Principal Digital Forensics Investigator
About The Position
The Principal Digital Forensics Investigator serves as a tactical arm of eSentire’s Incident Response team, bringing deep expertise in incident response and digital forensics. The role handles the organization’s most volatile and complex cases while ensuring high-quality, responsive service. Cases may involve financially motivated data breaches, state-affiliated espionage, and ideology-driven attacks aimed at information gathering, manipulation, or disruption. Investigative conclusions must be supported by domain expertise and technical execution and be capable of withstanding scrutiny in a court of law. The position works closely with eSentire’s SOC, Customer Success Management, TRU, and Engineering teams to support rapid mobilization, source identification, containment, and quantification of information losses during active cyberattacks. The Principal also manages CSI team tools and infrastructure, oversees technology improvements, mentors investigators, and guides technical engagements with partners and clients.
Requirements
- Four-year degree in a relevant discipline and eight to ten years of experience.
- Alternatively, a military or law enforcement background with ten or more years of relevant work experience may be accepted in lieu of education requirements.
- Experience acting in a consultant capacity in the investigation and remediation of polymorphic trojans and modern ransomware variants.
- Mastery of one or more mainstream forensics tools, such as EnCase, FTK, Axiom, or X-Ways.
- Demonstrable expertise in IT investigations and digital forensics.
- Strong working knowledge of information security fundamentals.
- Excellent written and verbal communication, listening, and client management skills.
- Ability to explain complex IT technical information to customers in non-technical terms.
- Self-motivated, with strong analytical skills and attention to detail.
- Demonstrated presentation skills.
Nice To Haves
- Security consulting and/or case investigation background preferred.
Responsibilities
- Manage all CSI Team tools, physical devices, and infrastructure components.
- Renew relevant software licenses and infrastructure subscriptions.
- Oversee implementation of new technologies that support the CSI team mission.
- Identify and research new technologies and make written recommendations to improve efficiency or enhance the eSentire Incident Response Program.
- Liaise with internal eSentire stakeholders to keep the Incident Response program aligned with eSentire products and technologies.
- Continue to perform all duties of a Senior Digital Forensic Investigator.
- Support and mentor Senior Digital Forensic Investigators and junior-level staff.
- Work rotating shifts and be available on call as required.
- Work extended periods outside regularly scheduled hours, including weekends and holidays, as required.
- Travel for short periods and work onsite at client locations throughout the United States and Canada, as required.
- Oversee and provide guidance for technical engagements with partners and end clients.
Benefits
- Role-specific incentive programs, including an annual bonus program or competitive commission plan.
- Competitive benefit program.
- Paid parental leave.
- Matching RRSP or 401K program.
- Competitive employee referral bonus.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
