Accessibility Links
  • Job reference: RMS0170308

IT Forensics Investigator

  • Sector: ICT
  • Location: California - Other
  • Job type: Contract
  • Date posted: 09/08/2016
This vacancy has now been filled.

Click one of the boxes below to view similar jobs or send us your CV.
Send jobs like this to my email    What's this?
The Company:
A major oil & gas operator

The Role:
Contractor will provide IT Forensic functions as it relates to the service lines that IMF provides which includes but not limited to internal investigations, eDiscovery cases and special project initiatives.
Project Services:
Data capture
. Visit to client site(s) as directed by Company
. Collection of data using forensic technology methods in accordance with evidence handling procedures, including collection of hard copy and electronic documents
. Maintenance of an audit trail (i.e., chain of custody) and/or evidence of integrity

Data cleansing
. Receive data from Company and use approved tools and methods (e.g., EnCase Enterprise) with the assistance of Company resources to analyze data based on keywords
. Liaison with Company field IT resources as needed

Data exam and evaluation
. Examination of data obtained via forensic data capture process
. Identification of data, images and/or activity which may be the target of an internal investigation
. Detailed evaluation of the data and any evidence of activity in order to analyze the full circumstances and implications of the event
. Process mapping of events or transactions in order to understand any remedy that may be required to restore systems integrity
. Support for process design to prevent and detect reoccurrence
. Control recommendations and support for remediation activities
. Provision of threat intelligence and key learning points to support pro-active profiling and scenario modeling
. Provide technical and evidential support for disciplinary interviews, dispute resolution, legal action and recovery activity

. Summarize information obtained in interviews and from hard copy documents
. Keyword searches including using target words or phrases advised by Company
. Searches of unallocated space to identify previous activity
. Searches of file slack space where PC type technologies are employed
. File MAC times (Modified, Accessed, and Create dates and times) as evidence of access and event sequences
. File type vs. file header information
. A review of e-mail communications; including web mail and Internet Instant Messaging programs
. Where applicable, internet browsing history and a list of password protected and password cracked files
. Review for indicators of massive deletion of files or data destruction (disk wipe, etc.)
. Generate reports which detail the approach and an audit trail which documents actions taken in order to support the integrity of the internal investigation process

Essential Skills / Qualifications:
1. Experience with EnCase Enterprise (3-5 years’ experience)
2. Digital Forensic Investigation Experience (3-5 years’ experience)
3. Expert Witness Testimony Experience
Similar jobs
Isaiah Assang
Physical Design Engineer Location California Duration permanent The Role: * Develop and own physical design implementation...
Isaiah Assang
System Validation Engineer (Remote) Location California Duration permanent The Role: * Writing CPP System Level tests targeting the...
Cyber Security Consultant Location Qatar Duration 6 months The Role: Customizing and providing Functional Design...

Back to Top

By clicking "Save" you consent to
receiving matching jobs based on the
job/page you are viewing by email from
Fircroft, as detailed in our privacy policy
Fircroft would like to keep you up to date with our current vacancies and latest company updates via email. Occasionally Fircrofts marketing may contain 3rd party or affiliate information, however we will not share your personal data with any 3rd parties without your consent. From time to time, we might contact you to get your views on the service you have received. To help you get the best out of Fircroft, we may personalise them based on your location and how you use
Fircroft would like to keep you up to date with the latest company updates and vacancies via SMS / Text messages
Your consent options above means that Fircroft cannot contact you about any new or alternative career vacancies. If you want Fircroft to only contact you about the role(s) you have applied for please continue, however if you would like to be considered for other positions please allow us to contact you by changing one or more of the above consent.