Principal, Forensics Engineer

Walmart•Bentonville, AR

1d•$110,000 - $220,000•Onsite

About The Position

The Principal, Forensics Engineer will be responsible for building, maintaining, and enhancing effective internal and external partnerships. This role involves clearly drafting valuable information, seeking input, and influencing technical outcomes. The engineer will assist in communicating shared goals with diverse groups, identifying and addressing partner technical needs, and educating them on value creation. Collaboration with other individuals and teams to solve shared business problems cooperatively is essential. The position requires consulting regularly with business unit leaders to advise on business strategy decisions and proactively bringing ideas and technical solutions to business partners and stakeholders. The role includes drafting junior-level countermeasures for information risks, following information assurance guidelines, testing their effectiveness, and selecting appropriate tools. Basic steps in safeguarding information, participating in developing back-up, recovery, and archival practices, and assisting in the installation, configuration, and support of information management software are also key duties. The engineer will follow organizational guidelines on information management, analyze issues and requirements for information resources, and create roadmaps for compliance to achieve lab accreditation. This includes ensuring prerequisites for lab accreditation are in order, conducting cost-benefit analysis for certification programs, and developing/enhancing internal or external certification programs. Managing surveys and evaluations for these programs, controlling budgets, and consulting on various lab certification programs are also part of the role. The engineer will evaluate the performance, cost-effectiveness, and efficiency of computer forensics practices and tools, optimizing them for speed and reliability. Collaboration with other digital technical teams to identify sources and causes of security incidents, reviewing investigative cases, assessing costs and benefits of digital forensics tools, and preparing contingency plans for predicted risks are crucial. Developing standard processes to maximize efficiency and effectiveness of data extraction, understanding legal perspectives when researching Electronically Stored Information (ESI), and understanding assigned roles in eDiscovery processes to collaborate with legal professionals are also required. The role involves participating in discussions to break down legal issues, creating procedures for evaluating large-scale eDiscovery requests, and anticipating the impact of process changes. Training on legal documentation delivery specifications and processes, and establishing best practices for technology tools and delivery vehicles are also key responsibilities. Finally, the engineer will be involved in analysis, design, and data collation for large documentation initiatives, coordinating and monitoring records retention programs, ensuring exceptions are captured, and enhancing processes and procedures for the organization's records retention program.

Requirements

Recovering deleted data and conducting comprehensive forensic investigations
Leveraging expertise with ASCII, ambient data, and audit trails to streamline investigations
Performing analysis of recovered data to extract key evidence and insights
Documenting forensics findings in detailed and accurate reports, including LaTeX
Conducting database forensics to uncover hidden digital footprints using Realm and DB Browser for SQLite
Performing device acquisition following best practices (Cellebrite, Magnet, and Autopsy)
Formulating Digital fingerprints
Evaluating the performance, cost-effectiveness, and efficiency of digital forensics practices and tools
Coaching team members on the use of techniques and toolsets to detect and providing digital evidence of complex information security investigations
Incorporating best practices, like NIST and SWDGE, into digital forensics methodologies

Responsibilities

Build, maintain and enhance effective internal and external partnerships
Clearly draft valuable information and seek input
Influence technical outcomes and assist in communicating shared goals with diverse groups and parties by linking their interests to that of business
Identify and address additional partner technical needs and educate them on value creation
Communicate with other individuals or teams to solve shared business problems cooperatively
Consults regularly with leaders of business unit(s), serve to advise on business strategy decisions
Bring ideas and technical solutions proactively to business partners and stakeholders
Draft junior-level countermeasures to handle a variety of information risks
Follows guidelines for information assurance in an assigned department while working under supervisor's guidance
Tests effectiveness of information assurance activities within an assigned department
Selects information assurance tools for an assigned department's needs
Performs basic steps in safeguarding of information
Participates in developing back-up, recovery, and archival practices and procedures
Assists in installation, configuration, and support of information management software
Follows organizational guidelines and policies on information management
Analyzes issues and requirements for management of information resources
Create roadmaps for compliance and ensures adherence in order to achieve lab accreditation
Ensures prerequisites for lab accreditation are in order
Conducts cost-benefit analysis for implementing a lab certification program
Develops and enhances internal or external certification programs
Manages internal and external surveys and evaluations for lab certification programs
Controls budgets for lab certification programs and ensures budgets remain within specified guidelines
Consults on various lab certification programs for internal and external clients
Evaluate performance, cost-effectiveness, and efficiency of computer forensics practices and tools and makes improvements as needed
Optimizes computer forensics processes, tools, and standards to increase speed and reliability of responses
Collaborates with other digital technical teams to identify sources and possible causes of security incidents or violations
Reviews investigative cases and documents
Assesses costs and benefits of various digital forensics tools
Predicts risks in diverse digital forensics tools and prepares contingency plans
Develop standard processes to maximize efficiency and effectiveness of data extraction process
Understand legal perspectives when researching ESI (for example, hard drives, systems, databases, file sharing platforms, messaging platforms, social media, text messages, document collaboration and file-sharing platforms, third-party archives)
Understand assigned roles in eDiscovery processes in order to collaborate with lawyers, paralegals, and legal analysts
Participates in discussions with team members in order to break down legal issues into understandable concepts
Creates procedures that help guide evaluation of large-scale eDiscovery requests (for example, legal holds on user mailboxes, mailbox content search criteria)
Anticipates and monitors potential impacts of process changes (for example, legal holds, chain of custody)
Conduct training on legal documentation delivery specifications and processes
Establishes and references best practices for existing and planned technology tools and delivery vehicles for proper documentation
Analysis, design, and data collation for large documentation initiatives
Harvesting Electronically Stored Information (ESI): Coordinate and monitors various steps involved in records retention programs
Ensures that all exceptions and unusual circumstances are properly captured and reviewed
Enhances processes and procedures used in organization's records retention program