Defensible eDiscovery Forensic Specialist (Onsite)

Charles Schwab Corporation; Westlake (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Charles Schwab Corporation is seeking a Forensic eDiscovery Collection Specialist to conduct defensible preservation and collection of electronically stored information across endpoints, cloud, email, and collaboration systems. You will collaborate with legal and technical teams to scope collection efforts and maintain evidentiary integrity.

The role emphasizes detailed documentation, quality controls, and secure data transfer to RelativityOne and other downstream workflows, with a focus on

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field. Equivalent relevant work experience may be considered.
• Minimum two years of experience in eDiscovery, digital forensics, forensic technology, DFIR, information security investigations, enterprise data acquisition, or a related field.
• Strong understanding of eDiscovery processes, including the EDRM, legal holds, retention, records management, and relevant data privacy and protection requirements.
• Hands-on experience conducting defensible collections across endpoint, mobile, cloud, and enterprise data sources using commercially recognized forensic and collection tools such as Relativity, Exterro, WinSCP, Cellebrite, and EnCase.
• Knowledge of chain of custody, evidence handling, hashing, forensic imaging, secure transfer, and collection documentation standards.
• Excellent analytical and problem-solving skills, with strong attention to detail and a commitment to data integrity and quality control.
• Ability to manage multiple projects simultaneously, scope work with legal and technical teams, and meet deadlines.
• Excellent written, verbal, and technical-documentation skills, with the ability to communicate effectively with technical and non-technical stakeholders.
• High degree of professionalism and discretion when handling confidential and legally sensitive information.

Responsibilities

• Conduct thorough and defensible preservation and collection of ESI from enterprise systems, email, cloud and collaboration platforms, network locations, and other approved sources.
• Collaborate with business stakeholders and system owners to scope collection efforts and resolve access, retention, and technical-source questions.
• Use approved tools and procedures to perform forensic imaging, targeted collection, hashing, export, and validation while maintaining chain of custody and evidentiary integrity.
• Maintain detailed evidence inventories, chain-of-custody records, collection notes, scope decisions, methodologies, tools used, validation data, exceptions, and issues encountered.
• Preserve the integrity, security, and confidentiality of collected information and ensure data is protected from alteration, loss, or corruption.
• Conduct quality-control checks, validation, and reconciliation to confirm the completeness and accuracy of collected data.
• Securely stage, encrypt, transfer, and reconcile collected data for RelativityOne, downstream eDiscovery workflows, or approved service providers.
• Develop, document, and continuously improve collection methodologies, technical procedures, quality controls, source documentation, and job aids to support repeatability, defensibility, and auditability.
• Stay informed about eDiscovery and digital-forensics technologies and best practices, and apply relevant developments to improve collection processes.
• Support declarations, depositions, or testimony regarding collection methods and validity, as needed, and escal collection limitations, preservation risks, source gaps, and unexpected findings.

Skills

Analytical thinking

Attention to detail

Communication with stakeholders

Multi-project management

Problem solving

Data integrity

Education

Bachelor's degree in IT/CS or related field

Tools

Relativity

Exterro

WinSCP

Cellebrite

EnCase

Job description

Charles Schwab Corporation is seeking a Forensic eDiscovery Collection Specialist to conduct defensible preservation and collection of electronically stored information across endpoints, cloud, email, and collaboration systems. You will collaborate with legal and technical teams to scope collection efforts and maintain evidentiary integrity.

The role emphasizes detailed documentation, quality controls, and secure data transfer to RelativityOne and other downstream workflows, with a focus on