Forensics Associate

Advisory Services Multiple Locations, Remote



The Forensics Associate will deliver hands-on client project work, provide support to more senior-level team members in investigation and expert witness projects, and help us evolve our growing practice through various continuous improvement initiatives.

Duties & Responsibilities
  • Perform forensic data acquisition / collection (performed onsite, in our offices, and remotely), in support of forensic investigations and electronic discovery matters. This will include a wide variety of data sources, such as endpoints, mobile devices, mail/archiving platforms, social media, enterprise collaboration platforms, etc.
  • Conduct detailed forensic analysis as part of investigative / expert witness engagements (e.g. spoliation of evidence, misappropriation of trade secrets, employee malfeasance, etc).
  • Ensure excellent client service and satisfaction on all Lighthouse engagements
  • Other duties as assigned.

What You'll Need:

  • Possess (or be willing to complete within one year of employment) one or more IT security or forensics industry certifications such as CISSP, EnCE, CCE, or similar 
  • Proficient in the use of EnCase or AccessData Forensic Toolkit or XWays or open-source forensic tools, as well as supplementary forensics tools such as Cellebrite, Blacklight, IEF, and so forth
  • Strong mastery of data collection, preservation, and chain of custody principles and procedures
  • An understanding of file systems, various computer hardware, and computer networking concepts
  • Strong Mac, Linux / UNIX, other operating systems experience is a plus
  • Programming , scripting, and/or database design experience is a plus
  • After hours and weekends work sometimes required
  • Ability to travel (expected 40-60%)