Digital Forensics Consultant

Role Overview

We are seeking a meticulous Digital Forensics Consultant to manage the full lifecycle of complex digital investigations. You will apply advanced forensic techniques to collect evidence, reconstruct digital incidents, analyze malware, and present defensible findings to clients, legal teams, and courtrooms.

Key Responsibilities

• Data Collection & Preservation: Identify and secure digital evidence across endpoints, servers, mobile devices, network logs, and cloud environments while maintaining strict chain of custody.
• Forensic & Malware Analysis: Conduct deep-dive analysis to trace attacker behavior, analyze file metadata/network traffic, perform malware triage, and recover deleted or corrupted data.
• Reporting & Legal Defense: Author clear, detailed technical reports suitable for executive stakeholders and legal scrutiny; serve as an expert witness in legal proceedings when required.
• Client Consultation: Brief internal/external clients, law enforcement, and legal counsel on case status and technical findings.
• Process Enhancement: Refine forensic SOPs, develop custom automation scripts, and recommend preventative security controls.

Qualifications & Skills

• Education: Bachelors degree in Digital Forensics, Computer Science, Cybersecurity, or related STEM field (Masters preferred).

• Experience: Digital forensics, incident response, or forensic litigation support.

• Technical Mastery:
  Hands-on proficiency with industry tools: EnCase, FTK, X-Ways, Cellebrite, or Autopsy.

• In-depth knowledge of Windows, macOS, Linux, iOS, Android, and various file systems.

• Strong foundation in network architectures, encryption, data recovery, and malware triage.

• Scripting skills in Python or Bash are highly desirable.

• Key Competencies: High ethical standards, exceptional analytical skills, meticulous attention to detail, and the ability to explain complex technical concepts to non-technical audiences under pressure.

Preferred Certifications

• GCFA, GCFE, CCE, CFCE, or CHFI