Digital Forensic Lead

Sisainfosec; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Sisainfosec is seeking a highly skilled Digital Forensics Consultant to lead investigations in complex digital incidents. You will manage the full lifecycle from data collection and preservation to analysis, documentation, and presenting findings to clients and legal teams.

The role requires deep knowledge of forensic tools (EnCase, FTK, X-Ways, Cellebrite, Autopsy), multi-OS support, data recovery, and malware analysis, with strong communication and analytical skills.

Qualifications

• Bachelor's in Digital Forensics, CS, Cybersecurity or related STEM field.
• 6+ years in digital forensics or incident response.
• Proficient with EnCase, FTK, X-Ways, Cellebrite, Autopsy.
• Strong knowledge of Windows/macOS/Linux/iOS/Android, file systems, networks.
• Familiarity with Python or Bash scripting is beneficial.
• Excellent written and verbal communication.
• Ethical handling of sensitive information.

Responsibilities

• Lead digital investigations from data collection to reporting.
• Preserve evidence using chain-of-custody protocols.
• Perform forensic analysis to reconstruct events and data.
• Analyze malware and recover data from damaged storage.
• Document findings in clear reports for technical and legal audiences.
• Engage with clients, law enforcement, and legal counsel.
• Provide expert testimony in court proceedings.
• Improve forensic methodologies and SOPs.

Skills

Analytical thinking

Problem solving

Excellent communication

Attention to detail

Organizational skills

Ethical standards

Independent worker

multitasking

Education

Bachelor's degree in Digital Forensics

Master's degree preferred

Tools

EnCase

FTK

X-Ways

Cellebrite

Autopsy

Job description

We are seeking a highly skilled and meticulous Digital Forensics Consultant to join our team. The ideal candidate will apply advanced technical knowledge and investigative techniques to uncover the facts behind complex digital incidents. This role involves managing the full lifecycle of digital investigations, from initial data collection and preservation to analysis, documentation, and presentation of findings to clients and legal teams.

Key Responsibilities

• Evidence Collection and Preservation: Identify, collect, and preserve digital evidence from various sources, including laptops, desktops, servers, mobile devices, cloud environments, and network logs, ensuring strict adherence to chain‑of‑custody protocols.
• Forensic Analysis: Conduct in‑depth forensic analysis to reconstruct digital events, identify the tactics used by attackers, recover deleted or hidden data, and analyze file metadata and network traffic.
• Malware Analysis and Data Recovery: Utilize specialized software to perform malware triage and analysis, and recover data from damaged, corrupted, or encrypted storage devices.
• Documentation and Reporting: Prepare detailed, high‑quality technical reports and investigative briefs that clearly explain findings in a manner that can be understood by both technical and non‑technical audiences and withstand legal scrutiny.
• Client Consultation and Presentation: Engage with internal and external clients, law enforcement, and legal counsel to understand case requirements, manage expectations, and present investigative findings.
• Expert Testimony: Serve as an expert witness in legal and court proceedings, providing credible testimony regarding forensic procedures and findings.
• Process Improvement: Develop and refine forensic methodologies, standard operating procedures (SOPs), and recommend enhanced cybersecurity measures to prevent future incidents.
• Continuous Learning: Stay up‑to‑date with the latest forensic tools, techniques, and evolving cybercrime methods and technologies.

Required Qualifications and Skills

• Education: Bachelor's degree in Digital Forensics, Computer Science, Cybersecurity, or a related STEM field; Master's degree preferred.
• Experience: (e.g., 6+) years of experience in digital forensic investigations or incident response.
• Technical Expertise:
• Proficiency with industry‑standard forensic tools and software (e.g., EnCase, FTK, X‑Ways, Cellebrite, Autopsy).
• Strong understanding of various operating systems (Windows, macOS, Linux, iOS, Android), file systems, and network architectures.
• Knowledge of data recovery techniques, encryption methods, and malware analysis.
• Familiarity with programming or scripting languages (e.g., Python, Bash) is beneficial.
• Soft Skills:
• Exceptional analytical and problem‑solving abilities.
• Excellent written and verbal communication skills, with the ability to convey complex technical information clearly.
• Meticulous attention to detail and strong organizational skills.
• High ethical standards and the ability to handle highly sensitive and confidential information with discretion.
• Ability to work independently, manage multiple tasks, and adapt to changing priorities under pressure.

Preferred Certifications (not mandatory)

• GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Forensic Examiner (GCFE)
• Certified Computer Examiner (CCE) or Certified Forensic Computer Examiner (CFCE)
• Computer Hacking Forensic Investigator (CHFI)