What you'll do...
Position: Principal, Forensics Engineer
Job Location: 811 Excellence Dr, Bentonville, AR 72716
Duties: Build, maintain and enhance effective internal and external partnerships; clearly draft valuable information and seek input. Influence technical outcomes and assist in communicating shared goals with diverse groups and parties by linking their interests to that of business. Identify and address additional partner technical needs and educate them on value creation. Communicate with other individuals or teams to solve shared business problems cooperatively. Consults regularly with leaders of business unit(s), serve to advise on business strategy decisions. Bring ideas and technical solutions proactively to business partners and stakeholders. Draft junior-level countermeasures to handle a variety of information risks. Follows guidelines for information assurance in an assigned department while working under supervisor's guidance. Tests effectiveness of information assurance activities within an assigned department. Selects information assurance tools for an assigned department's needs. Performs basic steps in safeguarding of information. Participates in developing back-up, recovery, and archival practices and procedures. Assists in installation, configuration, and support of information management software. Follows organizational guidelines and policies on information management. Analyzes issues and requirements for management of information resources. Create roadmaps for compliance and ensures adherence in order to achieve lab accreditation. Ensures prerequisites for lab accreditation are in order. Conducts cost-benefit analysis for implementing a lab certification program. Develops and enhances internal or external certification programs. Manages internal and external surveys and evaluations for lab certification programs. Controls budgets for lab certification programs and ensures budgets remain within specified guidelines. Consults on various lab certification programs for internal and external clients. Evaluate performance, cost-effectiveness, and efficiency of computer forensics practices and tools and makes improvements as needed. Optimizes computer forensics processes, tools, and standards to increase speed and reliability of responses. Collaborates with other digital technical teams to identify sources and possible causes of security incidents or violations. Reviews investigative cases and documents. Assesses costs and benefits of various digital forensics tools. Predicts risks in diverse digital forensics tools and prepares contingency plans. Develop standard processes to maximize efficiency and effectiveness of data extraction process. Understand legal perspectives when researching ESI (for example, hard drives, systems, databases, file sharing platforms, messaging platforms, social media, text messages, document collaboration and file-sharing platforms, third-party archives). Understand assigned roles in eDiscovery processes in order to collaborate with lawyers, paralegals, and legal analysts. Participates in discussions with team members in order to break down legal issues into understandable concepts. Creates procedures that help guide evaluation of large-scale eDiscovery requests (for example, legal holds on user mailboxes, mailbox content search criteria). Anticipates and monitors potential impacts of process changes (for example, legal holds, chain of custody). Conduct training on legal documentation delivery specifications and processes. Establishes and references best practices for existing and planned technology tools and delivery vehicles for proper documentation. Analysis, design, and data collation for large documentation initiatives. Harvesting Electronically Stored Information (ESI): Coordinate and monitors various steps involved in records retention programs. Ensures that all exceptions and unusual circumstances are properly captured and reviewed. Enhances processes and procedures used in organization's records retention program.
Minimum education and experience required: PhD degree or the equivalent in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related field; OR Bachelor's degree or the equivalent in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related field plus 5 years of experience in forensics or related experience.
Skills required: Must have experience with: Recovering deleted data and conducting comprehensive forensic investigations; Leveraging expertise with ASCII, ambient data, and audit trails to streamline investigations; Performing analysis of recovered data to extract key evidence and insights; Documenting forensics findings in detailed and accurate reports, including LaTeX; Conducting database forensics to uncover hidden digital footprints using Realm and DB Browser for SQLite; Performing device acquisition following best practices (Cellebrite, Magnet, and Autopsy); Formulating Digital fingerprints; Evaluating the performance, cost-effectiveness, and efficiency of digital forensics practices and tools; Coaching team members on the use of techniques and toolsets to detect and providing digital evidence of complex information security investigations; and Incorporating best practices, like NIST and SWDGE, into digital forensics methodologies. Employer will accept any amount of graduate coursework, graduate research experience or experience with the required skills.
Rate of pay: $110,000.00 - 220,000.00/year
