Digital Forensics Specialist - Cloud Platforms

Under the direction of the Corporate Information Security Digital Forensics Manager, the Digital Forensics Analyst position will support the Digital Forensics program for Truist Financial Corporation., Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Collaborate with internal and external stakeholders to include, but not limited to, Legal, Teammate Relations (Human Resources), Corporate Security, Incident Response, and Security Operations.
2. Support stakeholder investigations through the forensic acquisition and analysis of electronically stored information (ESI) and devices to include proper documentation and handing of data according to applicable standards and procedures, and industry best practices.
3. Maintain knowledge of evidence collection, handling and storage procedures, including chain of custody best practices.
4. Utilize approved forensic tools and methods to collect and analyze ESI and devices, especially in the context of corporate investigations, civil litigation, or criminal proceedings.
5. Conduct digital forensic investigations into diverse allegations of misconduct and wrongdoing, including violations of company policy; government regulations; and local, state, and U.S. laws.
6. Produce forensic analysis reports in support of stakeholder investigations suitable for presentation in civil or criminal proceedings.

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. A.A. or A.S. degree in relevant field or equivalent work experience
2. 1+ years working experience in incident response or digital forensics investigations
3. Awareness of forensic tools and methods used to collect and analyze electronically stored information and devices
4. Knowledge of evidence collection, handling and storage procedures
5. Analytical and problem-solving skills
6. Knowledge of network protocols and acquisition of electronically stored information (ESI) from network sources
7. Strong oral and written communications skills

Preferred Qualifications:

1. Industry recognized Digital Forensics training and/or certifications (CCE, ACE, EnCE, GCFE, etc.)
2. Additional certifications from IACIS, SANS, or other non-vendor specific training
3. Experience with industry accepted Digital Forensics tools