off (including sick time)
• Paid holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Computer and Electronic Product Manufacturing
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees