Digital Forensic Lab Technician

Responsibilities and duties:

• Work with IT and business units to track devices and evidence belonging to individuals on legal hold
• Gather, decrypt, and forensically image laptops, desktops, and other devicesPlace and release legal preservation holds in Exterro
• Collect data from wikis, M365, and other shared data sources
• Perform searches and exports in Microsoft Purview
• Document and track forensic images and other collected data according to industry best practices
• Oversee and execute legal hold process from initiation to release
• Maintain forensics lab hardware and software
• Process and load data to document review databases for internal review teams
• Provide proactive and substantive status updates to case teams, project managers, technicians, and others
• Ensure accuracy and completeness of all project deliverables, including productions, reports, and other deliverables
• Other forensics, collections, and e-discovery tasks as necessary

Requirements:

• Cross-platform operating system (Win/Mac) knowledge
• General knowledge of computer hardware
• Familiarity with document review tools such as Relativity
• Understanding of Electronic Discovery Reference Model (EDRM) and associated workflows
• Strong attention to detail
• Ability to analyze and solve problems
• Ability to communicate clearly and interface diplomatically with all personnel
• Ability to function independently with minimal supervision
• Ability to follow instructions, complete assignments in a timely manner, and work cohesively within a team environment
• Must be well organized with the ability to multitask and manage competing priorities in a fast-paced environment

Desired Skills

• Knowledge of forensic imaging software (e.g., FTK Imager, Cellebrite, or other)
• Knowledge of forensic imaging hardware (e.g., duplicators, write-blockers, adapters)
• Knowledge of evidence preservation procedures and legal hold process
• Familiarity with evidence tracking software
• Working knowledge of endpoint encryption technologies
• CompTIA A+ certification, computer science degree, or equivalent
• PowerShell proficiency
• General understanding of e-discovery best practices to mitigate costs and risk
• Familiarity with document processing tools and workflows
• Proficiency with creating and vetting Boolean searches for use in data search and culling
• Knowledge of document review and production workflows and best practices
• Ability to provide document review database support to internal document review teams