Senior Digital Forensic Investigator
Core
Operational manager of a forensic laboratory leading end-to-end digital investigations, lab management, and AI-augmented workflow development for enterprise security and legal support.
Role type
Senior Digital Forensic Investigator (Lab Manager)
Builds
Defensible forensic evidence, executive investigation reports, and AI-augmented investigative workflows
Domain
Cybersecurity, Digital Forensics, Legal/HR Investigations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Digital forensics investigation, Lab operations management, Chain of custody protocols, Forensic imaging and acquisition, EDR telemetry analysis, Cloud/SaaS forensics, eDiscovery processes, AI tooling development, Python/PowerShell scripting, Legal report writing
Preferred skills
Incident response leadership, Testimony in legal proceedings, Splunk log analysis, Zscaler proxy log analysis, Corporate Legal/HR support experience
Technologies
Magnet AXIOM Cyber, Cellebrite Endpoint Collector, Cellebrite Endpoint Investigator, Sumuri Recon, CrowdStrike Falcon, Google SecOps/Chronicle, Splunk, Azure AD, Okta, Zscaler, JAMF, Intune, SCCM, Anthropic Claude, Microsoft Copilot
Responsibilities
Lead and execute end-to-end digital forensic investigations across endpoint, cloud, email, identity, and SaaS environments; Manage the Santa Clara Forensic Laboratory including evidence intake, storage, and processing workflows; Train and mentor team members on evidence handling and forensic standards; Design and build AI-assisted investigative workflows using LLMs; Produce executive-quality investigation reports for legal and HR proceedings; Support SIRT on high-severity security incidents
Seniority
Senior, hands-on IC with management responsibilities