"Alerted.org

Fairfax, VA, USA | Full Time

SGI Global is seeking an eDiscovery Forensic Analyst to support the Office of the Comptroller of the Currency (OCC). The Analyst will provide professional eDiscovery and forensic support services aligned with the OCC's mission to defensibly identify, preserve, and collect electronically stored information (ESI) for litigation, investigations, and administrative proceedings. This position will operate as part of a high-performing team supporting the Chief Counsel Information Systems Group (CCISG) and OCC's Litigation and Enforcement divisions.

Key Responsibilities

+ Conduct forensic imaging and targeted data extractions from hard drives and mobile devices using tools such as EnCase, FTK Imager, Magnet AXIOM, Cellebrite, GrayKey, or Oxygen Forensics.

+ Coordinate and execute collections of ESI from multiple sources, including Office 365 (Outlook, Teams), SharePoint, OneDrive, eDocs, network file shares, and mobile devices, following legally defensible procedures and chain-of-custody protocols.

+ Work closely with OCC attorneys, IT staff, and system owners to identify, preserve, and collect potentially discoverable data in accordance with OCC policy and the Electronic Discovery Reference Model (EDRM) left-side processes.

+ Support data culling, tracking, and documentation of collection activities, ensuring auditability and compliance with OMB M-21-31 logging requirements.

+ Develop and maintain project documentation, including integrated master schedules (IMS), collection logs, audit reports, and technical documentation.

+ Prepare detailed forensic and technical reports for use in investigations and legal proceedings.

+ Assist with the development and implementation of OCC preservation procedures and ensure the protection and confidentiality of all government data.

+ Maintain proficiency in current and emerging eDiscovery and forensic tools and practices

Minimum Qualifications

+ Minimum 2 years of experience in an eDiscovery role which encompasses each of the following tasks:

+ Using mobile forensic tools (i.e. Cellebrite UFED/PA, GrayKey, Oxygen Forensics, Magnet AXIOM, etc.) to perform forensic imaging and analysis from mobile devices.

+ Experience with hard drive imaging and targeted data extraction, using such tools as Encase, FTK Imager, etc., using proper acquisition protocols, including use of writeblockers and chain-of-custody procedures.

+ Experience with collaboration and messaging platform data, such as Microsoft Teams, Skype, and Slack.

+ Experience reviewing, normalizing, and converting exported data files (CSV, JSON, or HTML) for ingestion of such formats into eDiscovery and review platforms, using tools such as Message Crawler.

+ Experience with preparing detailed technical reports for use in investigations, administrative proceedings and court.

Preferred Certifications

+ An active Computer Forensics Examiner certification (such as Cellebrite CCO/CCPA, EnCE, GCFE, CCE, or CFCE.).

+ Experience with handling case management tasks, including oversight of case data and ESI preservation.

+ Experience with using Litigation Holds software.

+ Experience with using preservation tools such as Microsoft Purview.

+ Experience with collecting and preserving data from network file shares, using industry standard tools and techniques.

+ Experience with cloud data acquisitions from services such as Microsoft 365.

SGI Global provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws .