Computer Forensics Examiner

Location: Remote
Duration: 1–2 Weeks with potential extension

Position Overview

We are seeking an experienced Computer Forensics Examiner to conduct detailed forensic examinations of computers, servers, removable media, and other digital devices. The role will focus on digital evidence acquisition, preservation, recovery, and analysis to support cybersecurity, investigative, legal, and compliance activities.

The ideal candidate will have strong hands-on expertise with industry-standard forensic tools and experience conducting defensible examinations across Windows, Linux, and macOS environments.

Key Responsibilities

• Conduct forensic examinations of:
  • Desktop and laptop computers
  • Servers
  • Removable media
  • Mobile and other digital devices
• Acquire and preserve digital evidence using accepted forensic methodologies.
• Create and analyze forensic images of digital devices and storage media.
• Recover deleted, hidden, and encrypted data where technically feasible.
• Analyze file systems and digital artifacts.
• Examine:
  • Browser history and artifacts
  • Email data
  • Chat and messaging artifacts
  • Application data
  • User activity
  • System artifacts
• Perform forensic analysis across Windows, Linux, and macOS environments.
• Maintain appropriate evidence-handling and chain-of-custody procedures.
• Identify and document relevant findings and digital evidence.
• Prepare clear, detailed, and defensible forensic reports.
• Present technical findings to investigators, legal teams, management, and other stakeholders.
• Support incident response and broader digital investigation activities when required.

Key Technical Skills

Forensic Tools

• EnCase
• FTK
• Autopsy
• Magnet AXIOM
• X-Ways Forensics
• Cellebrite

Forensic Expertise

• Windows forensics
• Linux forensics
• macOS forensics
• File system analysis
• Disk and forensic image analysis
• Deleted and hidden data recovery
• Browser forensics
• Email and chat forensics
• Application artifact analysis
• Evidence preservation and handling
• Chain of custody
• Incident response

Required Qualifications

• Proven experience as a Computer Forensics Examiner, Digital Forensics Analyst, or similar role.
• Strong hands-on experience conducting forensic examinations of computers and digital devices.
• Experience with forensic acquisition, imaging, preservation, and analysis.
• Strong knowledge of Windows, Linux, and/or macOS forensic artifacts.
• Experience recovering and analyzing deleted, hidden, and other potentially obscured data.
• Proficiency with multiple industry-standard forensic tools.
• Understanding of digital evidence handling and chain-of-custody requirements.
• Ability to produce technically accurate and defensible forensic reports.
• Strong analytical, investigative, and documentation skills.
• Ability to communicate complex technical findings clearly to technical and non-technical stakeholders.
• Ability to work independently in a remote environment.