Forensics Examiner

Disco
Summary
Join DISCO as a Forensic Examiner and perform forensic scoping, consultation, collection, analysis, reporting, and provide testimony. You will determine the best data collection methods and troubleshoot data issues. Responsibilities include consulting on data sources, performing forensic collections maintaining data integrity, and conducting forensic analysis. You will create reports and provide testimony. The ideal candidate has 3+ years of experience in forensic collections and 1+ years in the private sector e-Discovery. Experience with chain of custody and evidence handling is required. DISCO offers a fun work environment, benefits (medical, dental, vision, 401k), competitive salary plus RSUs, flexible PTO, and growth opportunities.
Requirements
- 3+ years experience in performing remote, in-lab, and onsite forensic collections
- 1+ years experience within the private sector of e-Discovery, performing collections of email, cloud sources, mobile devices, workstations, servers, and structured data
- Experience with the chain of custody and evidence handling best practices
Responsibilities
- Consulting: Scopes potential data sources for collection. Provides sound forensic consultation to their clients in regard to forensic analysis methods
- Data Collection: Performs forensic collections ESI ensuring metadata and data integrity are maintained throughout the process. Forensic documentation is completed regarding the collection of data sources
- Analytics & Reporting: Performs forensic analysis on forensically collected data sources. Maintains contemporaneous forensic examination notes. Creates summary reports, forensic artifact reports, and formal forensic expert reports when requested by the client
- Testimony (Written/Oral): Responsible for providing testimony in the authentication and defense of forensic processes performed
Preferred Qualifications
- Hands-on experience with digital forensic tools such as MetaSpike Forensic Email Collector (FEC), X-Ways, AccessData Forensic ToolKit (FTK), OpenText EnCase, Cellebrite UFED/PA, Cellebrite Digital Collector, Cellebrite Inspector, Magnet Forensics Axiom Cyber, Paraben E3, Fookes Aid4Mail, and GetData Forensic Explorer (FEX)
- Knowledge of disk structures, file systems, and forensic artifacts for modern operating systems for Windows and Apple computers
- Knowledge and experience of Microsoft Purview and Google Workspace and their metadata
Benefits
- Open, inclusive, and fun environment
- Benefits, including medical, dental and vision insurance, as well as 401(k)
- Competitive salary plus RSUs
- Flexible PTO
- Opportunity to be a part of a company that is revolutionizing the legal industry
- Growth opportunities throughout the company