Digital Forensic Analyst

Digital Forensic Analyst

Employment Type:

Full‑Time, Mid‑Level
Department:
Forensics

CGS seeks a Digital Forensic Analyst focused on the preservation and collection of mobile device and cloud‑stored data. The analyst will work on‑site and remotely, travel for on‑site collection efforts, and maintain an in‑office presence at the primary firm office, including the forensics lab and data center. This position requires a strong forensic technology skill set and a commitment to professional growth within an employee‑centric culture.

• Perform forensic data collection and basic forensic analysis in both on‑site and remote capacity
• Coordinate directly with legal teams and client IT departments to understand project scope
• Maintain forensic tool set by staying current on version updates and new options in the market
• Work closely with project management and other team members on completing complex projects in a fast‑paced, deadline‑driven environment
• Assist in developing, documenting, and refining procedures to accomplish discovery process requirements
• Manage all chain of custody best practices associated with the rules of evidence
• Consistently adhere to standard operating procedures
• Perform quality checks on work products prior to delivering to the client
• Complete additional duties assigned by the manager, including general IT functions

• Minimum of an undergraduate degree, preferably in Digital Forensic Science or Computer Science/Engineering
• 1+ years of relevant experience where the analyst understands the forensic lifecycle and can properly perform scoping activities, evidence acquisitions on a range of devices, and execute forensic analysis at an intermediate level
• Experience using industry standard forensic tools such as EnCase, Cellebrite, Oxygen, FTK Imager, Mac Quisition, X1 Social Discovery, Logicube Falcon, and others
• General understanding of Mac/Windows file systems, mobile devices, and encryption
• Experience preserving desktops, laptops, mobile devices/tablets, servers, cloud and on‑premise email implementations, nontraditional cloud data sources, social media, etc., in a forensically sound manner
• Ability to communicate effectively and tactfully in both verbal and written formats to team members and technical/non‑technical clients
• Ability to work extended hours when necessary to meet client deadlines
• Ability to demonstrate superior organizational skills with acute attention to detail
• Must be willing to travel regularly on short notice and have a valid passport for occasional international travel
• Must be an energetic self‑starter who can work independently and within a team environment
• Ability to document forensic workflows based on sound industry practice
• Willingness to develop/train other team members to increase the group’s overall knowledge base and cultivate secondary resources for large collection events
• Strong troubleshooting skills with the ability to solve complex problems on the fly

• Understanding of the electronic discovery reference model (EDRM)
• Possess at least one industry‑standard certification (EnCE, CCE, CCFE, GCFE, GCFA, CCO, CCPA, CCME, etc.)
• General knowledge of litigation support applications (e.g., Relativity, Concordance, Nuix, LAW Pre Discovery, etc.)
• Experience working with structured data exported from various platforms, including analysis, custom scripting, and data manipulation to develop reports for client use
• Understanding of (Robo/Rich) copy tools, BAT (Power Shell) scripting, and Active Directory
• Experience with scripting, programming/coding, and database languages (SQL, VB, HTML, Access)

• Health, Dental, and Vision
• Life Insurance
• 401(k)
• Flexible Spending Account (Health, Dependent Care, and Commuter)
• Paid Time Off and Observance of State/Federal Holidays

Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Email: