Monday, September 11, 2017

Digital Forensics Analyst (EnCase Certified Examiner (EnCE) | GIAC Certified Forensic Examiner (GCFE) | Digital Forensic) (#116025)

Position: Digital Forensics Analyst
Location: Milpitas, CA
Duration: Full time

Job Description:
Business Unit:
The Legal Compliance Organization (LCO) team headquartered in Milpitas, CA provides legal guidance to further KLA-Tencor’s strategic objectives and protect and preserve the legal, ethical and financial integrity and reputation of the Company. With specific expertise in the areas of corporate law, commercial law, employment law, and intellectual property; the LCO offers strategic legal counsel that is informed by a clear understanding of the company’s business objectives and expertise in the laws and regulations relevant to the business worldwide.

As a member of the Corporate Security Investigations department, the Digital Forensic Analysts combine their computer science background with their forensic skills to recover and preserve information from computers and storage devices. Analysts are responsible for assisting the Corporate Security Investigation and Legal teams to retrieve and preserve data/evidence in connection with crimes, policy violations, data holds and e-Discovery to answer who, what, when, why, and how.

Primary responsibilities include:
  • Manage daily Forensics Lab operations which includes proactive equipment maintenance, managing asset inventory, and optimizing performance of the forensic laboratory (forensic workstations, servers, Network Attached Storage (NAS), forensic hardware, peripherals and all investigative tools).
  • Identify purchasing needs, testing and evaluating new equipment.
  • Maintain chain of custody for digital evidence throughout its lifecycle (collection, creation, tracking, shipping, handling and eventual disposition). Maintain annual inventory to include regular metrics of forensic laboratory input, output, and resource allocation.
Tasks required (including but are not limited to):
  • Provide on-site forensic imaging (hard drive duplication and data integrity).
  • Identify, recover, preserve, and examine digital evidence using various forensic hardware and software (e.g., EnCase, FTK, open source software, etc.).
  • Detect, examine, and analyse allocated, deleted and recovered files, file fragments, password protected files and artifacts of interest.
  • Analyse various file formats and its data contents to identify information of interest
  • Perform searches based on criteria (keywords, strings, etc.) to identify data of interest.
  • Maintain awareness and follow laboratory evidence handling, evidence examination, laboratory safety, and laboratory security policy and procedures.
  • Apply and refine knowledge of data structures, operating systems, network protocols, and software applications to perform digital forensics investigative tasks.
  • Prepare accurate and comprehensive written reports of findings based on the analysis of multiple data sources and forensic examination findings.
  • Demonstrate proficiency on a routine basis by successfully completing quality assurance tests to validate procedures, hardware, and software.
In addition to the above responsibilities, at all times the following is applicable:
  • Adheres to industry best practices, methods and procedures, protocols, and chain of custody.
  • Maintain a high level of ethics, morals, confidentiality and integrity.
  • Independently propose process changes and improvements for consideration.
  • Continuously learn and implement new technologies and methods in digital forensics and forensic countermeasures.
  • Provide effective, professional communication with customers through all forms of communication including direct contact, voice, email, etc.
Desired skills:
  • Strong interpersonal skills
  • Self-sufficiency
  • Ability to calmly operate in high stress environment
  • Strong sense of urgency under tight deadlines
Preferred Qualifications:
EnCase Certified Examiner (EnCE), GIAC Certified Forensic Examiner (GCFE) or other digital forensic or investigation related certifications.

Minimum Qualifications:
Bachelor's Level Degree with at least 1 year of experience

Kindly send your resume to

KLA-Tencor is an Equal Opportunity Employer. Applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other characteristics protected by applicable law.