Upper-level position within the Digital Collections and Forensics Group, under the direction of the Vice President of Forensic Services. You must have the ability to independently conduct simple and complex onsite and remote data collections and investigations – and, based on engagement requirements, select the appropriate forensic tools or methods to collect a variety of electronically stored information (ESI) for civil litigation cases.
You must be able to interact with clients in person and via phone / email. You will be collaborating with and providing support to the sales and project management departments of Business Intelligence Associates (BIA).
Duties and Responsibilities
Other duties may be assigned as necessary. To perform this job successfully, you must be able to execute the following duties and responsibilities to a high level of satisfaction:
- Occasional travel to client locations to conduct forensically sound collection of electronically stored information (ESI) from workstations, networks, mobile devices, email systems, cloud-based repositories and other systems. You must have the ability to exercise independent judgment when appropriate;
Follow BIA's established policies and procedures to fully document the collection of ESI for client engagements;
Perform digital forensic analysis with little to no supervision;
Handle management, encryption, chain of custody and shipping of evidence and other work-related items;
Create reports and documentation;
Consult with and take direction from supervisors, project managers, sales people and clients regarding project scope, case investigations and status;
Provide full support for project scoping, planning and execution;
Provide consultative services to clients as needed;
- Ability to quickly, efficiently and accurately evaluate Windows computers for evidence of data exfiltration via USB drives, cloud storage, email, remote access, etc.
The requirements listed below are representative of the knowledge, skill and/or ability required.
Ability to write clear, concise reports, business correspondence and documentation including procedure manuals. Ability to effectively present information and respond to questions from both internal stakeholders and clients. Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures or governmental regulations.
Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.
To perform this job successfully, you should have advanced knowledge and experience with MacOS, iOS, Android and Microsoft Windows operating systems; Microsoft Office software; internet software; eDiscovery software; computer forensic software; and computer hardware.
Extensive experience with X-Ways and/or FTK is a must. Experience with Cellebrite hardware and software, Axiom/Internet Evidence Finder and other forensic software is strongly desired. Advanced knowledge and experience with write blocking and forensic imaging hardware devices (e.g. Tableau, LogiCube) and bootable forensic media (e.g. Paladin, MacQuisition, WinFE or Recon Imager) is required.
Bachelor's degree is preferred but not mandatory; five to six years of computer forensic related experience and/or training; or equivalent combination of education and experience. Testifying experience preferred.
- Knowledge of all phases in the EDRM.
- Computer forensics and ESI collection.
Certificates and Licenses (preferred but not mandatory):
CCE, CFCE, ENCE, ACE, CISSP, CCFP or similar are a plus.
- Litigation support certification like CEDS or similar is a plus.
This position will be located at one of BIA's offices, in New York City, Portage, MI or Denver, CO. We will consider a remote worker position for certain exceptional candidates.
This position requires a criminal background check and/or FBI background check.
Security clearance is a plus but not required.