Senior Forensics Examiner

DISCO•Austin, TX

About The Position

The Senior Forensic Examiner is responsible for performing advanced forensic scoping, forensic consultation, forensic collection, forensic analysis, forensic reporting, and expert testimony. They are responsible for determining the most defensible method of collection and troubleshooting any data issues that may arise. They are also responsible for the more intricate and new data source collections and analysis.

Requirements

9+ years of progressive technical experience demonstrating relevant skills in digital forensic collections and investigations.
Hands-on experience with digital forensic tools such as MetaSpike Forensic Email Collector (FEC), X-Ways, AccessData Forensic ToolKit (FTK), OpenText EnCase, Cellebrite UFED/PA, Cellebrite Digital Collector, Cellebrite Inspector, Magnet Forensics Axiom Cyber, Paraben E3, Fookes Aid4Mail, and GetData Forensic Explorer (FEX).
Experience with the chain of custody and evidence handling best practices.
Have a strong understanding and knowledge of disk structures, file systems, and forensic artifacts for modern operating systems for Windows and Apple computers.
Have strong understanding, knowledge and experience of Microsoft Purview and Google Workspace and their metadata.
Experience applying forensic investigative and litigation support principles methodologies.
Excellent documentation and communication skills with technical report writing experience.
Ability to multitask and manage multiple projects and competing priorities simultaneously.
Capability to work independently and within a team environment.
Candidates must be legally authorized to work in the United States without sponsorship now or in the future. DISCO is not currently sponsoring visas, including, not limited to, H-1B, TN, or EAD, and we are not accepting visa transfers.

Nice To Haves

5+ years experience within the private sector of e-Discovery, performing collections of email, cloud sources, mobile devices, workstations, servers, and structured data.
5+ years experience performing forensic investigations and analysis.
Experience testifying in civil or criminal courts in defense of forensic investigative findings.

Responsibilities

Conducts forensic collections of digital evidence using best practices and approved software and hardware.
Acquires electronic data from cloud sources, computers, mobile devices, and other digital media in a forensically sound manner.
Consults with customers to conduct forensic collections, perform exports and reporting, and conduct investigations.
Creates summary reports, forensic artifact reports, and formal forensic expert reports when requested by the client.
Maintains contemporaneous forensic examination notes.
Provides expert testimony regarding investigative forensic findings.
Serves as a technical consultant on data management and digital forensic methodology and concepts.
Provides technical guidance and assistance to staff involved in the investigation and litigation process to prevent evidence spoliation.
Ensures all hardware and software are verified and validated according to established guidelines and the Federal Rules of Evidence.
Drafts affidavits, declarations, expert reports, and provides oral testimony in defense of forensic findings or processes.