Senior Disk Artifact Examination Specialist

Coletivo 45+; Abu Dhabi; Remote; AED 350.000 - 650.000; Vollzeit

Benefits dieser Stelle

100% remote

Competitive compensation

Complex investigations

Professional development

International collaboration

Zusammenfassung

Coletivo 45+ is seeking a Senior Disk Artifact Examination Specialist to conduct advanced digital forensic examinations of storage media, disk images, and file systems. You will identify, preserve, analyze, and interpret digital evidence to support cybersecurity investigations and regulatory matters.

The successful candidate will lead examinations, recover deleted data, analyze file systems (NTFS, APFS, ext4, etc.), and document evidence with robust reporting.

Qualifikationen

• Bachelor's or master's degree in Digital Forensics, Cybersecurity, Computer Science, Information Technology, or related discipline.
• Significant professional experience in digital forensic examination, disk analysis, incident response, or forensic investigations.
• Knowledge of deleted file recovery, file carving, metadata analysis, and forensic timeline reconstruction.

Aufgaben

• Lead forensic examinations of disk images, storage media, file systems, and digital storage artifacts.
• Analyze forensic images from hard drives, SSDs, removable storage, and virtual disks.
• Examine file system structures (NTFS, FAT, exFAT, APFS, ext4, etc.).
• Identify, recover, and analyze deleted files, hidden data, and residual artifacts.
• Examine metadata, timestamps, file access records, and directory structures.
• Analyze OS artifacts, browser histories, event logs, and user activity records.
• Conduct timeline analysis to reconstruct activities and events.
• Identify indicators of data deletion, manipulation, and unauthorized access.
• Examine partitions, boot records, volume structures, and file allocation information.
• Use forensic tools such as EnCase, FTK, Autopsy, X-Ways Forensics, Magnet AXIOM.
• Verify image integrity using cryptographic hashing and evidence validation procedures.
• Maintain chain-of-custody documentation and proper evidence handling standards.
• Develop examination methodologies, procedures, and QA controls.
• Collaborate with incident response teams, legal, and compliance professionals.
• Prepare detailed forensic reports explaining methods, findings, limitations, and evidence.
• Review results for accuracy, reproducibility, and evidential reliability.
• Provide technical guidance and mentorship to junior analysts.

Kenntnisse

Forensic analysis

Disk imaging

Evidence handling

Scripting (Python/PowerShell)

Timeline reconstruction

Report writing

Ausbildung

Bachelor's or Master's in Digital Forensics / Cybersecurity / CS

Tools

EnCase

FTK

Autopsy

X-Ways Forensics

Magnet AXIOM

Jobbeschreibung

Senior Disk Artifact Examination Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking a Senior Disk Artifact Examination Specialist to conduct advanced digital forensic examinations of storage media, disk images, file systems, and associated digital artifacts. The role focuses on identifying, preserving, analyzing, and interpreting digital evidence to support cybersecurity investigations, incident response, internal inquiries, and legal or regulatory matters.

The successful candidate will have strong expertise in forensic imaging, file system analysis, deleted data recovery, artifact interpretation, and evidence documentation. This is a fully remote technical position involving secure examination of authorized forensic images and digital evidence through approved environments.

Key Responsibilities

• Lead forensic examinations of disk images, storage media, file systems, and digital storage artifacts.
• Analyze forensic images from hard drives, solid-state drives, removable storage devices, and virtual disks.
• Examine file system structures, including NTFS, FAT, exFAT, APFS, ext4, and other relevant formats.
• Identify, recover, and analyze deleted files, hidden data, file fragments, and residual digital artifacts.
• Examine metadata, timestamps, file access records, directory structures, and system-generated artifacts.
• Analyze operating system artifacts, application traces, browser histories, event logs, and user activity records.
• Conduct timeline analysis to reconstruct relevant digital activities and establish sequences of events.
• Identify indicators of data deletion, manipulation, unauthorized access, file concealment, and suspicious storage activity.
• Apply forensic techniques to examine partitions, boot records, volume structures, and file allocation information.
• Use forensic tools such as EnCase, FTK, Autopsy, X-Ways Forensics, Magnet AXIOM, or comparable platforms.
• Verify forensic image integrity using cryptographic hashing and appropriate evidence validation procedures.
• Maintain chain-of-custody documentation and ensure evidence handling follows established forensic standards.
• Develop examination methodologies, technical procedures, and quality assurance controls.
• Collaborate with incident response teams, cybersecurity investigators, legal professionals, and compliance specialists.
• Prepare detailed forensic reports explaining examination methods, findings, limitations, and supporting evidence.
• Review examination results for technical accuracy, reproducibility, and evidential reliability.
• Provide technical guidance and mentorship to junior digital forensic analysts.

Qualifications and Experience

• Bachelor's or master's degree in Digital Forensics, Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Significant professional experience in digital forensic examination, disk analysis, incident response, or forensic investigations.
• Advanced understanding of storage technologies, disk structures, partitioning, and file system architecture.
• Practical experience examining forensic images and analyzing digital storage artifacts.
• Knowledge of deleted file recovery, file carving, metadata analysis, and forensic timeline reconstruction.
• Familiarity with Windows, Linux, and macOS operating system artifacts.
• Proficiency with forensic platforms such as EnCase, FTK, Autopsy, X-Ways Forensics, or Magnet AXIOM.
• Understanding of forensic imaging, cryptographic hashing, evidence preservation, and chain-of-custody requirements.
• Experience analyzing system logs, browser artifacts, application traces, and file access information.
• Knowledge of anti-forensic techniques, data concealment methods, and indicators of evidence tampering.
• Familiarity with scripting languages such as Python or PowerShell for forensic automation and artifact analysis.
• Understanding of digital evidence handling standards and accepted forensic examination methodologies.
• Strong analytical, investigative, and problem-solving capabilities.
• Excellent technical writing and evidence documentation skills.
• Ability to manage confidential forensic cases and work independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation aligned with experience and forensic expertise.
• Opportunities to contribute to complex digital investigations and cybersecurity initiatives.
• Professional development in digital forensic technologies, evidence analysis, and investigative methodologies.
• Collaboration with international teams across cybersecurity, incident response, legal, and compliance functions.