Prin Cybersecurity Specialist

Job Description

CAREERS THAT CHANGE LIVESProvides technical expertise and guidance in the identification, preservation, collection and analysis of digital evidence in various digital formats from computers, servers, mobile devices, and other electronic or online storage media. Presents recommendations and findings to internal and external customers including Legal, Compliance, HR, Outside Counsel, and Law Enforcement. Develops and maintains processes, procedures, and methodologies for collecting and analyzing digital evidence. Maintains strong working relationships with other corporate investigation team members, subject matter experts, 3rd party vendors, and outside law firms.A DAY IN THE LIFE

• Resolves investigation requests in an accurate, timely, and professional manner.
• Performs digital evidence gathering on computers, servers, mobile devices, and other electronic or online storage media.
• Analyzes digital evidence and prepares findings for use in formal decisions and litigation.
• Provides expertise for all aspects of digital evidence identification, preservation, and analysis.
• Performs stringent quality control checks on deliverables and is able to produce consistent results without defects.
• Leads meetings with attorneys and internal customers.
• Generates and maintains complete and accurate process and case related documentation.
• Maintains ongoing contact and communication with local business partners throughout the case lifecycle.
• Develops strong working relationships with local Legal, Compliance, HR, IT, and Business Unit leaders.
• Identifies new opportunities to demonstrate the value and expand the use of digital forensics.
• Collaborates with other investigative teams to improve processes and reduce investigation times.
• Maintains a strong working relationship with US-based Digital Forensics and Investigation (DFI) team members.
• Understands and strictly maintains the confidentiality of all matters involved.
• Supports a flexible schedule to cover urgent requests.
• Develops new methodologies and techniques for identifying, preserving, and analyzing forensic data.
• Maintains a strong working knowledge of processes, procedures, and methodologies for collecting and analyzing digital evidence.
• Logs incoming evidence shipments and maintains the local evidence repository consisting of forensic images, hard drives, mobile phones, and other data storage devices.
• Provides investigative support for cases outside China as needed.
• Provides limited support to Cyber Security Incident Response Team (CSIRT).

MUST HAVE (Minimum Qualifications)

• Bachelor s degree
• 7+ years of experience with a bachelor s degree or 5+ years of experience with an advanced degree

NICE TO HAVE (Preferred Qualifications)

• One or more of the following computer forensics or IT security certifications highly preferred:
  • CISSP
  • GCFA
  • GCFE
  • GASF
  • CFCE
• Ability to travel and be available for irregular work hours, sometimes with limited notice.
• 3+ years of prior investigative experience.
• Experienced in a wide variety of casework.
• Prior experience working for a US-based multi-national corporation.
• Ability to manage multiple cases and priorities in a fast-paced demanding environment.
• Mastery of multi-tasking between cases and procedural writing
• Strong knowledge of best practices in investigations, evidence collection, and chain of custody.
• Mastery of forensic examination procedures.
• Experience with standard digital forensics tools (X-Ways, AXIOM, FTK, Cellebrite, Oxygen, NUIX, etc).
• Experience with WeChat and other Chinese mobile app data collections.
• Knowledgeable in the use of command line tools
• Expertise with Microsoft, Macintosh, and Unix Operating Systems.
• Strong understanding of network and cloud computing environments.
• Strong technical understanding of WeChat and other Chinese mobile apps.
• Strong hardware and software troubleshooting skills.
• Broad knowledge of current trends affecting digital forensics, eDiscovery, and investigations in China.
• Understanding of data recovery techniques.
• Strong technical and analytical skills.
• Strong written and oral communication skills in English and Chinese.

Basic understanding of data privacy.,

Keyskills :
customer relationscomputer hardwaredatabase administrationidsmicrosoft accesssubject matter expertsstatements of work sow