Lead Cybersecurity - eDiscovery Collection & Preservation Specialist

Job Description About AT&T

AT&T is a leading global telecommunications company dedicated to connecting people and businesses through innovative technology and reliable networks. With a rich history spanning over a century, AT&T continues to shape the future of communication by delivering innovative solutions in wireless, broadband, entertainment, and digital services.

At AT&T, we believe in empowering our employees to innovate, grow, and make a meaningful impact. Join us and be part of a team that is transforming the way the world communicates, works, and plays.

The Digital Forensics and eDiscovery team at AT&T is a specialized group of experts dedicated to supporting the company’s legal and compliance objectives through meticulous digital evidence collection, preservation, and analysis. This team ensures digital investigations and eDiscovery support meet the highest standards of integrity, accuracy, and legal defensibility.

Working at the intersection of technology and law, the team collaborates closely within-house and outside legal counsel, compliance officers, and external partners to provide critical forensic insights for litigation, regulatory inquiries, and internal investigations. Their work includes recovering and analyzing electronic data in a manner that supports the chain of custody requirements and meets strict evidentiary standards.

The Digital Forensics and eDiscovery team at AT&T combines deep technical expertise with a comprehensive understanding of legal processes, enabling the company to navigate complex digital investigations and litigation support with confidence and uphold compliance in an evolving regulatory and legal landscape.

We are seeking a highly skilled eDiscovery Data Collection and Preservation expert to aid our internal data identification, preservation, and collection efforts. Operating within our Global Cybersecurity team, you will be a subject matter expert for Microsoft Purview eDiscovery (Premium). You will ensure that all electronically stored information (ESI) is handled in a legally defensible and efficient manner across the enterprise.

• Case Management: Lead the end-to-end eDiscovery workflow in Microsoft Purview, including creating cases, managing custodians, executing complex KQL search queries, consolidating data from various data sources, culling data, and communicating status.
• Defensible Collection: Execute in-place collections for electronically stored information including but not limited to M365 apps (Exchange, SharePoint, One Drive, Microsoft Teams), mobile devices, personal computers, ensuring data integrity and maintaining meticulous chain-of-custody documentation.
• Legal Hold Administration: Manage and monitor automated legal holds to ensure “preservation in place” is active for all relevant custodians.
• Advanced Data Processing: Utilize Premium features such as Conversation Threading for Teams and Email. Familiarity with handling Cloud Attachments (linking shared documents to their original versions) is crucial. Troubleshoot errors and handle exceptions.
• Data Reduction: Document indexing, Boolean searching, culling, exposure to TAR and AI for relevance review, and other methods utilized to reduce the volume of non-relevant data.
• Process Optimization: Develop and maintain Standard Operating Procedures (SOPs) and documentation for eDiscovery collections that align with current 2026 legal standards and internal compliance policies.
• Cross-Functional Collaboration: Partner with in-house Legal, IT, Outside Counsel and other groups to troubleshoot collection issues and manage outbound data transfers to external review platforms (e.g., Relativity) and develop eDiscovery solutions as technology environment changes.

Experience: 5+ years of eDiscovery experience, with at least 3 years of hands‑on expertise in Microsoft Purview (Premium/Advanced eDiscovery), forensic investigation/collection software, and/or culling software.

• Technical Proficiency: Mastery of Microsoft 365 environments, forensic investigation/collection and culling software tools.
• Scripting and Programming: Knowledge of Power…