Cyber Forensics Analyst
GFT Technologies ·
- Experience
- 3+ years
A Cyber Forensics Analyst at GFT in Heredia, Costa Rica executes defensible data preservation and eDiscovery collections from endpoints, servers, and cloud sources to support legal, compliance, and investigative matters. Core tools are EnCase, Nuix Workstation, and Microsoft Purview eDiscovery, with strict chain-of-custody documentation.
Job description_
About the Role_
We are seeking a Cyber Forensics Analyst with a strong emphasis on data preservation and defensible collection activities to support legal, compliance, and investigative matters. This role is primarily focused on executing and supporting eDiscovery workflows, with a core responsibility around identifying, preserving, and collecting data from a variety of enterprise sources including endpoints, servers, and cloud environments. Candidates should bring hands-on experience with industry-standard tools such as EnCase, Nuix, and Microsoft Purview eDiscovery, with the ability to perform targeted and large-scale collections while maintaining strict chain of custody and defensibility standards. While digital forensics experience is valuable, this role is centered on practical execution of eDiscovery collection and preservation processes.
A day in this role_
- Execute defensible data preservation and collection activities across endpoints, servers, cloud platforms, and enterprise systems
- Support end-to-end eDiscovery workflows, including identification, preservation, collection, processing, and handoff for review
- Perform targeted and bulk collections using forensic and eDiscovery tools
- Manage legal hold implementations and data preservation strategies
- Conduct data triage and validation to ensure completeness and defensibility of collections
- Collaborate with Legal, Compliance, HR, and Security teams to support investigations and litigation matters
- Utilize Microsoft Purview eDiscovery for case management, search, collection, and export activities
- Process and analyze data using Nuix Workstation or equivalent platforms
- Leverage EnCase tools for forensic acquisition and analysis where required
- Maintain chain of custody and documentation for all evidence handling activities
- Develop and maintain standard operating procedures for eDiscovery and forensic workflows
- Provide technical expertise during audits, regulatory inquiries, and internal investigations
The expertise requested_
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience)
- 3+ years of experience in digital forensics, eDiscovery, or a closely related field
- Hands-on experience with at least one of the following tools: EnCase (any product suite), Nuix (any product, preferably Nuix Workstation), or Microsoft Purview eDiscovery
- Experience performing data preservation and defensible collection activities
- Understanding of the eDiscovery lifecycle and legal/regulatory requirements
- Knowledge of file systems, operating systems, and data structures
- Strong documentation and reporting skills
- Ability to manage multiple cases and priorities simultaneously
Desired or nice to have expertise_
- Experience with multiple tools across EnCase, Nuix, and Microsoft Purview eDiscovery
- Familiarity with cloud data sources including Microsoft 365, Exchange Online, OneDrive, and Teams
- Experience with forensic imaging and endpoint data acquisition
- Knowledge of scripting or automation (PowerShell, Python, etc.)
- Industry certifications such as EnCE, GCFA, CCE, or Relativity certifications
- Experience supporting litigation, regulatory, or internal investigation matters
Our Core values are focus to inclusion and diversity, all qualified applicants will be considered for employment and will go thru a fair recruitment process regardless of their race, religion, gender identity, sexual orientation, national origin or disability status.
Your Journey with us begins here!!