Forensic Investigator Jobs

About The Position

Requirements

• 25 or more years of principal-level career experience leading complex digital forensic investigations in law enforcement and the private sector.
• Extensive digital-forensics experience with high-tech crimes, including trade-secret misappropriation, insider threats, data exfiltration, media leaks, cyber incidents, internal fraud, and national-security-grade matters.
• Demonstrated expertise developing bespoke data-acquisition and digital-forensics solutions.
• Scripting proficiency in Python and Bash.
• Mastery of Apple operating systems (macOS, iOS, iPadOS, and watchOS) and associated artifacts, including Plists, SQLite databases, and file-system structures.
• Cloud-forensics experience with iCloud, AWS, and GCP.
• Prior qualification as an expert witness in state, federal, or international courts, specifically regarding Apple forensics and digital evidence integrity.
• Extensive testimony experience in civil and/or criminal legal proceedings.
• Deep knowledge of secure handling and storage of physical and electronic evidence in accordance with criminal and civil chain-of-custody procedures and industry best practices.
• Prior employment as a police officer, investigator, or equivalent with a US or international law-enforcement agency.
• Extensive experience interviewing witnesses and subjects of investigations.
• Strong background with eDiscovery collection, processing, and data-review tools.
• Ability to deliver accurate, impartial findings with consistent attention to detail.
• Strong verbal and written communication skills.
• Commitment to integrity and confidentiality.
• Degree in Computer Science, Digital Forensics, Information Systems, or equivalent.

Nice To Haves

• Experience working with Fortune 500 companies.
• Certification in DFIR, SANS, and/or relevant industry education.

Responsibilities

• Lead complex, high-consequence digital forensic investigations into insider threats, data theft, media leaks, cybercrime, complex fraud, and other concerns.
• Serve as a senior technical authority and trusted advisor to executive and legal teams.
• Craft investigative strategies for critical legal matters.
• Develop bespoke data-acquisition and digital-forensics solutions.
• Foster strong partnerships across Apple’s businesses.
• Identify security loopholes and develop risk remediations.
• Provide expert testimony and findings concerning Apple forensics and digital evidence integrity.
• Develop and deliver macOS forensics training to law enforcement and the private sector.
• Interview witnesses and subjects of investigations.
• Handle and store physical and electronic evidence securely in accordance with chain-of-custody procedures and industry best practices.