Computer Forensics Examiner

Start: Immediate
Toronto, Ontario

Position Responsibilities:

• Attend on-site at client locations to collect data and advise
• Conduct detailed computer forensic analysis with the potential for expert testimony
• Affidavit, deposition, and report writing
• Extensive client contact as part of a Digital Wyzdom investigative team
• Assist in marketing with established Toronto Area clients

Education and Background Requirements:

Technical Qualifications – Minimum

• Strong “hands on” computer hardware experience with desktops/ laptops (including Macs), servers,  networks, PDAs/ cellphones
• Knowledge of Windows OS (NT, 2000, XP, Vista, Server 2000, Server 2003) and Exchange/ Outlook email
• Proficient in Encase, FTK, Paraben, Helix and other third party forensic tools
• Experience in cloner hardware (e.g. Logicube hard drive cloners) and logical acquisition tools (e.g. Robocopy, etc.)
• At least 1 year of computer forensics experience in an investigative capacity
• Full understanding of proper data collection techniques, chain of custody, documentation and Federal/Provincial Search and Seizure Guidelines
• Excellent communication skills – in particular the ability to explain technical issues to clients, lawyers and juries in simple terms

Technical Qualifications – Strong Plus

• Understanding of network architecture and flow
• Knowledge of MAC OS and Apple music devices
• Linux/ Unix experience
• Experience with multiple email systems including Lotus Notes, Sendmail, Eudora, Mozilla, Thunderbird, etc.
• EnCE, CFCE or equivalent certification
• Working with Provincial or Federal Law Enforcement
• Experience working with lawyers or carrying out forensic analysis as part of litigation, including being named as an expert in litigation, with resulting preparation of affidavits and declarations