eDiscovery Forensic Analyst

SGI Global is seeking an eDiscovery Forensic Analyst to support the Office of the Comptroller of the Currency (OCC). The Analyst will provide professional eDiscovery and forensic support services aligned with the OCCs mission to defensibly identify preserve and collect electronically stored information (ESI) for litigation investigations and administrative proceedings. This position will operate as part of a high-performing team supporting the Chief Counsel Information Systems Group (CCISG) and OCCs Litigation and Enforcement divisions.

Key Responsibilities

• Conduct forensic imaging and targeted data extractions from hard drives and mobile devices using tools such as EnCase FTK Imager Magnet AXIOM Cellebrite GrayKey or Oxygen Forensics.
• Coordinate and execute collections of ESI from multiple sources including Office 365 (Outlook Teams) SharePoint OneDrive eDocs network file shares and mobile devices following legally defensible procedures and chain-of-custody protocols.
• Work closely with OCC attorneys IT staff and system owners to identify preserve and collect potentially discoverable data in accordance with OCC policy and the Electronic Discovery Reference Model (EDRM) left-side processes.
• Support data culling tracking and documentation of collection activities ensuring auditability and compliance with OMB M-21-31 logging requirements.
• Develop and maintain project documentation including integrated master schedules (IMS) collection logs audit reports and technical documentation.
• Prepare detailed forensic and technical reports for use in investigations and legal proceedings.
• Assist with the development and implementation of OCC preservation procedures and ensure the protection and confidentiality of all government data.
• Maintain proficiency in current and emerging eDiscovery and forensic tools and practices

Minimum Qualifications

• Minimum 2 years of experience in an eDiscovery role which encompasses each of the following tasks:
  
  • Using mobile forensic tools (i.e. Cellebrite UFED/PA GrayKey Oxygen Forensics Magnet AXIOM etc.) to perform forensic imaging and analysis from mobile devices.
    
  • Experience with hard drive imaging and targeted data extraction using such tools as Encase FTK Imager etc. using proper acquisition protocols including use of writeblockers and chain-of-custody procedures.
    
  • Experience with collaboration and messaging platform data such as Microsoft Teams Skype and Slack.
  • Experience reviewing normalizing and converting exported data files (CSV JSON or HTML) for ingestion of such formats into eDiscovery and review platforms using tools such as Message Crawler.
    
  • Experience with preparing detailed technical reports for use in investigations administrative proceedings and court.

Preferred Certifications

• An active Computer Forensics Examiner certification (such as Cellebrite CCO/CCPA EnCE GCFE CCE or CFCE.).
• Experience with handling case management tasks including oversight of case data and ESI preservation.
• Experience with using Litigation Holds software.
• Experience with using preservation tools such as Microsoft Purview.
• Experience with collecting and preserving data from network file shares using industry standard tools and techniques.
  
• Experience with cloud data acquisitions from services such as Microsoft 365.

SGI Global provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race color religion gender sexual orientation gender identity or expression national origin age disability genetic information marital status amnesty or status as a covered veteran in accordance with applicable federal state and local laws.

Required Experience:

IC