Cyber Forensics Analyst

About the role

We are looking for a Cyber Forensics Analyst to lead defensible data preservation and collection activities that support legal, compliance, and investigative initiatives. The role focuses on executing end‑to‑end eDiscovery workflows across endpoints, servers, and cloud environments while maintaining strict chain‑of‑custody standards.

Key responsibilities

• Execute data preservation and collection across endpoints, servers, cloud platforms, and enterprise systems.
• Support the full eDiscovery lifecycle: identification, preservation, collection, processing, and handoff for review.
• Perform targeted and bulk collections using EnCase, Nuix, and Microsoft Purview eDiscovery tools.
• Manage legal hold implementations and develop data preservation strategies.
• Conduct data triage, validation, and ensure completeness and defensibility of evidence.
• Collaborate with Legal, Compliance, HR, and Security teams on investigations and litigation matters.
• Document chain of custody and maintain detailed evidence handling records.
• Provide technical expertise during audits, regulatory inquiries, and internal investigations.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience.
• 3+ years of experience in digital forensics, eDiscovery, or a closely related field.
• Hands‑on experience with at least one of the following tools: EnCase, Nuix (preferably Workstation), or Microsoft Purview eDiscovery.
• Proven ability to perform defensible data preservation and collection activities.
• Strong understanding of the eDiscovery lifecycle and related legal/regulatory requirements.

Required skills

• EnCase (any product suite)
• Nuix Workstation or equivalent Nuix product
• Microsoft Purview eDiscovery
• Forensic acquisition and imaging techniques
• Knowledge of file systems, operating systems, and data structures
• Experience with cloud data sources such as Microsoft 365, Exchange Online, OneDrive, and Teams