Digital Forensic Investigator

Description

The Investigative Support Forensics Services Examiner will be a member of the Global Cyber Defense team and will be responsible for assisting with the delivery of digital forensics services to customers across the Haleon.  The successful applicant will provide support to the Forensic Services Manager for various incident types by following written standard operating procedures and help support investigations led from Cyber Incident Response, HR, Corporate Investigations, Legal etc. They will assist in the collection of evidence to support the investigations in a forensically sound manner ensuring evidential integrity and chain of custody throughout the process. They will use a set of Forensic tools to obtain digital evidence and manage cases using a Case Management Tool.

Key Responsibilities

Deliver digitally sound forensic evidence to support technical and non-technical investigations led by investigative groups across Haleon.

• Collect forensically sound evidence, as directed by the Forensic Services Manager, either directly or by partnering with various IT Service organizations, external third-party service providers and global business partners to support technical and non-technical investigations.
• Provide support for forensic investigations of various incident types by following written standard operating procedures.
• Responsible for maintaining the security for and chain of custody (CoC) of all evidential artefacts and supporting documentation.
• Help identify and assist in delivering incremental service and technical improvement programmes that deliver increased capability/reduce costs.
• Be aware of the need to partner with the corporate investigation process to ensure HR and disciplinary processes are followed.
• Be aware of Legal requirements to ensure all applicable laws are complied with both during evidence collection and incident management.
• Ensure evidential collection complies with applicable Privacy laws and regulations in the relevant jurisdiction and complies with the corporate approval process.

Basic Qualifications:

• Bachelor's degree in information technology, Information Security, Information Assurance, Information Management or 3 years demonstrable experience in Digital Forensics.
• Information security, ideally digital forensics/Incident Response (or equivalent experience from additional training/roles).
• Broad knowledge of information security. Working knowledge required to complete day to day forensic tasks (device imaging and analysis etc.).
• A good understanding of Investigation processes, IT systems and security services.
• Demonstrable experience in the use of digital forensic tools such as Encase, FTK, Cellebrite or XRY.
• Demonstrable experience in the use of Enterprise security tools such as Splunk and CrowdStrike.
• Demonstrable experience and knowledge of evidential handling processes and procedures ideally in an enterprise environment.
• Knowledge of network topology and security to include data analysis, operating system attributes and other industry best practices related to cyber defense strategies. Strong technical experience including Linux/Unix. Strong organizational skills, detail oriented in both written and verbal communications.
• Knowledge of and experience in using programming languages and command-shells such as Python and PowerShell.

Preferred Qualifications:

• Bachelor's degree in information technology, Information Security, Information Assurance, Information Management, or equivalent experience.
• Digital forensics/Incident Response (or equivalent experience from additional training/roles).
• Network infrastructure, malware analysis, memory analysis, network analyst, systems administrator.

Optional certifications in the following technologies:

• eDiscovery – Relativity, OpenText Axcelerate, Nuix
• Digital forensics – OpenText EnCase, Cellebrite, Access Data FTK, AXIOM, XRY, X-ways

Optional IT Security certifications from the following providers:

• Certified completion of relevant SANS courses in Windows, Mac, iOS or Memory forensics, GCIH, GCIA, GCFA, GCFE

Care to join us. Find out what life at Haleon is really like www.haleon.com/careers/

At Haleon we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone. We're striving to create a climate where we celebrate our diversity in all forms by treating each other with respect, listening to different viewpoints, supporting our communities, and creating a workplace where your authentic self belongs and thrives. We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.

As you apply, we will ask you to share some personal information, which is entirely voluntary. We want to have an opportunity to consider a diverse pool of qualified candidates and this information will assist us in meeting that objective and in understanding how well we are doing against our inclusion and diversity ambitions. We would really appreciate it if you could take a few moments to complete it. Rest assured, Hiring Managers do not have access to this information and we will treat your information confidentially.

Haleon is an Equal Opportunity Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, Haleon may be required to capture and report expenses Haleon incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure Haleon’s compliance to all federal and state US Transparency requirements.