Forensic Analyst

KLDiscovery, Inc.; India; Hybrid; INR 600,000 - 900,000; Full time

Job summary

KLDiscovery, Inc. in India is seeking an APAC Forensic Analyst to support cloud data collections from Microsoft 365 and Google Workspace, and to generate mobile device report exports from tools like Cellebrite and Magnet AXIOM.

You will maintain chain-of-custody documentation, logs, and case records, with travel within India for onsite data collection when needed, and handle Tier 1–2 tickets within SLA during weekend coverage.

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 1–3 years in digital forensics, IT operations, a helpdesk or ticketing environment, or similar technical role.
• Exposure to forensic tools is a plus; training is provided.
• Strong written English for documentation and ticket notes.
• Fluent English for daily collaboration with US/UK/APAC colleagues.

Responsibilities

• Perform collections and evidence handling per SOPs for cloud data sources (e.g., MS 365, Google Workspace).
• Generate mobile device report exports from forensic tool outputs.
• Maintain chain of custody docs and evidence handling logs.
• Travel within India for onsite data collection or media handover as required.
• Triage tickets, route requests, and perform Tier 1/2 actions within SLA.
• Monitor collections and escalation channels; notify on-duty manager as needed.
• Carry out scheduled and priority collections during weekend coverage.
• Escalate client-facing or legally sensitive issues to US team with clear handoffs.
• Participate in learning, certification milestones, and knowledge base maintenance.

Skills

Digital forensics

IT operations

Helpdesk

Scripting (optional)

English communication

Education

Bachelor's degree in CS/IT/cybersecurity or related field

Tools

Cellebrite

Magnet AXIOM

EnCase

FTK

Oxygen Forensics

X-Ways

Job description

What You'll Be Doing

Collections and Evidence Handling Process cloud data collections from Microsoft 365, Google Workspace, and similar sources following KLD Standard Operating Procedures.

Generate mobile device report exports from forensic tool outputs (Cellebrite, Oxygen Forensics, Magnet AXIOM, or equivalent).

Maintain chain of custody documentation and evidence handling logs to the KLD standard, and keep case records and ticket notes complete and current.

Travel within India for onsite data collection or evidence and media handover when a matter requires it.

Ticket Triage and Weekend Coverage Triage, tag, and route incoming forensics tickets in KLD's work management system, and claim and action Tier 1 and Tier 2 requests within SLA, with quality control requests taking priority over new tickets of the same tier.

Monitor the collections and escalation channels during your shift, and alert the on-duty Weekend Coverage Manager to priority requests.

Execute time-dependent, scheduled, and prioritized cloud and remote collections during weekend coverage windows.

Escalate anything client-facing, legally sensitive, or outside a defined SOP to the US team, and provide clear handoff notes at the end of every shift so service continues without interruption.

Learning, Certification, and Growth Complete structured training, shadowing, and certification milestones set by the US team, and work independently on each ticket type once certified.

Contribute to and maintain the internal knowledge base and SOP documentation as you learn.

Build toward standalone coverage of routine ticket types and, over time, broader collection and analysis work as trust and skills grow.

Lead with the four values. Client is Always in the Room. Own the Outcome. Better Every Day. Deliver Results Together.

What You Should Already Have

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field, or equivalent practical experience.
• 1 to 3 years in digital forensics, IT operations, a helpdesk or ticketing environment, or a similar structured technical role.
• Strong aptitude and attention to detail can substitute for direct forensics experience.
• Exposure to forensic tools (Cellebrite, Magnet AXIOM, EnCase, FTK, Oxygen Forensics, X-Ways, or similar) is a plus, not a requirement. Training is provided.
• Basic scripting (Python, PowerShell, or Bash) is a plus, not a requirement.
• Strong written English for documentation and ticket notes.
• Fluent spoken English for daily work with US, UK, and APAC colleagues.
• Client-facing communication is required at the start.
• Comfortable with a sustained US-aligned night schedule that includes Saturday and Sunday, and able to work independently once certified while following escalation protocols.
• Able and willing to travel within India for onsite collection or media handover as required.
• For the typical APAC Forensic Analyst role, expect 1-2 international trips per year (generally onsite), so a valid passport is recommended.

Preferred, not required

• prior experience with a US-based employer, a background in legal, banking, IT infrastructure, IT consulting, or programming, or study or work experience outside India.

Work Environment Hours

US Central business hours, roughly 7:30 PM to 3:30 AM IST, so you overlap live with your US trainers and the US team.

Schedule

During the first three to six months, Monday to Friday.

Once certified on your assigned ticket types, a five-day week that includes Saturday and Sunday (Thursday to Monday or Friday to Tuesday), with two consecutive weekdays off.

Transitions are staggered so you move with support, not all at once.

Weekend coverage: the weekend is defined as Friday 5 PM to Sunday 5 PM Central.

You are the dedicated forensics coverage in that window for routine and priority ticket types, with the US Weekend Coverage Manager on call for escalations.

Hybrid / Remote Options

Hybrid from Chennai or fully remote from a major Indian city, with company-provided equipment, VPN, high-speed stable/reliable internet and too