JobConnect

Cyber Forensics Analyst

About the Role_

We are seeking a Cyber Forensics Analyst with a strong emphasis on data preservation and defensible collection activities to support legal, compliance, and investigative matters. This role is primarily focused on executing and supporting eDiscovery workflows, with a core responsibility around identifying, preserving, and collecting data from a variety of enterprise sources including endpoints, servers, and cloud environments. Candidates should bring hands-on experience with industry-standard tools such as EnCase, Nuix, and Microsoft Purview eDiscovery, with the ability to perform targeted and large-scale collections while maintaining strict chain of custody and defensibility standards. While digital forensics experience is valuable, this role is centered on practical execution of eDiscovery collection and preservation processes.

A day in this role_

  • Execute defensible data preservation and collection activities across endpoints, servers, cloud platforms, and enterprise systems
  • Support end-to-end eDiscovery workflows, including identification, preservation, collection, processing, and handoff for review
  • Perform targeted and bulk collections using forensic and eDiscovery tools
  • Manage legal hold implementations and data preservation strategies
  • Conduct data triage and validation to ensure completeness and defensibility of collections
  • Collaborate with Legal, Compliance, HR, and Security teams to support investigations and litigation matters
  • Utilize Microsoft Purview eDiscovery for case management, search, collection, and export activities
  • Process and analyze data using Nuix Workstation or equivalent platforms
  • Leverage EnCase tools for forensic acquisition and analysis where required
  • Maintain chain of custody and documentation for all evidence handling activities
  • Develop and maintain standard operating procedures for eDiscovery and forensic workflows
  • Provide technical expertise during audits, regulatory inquiries, and internal investigations

The expertise requested_

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience)
  • 3+ years of experience in digital forensics, eDiscovery, or a closely related field
  • Hands-on experience with at least one of the following tools: EnCase (any product suite), Nuix (any product, preferably Nuix Workstation), or Microsoft Purview eDiscovery
  • Experience performing data preservation and defensible collection activities
  • Understanding of the eDiscovery lifecycle and legal/regulatory requirements
  • Knowledge of file systems, operating systems, and data structures
  • Strong documentation and reporting skills
  • Ability to manage multiple cases and priorities simultaneously

Desired or nice to have expertise_

  • Experience with multiple tools across EnCase, Nuix, and Microsoft Purview eDiscovery
  • Familiarity with cloud data sources including Microsoft 365, Exchange Online, OneDrive, and Teams
  • Experience with forensic imaging and endpoint data acquisition
  • Knowledge of scripting or automation (PowerShell, Python, etc.)
  • Industry certifications such as EnCE, GCFA, CCE, or Relativity certifications
  • Experience supporting litigation, regulatory, or internal investigation matters

Our Core values are focus to inclusion and diversity, all qualified applicants will be considered for employment and will go thru a fair recruitment process regardless of their race, religion, gender identity, sexual orientation, national origin or disability status.

Your Journey with us begins here!!

Skills

  • eDiscovery
  • Digital Forensics
  • EnCase
  • Nuix
  • Microsoft Purview
  • Legal Hold Management
  • Chain of Custody

Related jobs

GFT TechnologiesApply for this job