Digital Forensic Investigator

Description

The Investigative Support Forensics Services Examiner will be a member of the Global Cyber Defense team and will be responsible for assisting with the delivery of digital forensics services to customers across the Haleon. The successful applicant will provide support to the Forensic Services Manager for various incident types by following written standard operating procedures and help support investigations led from Cyber Incident Response, HR, Corporate Investigations, Legal etc. They will assist in the collection of evidence to support the investigations in a forensically sound manner ensuring evidential integrity and chain of custody throughout the process. They will use a set of Forensic tools to obtain digital evidence and manage cases using a Case Management Tool.

Key Responsibilities

Deliver digitally sound forensic evidence to support technical and non-technical investigations led by investigative groups across Haleon.
- Collect forensically sound evidence, as directed by the Forensic Services Manager, either directly or by partnering with various IT Service organizations, external third-party service providers and global business partners to support technical and non-technical investigations.
- Provide support for forensic investigations of various incident types by following written standard operating procedures.
- Responsible for maintaining the security for and chain of custody (CoC) of all evidential artefacts and supporting documentation.
- Help identify and assist in delivering incremental service and technical improvement programmes that deliver increased capability/reduce costs.
- Be aware of the need to partner with the corporate investigation process to ensure HR and disciplinary processes are followed.
- Be aware of Legal requirements to ensure all applicable laws are complied with both during evidence collection and incident management.
- Ensure evidential collection complies with applicable Privacy laws and regulations in the relevant jurisdiction and complies with the corporate approval process.

Basic Qualifications:

- Bachelor's degree in information technology, Information Security, Information Assurance, Information Management or 3 years demonstrable experience in Digital Forensics.
- Information security, ideally digital forensics/Incident Response (or equivalent experience from additional training/roles).
- Broad knowledge of information security. Working knowledge required to complete day to day forensic tasks (device imaging and analysis etc.).
- A good understanding of Investigation processes, IT systems and security services.
- Demonstrable experience in the use of digital forensic tools such as Encase, FTK, Cellebrite or XRY.
- Demonstrable experience in the use of Enterprise security tools such as Splunk and CrowdStrike.
- Demonstrable experience and knowledge of evidential handling processes and procedures ideally in an enterprise environment.
- Knowledge of network topology and security to include data analysis, operating system attributes and other industry best practices related to cyber defense strategies. Strong technical experience including Linux/Unix. Strong organizational skills, detail oriented in both written and verbal communications.
- Knowledge of and experience in using programming languages and command-shells such as Python and PowerShell.

Preferred Qualifications:

- Bachelor's degree in information technology, Information Security, Information Assurance, Information Management, or equivalent experience.
- Digital forensics/Incident Response (or equivalent experience from additional training/roles).
- Network infrastructure, malware analysis, memory analysis, network analyst, systems administrator.

Optional certifications in the following technologies:

- eDiscovery - Relativity, OpenText Axcelerate, Nuix
- Digital forensics - OpenText EnCase, Cellebrite, Access Data FTK, AXIOM, XRY, X-ways

Optional IT Security certifications from the following providers:

- Certified completion of relevant SANS courses in Windows, Mac, iOS or Memory forensics, GCIH, GCIA, GCFA, GCFE

At Haleon we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone. We're striving to create a climate where we celebrate our diversity in all forms by treating each other with respect, listening to different viewpoints, supporting our communities, and creating a workplace where your authentic self belongs and thrives. We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.

Haleon is an Equal Opportunity Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orie