Cyber Forensics Analyst

GFT Technologies SEOn-siteFull-timeMid level, 2–5 yearsListed 2 weeks ago

Apply now

About this role

Job description _

About the Role _

We are seeking a Cyber Forensics Analyst with a strong emphasis on data preservation and defensible collection activities to support legal, compliance, and investigative matters. This role is primarily focused on executing and supporting eDiscovery workflows, with a core responsibility around identifying, preserving, and collecting data from a variety of enterprise sources including endpoints, servers, and cloud environments. Candidates should bring hands-on experience with industry-standard tools such as EnCase, Nuix, and Microsoft Purview eDiscovery, with the ability to perform targeted and large-scale collections while maintaining strict chain of custody and defensibility standards. While digital forensics experience is valuable, this role is centered on practical execution of eDiscovery collection and preservation processes.

A day in this role _

- Execute defensible data preservation and collection activities across endpoints, servers, cloud platforms, and enterprise systems

- Support end-to-end eDiscovery workflows, including identification, preservation, collection, processing, and handoff for review

- Perform targeted and bulk collections using forensic and eDiscovery tools

- Manage legal hold implementations and data preservation strategies

- Conduct data triage and validation to ensure completeness and defensibility of collections

- Collaborate with Legal, Compliance, HR, and Security teams to support investigations and litigation matters

- Utilize Microsoft Purview eDiscovery for case management, search, collection, and export activities

- Process and analyze data using Nuix Workstation or equivalent platforms

- Leverage EnCase tools for forensic acquisition and analysis where required

- Maintain chain of custody and documentation for all evidence handling activities

- Develop and maintain standard operating procedures for eDiscovery and forensic workflows

- Provide technical expertise during audits, regulatory inquiries, and internal investigations

The expertise requested _

- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience)

- 3+ years of experience in digital forensics, eDiscovery, or a closely related field

- Hands-on experience with at least one of the following tools: EnCase (any product suite), Nuix (any product, preferably Nuix Workstation), or Microsoft Purview eDiscovery

- Experience performing data preservation and defensible collection activities

- Understanding of the eDiscovery lifecycle and legal/regulatory requirements

- Knowledge of file systems, operating systems, and data structures

- Strong documentation and reporting skills

- Ability to manage multiple cases and priorities simultaneously

Desired or nice to have expertise _

- Experience with multiple tools across EnCase, Nuix, and Microsoft Purview eDiscovery

- Familiarity with cloud data sources including Microsoft 365, Exchange Online, OneDrive, and Teams

- Experience with forensic imaging and endpoint data acquisition

- Knowledge of scripting or automation (PowerShell, Python, etc.)

- Industry certifications such as EnCE, GCFA, CCE, or Relativity certifications

- Experience supporting litigation, regulatory, or internal investigation matters

Our Core values are focus to inclusion and diversity, all qualified applicants will be considered for employment and will go thru a fair recruitment process regardless of their race, religion, gender identity, sexual orientation, national origin or disability status.

Your Journey with us begins here!!